Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/2bebc1fb-8225-314e-b070-8f8c395c3fe6.roa
File:                     2bebc1fb-8225-314e-b070-8f8c395c3fe6.roa (raw, json)
Hash identifier:          KVU5NsF28smAh3SENCovEe0sNwzwzYC8pD/37Jndlm8=
Subject key identifier:   1D:91:0C:BB:27:3E:1D:C3:09:3F:AA:24:DF:9A:70:4C:1E:FA:B8:24
Certificate issuer:       /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Certificate serial:       010D0C9F4328584E1FA99F0C60CD32DA42B92B00
Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/2bebc1fb-8225-314e-b070-8f8c395c3fe6.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     32097
IP address blocks:        208.110.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:9f:0c:60:cd:32:da:42:b9:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=b6ec5d79-50a3-4c25-8e5d-1ebe649c44b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:bb:1c:72:d6:1d:11:e2:23:ef:bd:4b:22:
                    78:70:13:34:d1:fe:e9:6b:10:44:b8:58:44:70:dd:
                    20:43:51:30:5c:be:cd:95:1c:32:87:ba:4e:8b:eb:
                    dc:5d:06:d8:5a:e8:c5:bf:f0:5d:45:a3:90:e5:aa:
                    7c:4e:06:ed:a3:c4:b1:b5:03:af:2d:f6:4e:3a:79:
                    03:8f:6c:a1:87:49:2d:e1:4e:0e:5e:f6:50:26:ea:
                    ff:8e:1c:76:95:4e:1a:cb:b1:4f:e9:53:d3:81:35:
                    e3:a3:bc:dd:61:85:ee:68:03:97:25:23:f3:fe:9c:
                    42:d5:69:5b:f3:ed:3e:f6:fa:eb:00:99:cc:93:ee:
                    64:6e:0f:c8:d1:6d:4f:3f:6f:77:ec:c4:d4:12:f0:
                    40:1c:8d:a4:55:4d:db:fe:33:0a:ea:58:09:4f:30:
                    ba:d4:21:69:5d:9a:75:71:2c:5b:ba:57:43:41:c2:
                    41:20:a0:62:71:1f:6f:e4:2d:8a:c4:92:db:dc:ed:
                    38:e2:b5:e9:1c:b6:df:71:ea:dd:a0:26:ac:a3:b3:
                    6a:1b:a6:1e:e7:f9:ff:ca:be:eb:0b:49:52:60:ca:
                    0f:11:44:3a:66:16:af:f6:0f:36:03:36:16:92:97:
                    58:a8:dd:eb:17:56:55:3e:11:37:82:6e:ac:0a:ad:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:91:0C:BB:27:3E:1D:C3:09:3F:AA:24:DF:9A:70:4C:1E:FA:B8:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/2bebc1fb-8225-314e-b070-8f8c395c3fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.110.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:44:fe:c0:4c:0a:e6:6e:97:0e:79:fa:38:09:0e:c4:c2:59:
         1f:7d:db:d5:3d:2d:27:a4:f4:24:b3:5a:08:7e:96:53:ad:bb:
         e3:a0:00:de:11:59:04:a1:e2:c4:81:73:a4:6b:03:c0:f2:aa:
         a0:cf:07:4c:73:e6:c4:3b:bb:35:37:d5:1d:71:26:21:ca:c8:
         c0:ca:59:7d:af:3e:eb:8c:44:86:36:84:48:ca:f2:77:d3:74:
         73:5c:40:11:2d:3c:43:d9:2f:08:8d:11:47:c4:64:f9:24:47:
         85:a8:4c:25:04:2e:9a:10:4b:73:49:c0:d1:ab:b2:42:57:d5:
         b7:00:2a:bc:f9:18:5a:bf:5a:9f:f8:bf:c0:9a:3d:52:81:9c:
         fb:cc:ea:54:c3:24:dd:0a:ae:5c:1c:a0:8e:28:6b:73:be:7c:
         57:85:15:97:a7:c4:dd:b2:e7:f7:c6:5f:f0:ca:42:30:cc:1d:
         e0:30:23:6c:d2:b3:f2:0c:ef:df:97:11:53:ba:64:00:24:25:
         dc:62:4f:2f:8c:be:92:37:3c:39:df:5f:1b:54:d3:24:79:11:
         da:bf:68:d1:98:dc:51:e8:f8:77:6a:c9:6f:38:cd:bb:25:94:
         0c:d5:ee:5d:13:ec:ef:5b:3f:93:c4:df:21:50:c5:28:03:2a:
         42:a2:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:27:41 2026 by rpki-client