Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa
File:                     b6aef4d5-7853-36ff-91b5-a441b0020316.roa (raw, json)
Hash identifier:          V9vU5k2bcrV85wEg4/vPe9KKiGHDsYwfzMhSWJmc/BA=
Subject key identifier:   D6:7E:87:DE:61:5E:ED:34:CF:11:93:C4:5F:44:BE:D8:BD:8E:D4:3A
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584E1FA9A57A2E97414244D3A640
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     1403
IP address blocks:        96.127.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a5:7a:2e:97:41:42:44:d3:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=6f47041c-7ea4-4399-81eb-81ca60e0660f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:87:50:9d:12:ab:2f:4f:68:56:a5:d6:f8:
                    25:f0:2c:bf:7a:03:95:1d:66:f9:5e:69:2b:29:1f:
                    74:d3:a7:e5:03:8b:13:4b:ec:08:b6:cc:42:b0:72:
                    64:d8:3f:ac:44:04:f3:27:36:79:7a:06:f9:f4:74:
                    80:f0:92:61:c5:f2:e9:5a:a3:8e:fc:7f:31:3a:99:
                    41:e1:44:8d:6e:1d:e2:bd:17:0b:57:37:f8:c4:44:
                    7d:e3:24:1d:7f:9e:dc:de:86:1d:29:5f:df:7b:17:
                    38:df:2c:af:c7:af:01:7f:ba:ca:a2:11:22:db:d4:
                    20:ad:b3:01:82:1e:58:15:8c:32:e6:ce:33:ec:d6:
                    86:5b:04:f3:ea:71:67:b3:17:58:26:d1:f1:97:32:
                    23:a9:5a:77:de:ac:44:34:e9:a3:47:a6:42:23:35:
                    51:f6:9a:69:57:cf:ab:df:0f:0f:0e:fc:8f:18:69:
                    42:35:5e:93:f1:7b:59:3b:1b:b1:d1:83:81:09:94:
                    aa:1e:62:06:5b:6b:20:61:54:8c:10:51:96:30:cb:
                    0d:a1:49:f4:f1:fc:51:32:d5:82:fe:be:c3:1d:7a:
                    85:41:9d:91:dc:3f:36:3d:e3:96:de:fc:c5:d8:7d:
                    e5:78:d6:58:12:ed:2d:18:5d:eb:c9:db:bf:85:0f:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7E:87:DE:61:5E:ED:34:CF:11:93:C4:5F:44:BE:D8:BD:8E:D4:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:50:c6:b1:6f:fb:67:c5:11:48:8d:e2:02:72:fd:61:d6:27:
         c3:c3:d0:86:aa:6b:52:2c:bd:e5:27:40:16:fb:98:11:4f:1a:
         69:4b:52:e8:9f:df:84:53:76:a2:cb:90:42:09:08:0c:4e:ae:
         10:c1:66:79:f7:83:21:1b:e6:61:9f:bf:87:ce:bb:c3:6a:56:
         e1:ba:9c:ae:8d:44:b7:38:41:86:a0:95:2c:ae:ad:5b:73:4c:
         68:cf:6f:30:9b:4c:cf:75:f1:a8:c1:63:39:b4:3a:8c:2e:61:
         ef:cf:7c:3e:4d:94:4c:e5:53:ec:92:d1:79:1d:1d:21:ab:03:
         69:ae:48:81:e3:e1:6c:4e:e7:07:34:5f:9b:be:55:5c:1f:2e:
         eb:d2:00:ce:30:b0:ff:4d:7b:29:f5:ac:9d:70:de:56:ca:1a:
         a5:14:f3:c4:61:7e:e5:23:dc:e7:91:c4:5d:8d:d5:a7:f8:1a:
         b0:6f:25:3c:d3:3d:f6:d8:a1:6a:f6:fa:6e:88:43:cd:fc:c9:
         3c:08:51:19:ff:5e:6e:0b:cd:d0:58:4c:1f:21:58:1d:1a:eb:
         30:72:aa:3f:b6:c9:21:4e:ad:69:80:35:6d:58:a7:50:65:ee:
         c9:1d:f6:48:41:0c:38:60:e7:a6:f1:47:07:ce:b0:7a:23:6a:
         c5:53:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:22:38 2026 by rpki-client