Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa
File:                     cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa (raw, json)
Hash identifier:          bddP9KdLRYC5wMw8sL5TTDBwF840Ymm8Rv2UX36OS0w=
Subject key identifier:   56:14:EC:7A:74:61:FD:AA:AD:38:B4:E0:DA:C1:C2:C8:15:95:B4:3D
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F4328584E1E449EBD9E6594078F6FAAD0
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     32590
IP address blocks:        192.69.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:9e:bd:9e:65:94:07:8f:6f:aa:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=d270baae-5b2f-407e-9ede-5b22a9d2e5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:28:cb:87:27:62:60:15:be:17:c7:f4:7e:
                    b8:29:4c:44:82:f4:d9:ae:4e:75:23:9e:b4:43:4f:
                    2d:b4:c5:17:62:f1:39:95:4f:2e:2a:5c:b5:94:01:
                    30:99:f4:30:56:52:a9:f1:83:81:a1:a7:31:e0:d1:
                    ed:f4:bd:fe:7f:99:11:b6:78:24:eb:39:b2:54:b6:
                    6c:83:1e:99:df:f5:16:15:de:c2:13:28:c0:a1:93:
                    07:83:74:4b:38:43:c0:2e:b6:86:6b:05:6f:2c:6c:
                    c8:a8:c4:54:e7:b0:c3:91:de:1b:50:55:5f:b2:ec:
                    9d:a0:4f:aa:dc:77:d6:7d:38:e9:29:47:6d:b8:bf:
                    70:47:35:8d:8e:02:0d:44:23:25:e1:cd:ec:9e:3e:
                    8f:90:79:d2:12:bf:b6:13:29:20:ca:eb:c9:7c:62:
                    7d:b6:bf:53:e4:00:01:7a:2e:d4:fc:74:9d:f1:34:
                    c7:91:44:50:8d:ca:ba:04:44:76:76:db:4f:c2:65:
                    6f:1f:92:e3:c0:40:b3:3a:9c:b5:29:8a:8b:5b:95:
                    a1:ff:2a:23:07:b1:c3:2d:ca:6a:82:73:0c:0b:25:
                    2d:8d:7e:fc:80:3f:24:4c:bf:91:f0:28:77:ac:19:
                    c8:de:3a:0d:46:b8:cf:43:49:c6:0d:ee:f3:f6:cd:
                    be:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:14:EC:7A:74:61:FD:AA:AD:38:B4:E0:DA:C1:C2:C8:15:95:B4:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:34:d2:04:71:3b:ea:6f:0c:91:df:89:c8:77:48:97:52:50:
         40:d5:21:20:a0:00:4e:ca:23:97:45:15:8b:e2:8c:27:2d:4b:
         fd:34:8d:ff:09:e6:e6:0b:ee:5e:b0:9d:6d:67:dc:0e:aa:fd:
         18:0c:47:35:24:47:e5:02:34:a3:64:87:68:a4:3f:74:45:b3:
         e1:2c:36:21:76:38:54:21:b2:d2:40:8f:52:27:4a:6a:37:4b:
         74:c1:c4:7d:05:87:a2:d4:74:b2:4b:70:b9:d3:55:59:e0:2e:
         f8:19:89:9c:64:c5:2a:b1:39:d7:b8:2e:fc:28:1e:1c:b1:08:
         ed:0a:32:80:c2:f3:00:9a:a0:3d:65:8d:24:d0:f7:af:89:33:
         08:83:af:3a:1e:46:78:1b:41:02:37:5a:51:66:e1:7f:3e:78:
         da:7c:3c:53:aa:22:7a:05:bf:db:09:c3:18:bb:f5:2b:6b:f5:
         f8:07:03:ba:3a:7f:0a:82:2a:10:34:24:50:55:7f:09:ea:06:
         18:f0:95:97:05:5b:85:5f:52:5b:95:ca:c2:5c:60:06:31:0b:
         48:54:6e:db:cd:aa:4b:21:46:dc:9a:03:21:6e:3d:04:1b:03:
         9b:c4:17:7b:8b:ff:09:84:f5:d7:c1:32:c6:2f:51:9c:c6:a0:
         b8:cc:1b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:53:22 2026 by rpki-client