Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/f7144ebd-d1d4-3483-a8ba-95452a3eb4e4.roa
File:                     f7144ebd-d1d4-3483-a8ba-95452a3eb4e4.roa (raw, json)
Hash identifier:          TIaFQmv8FNMggBxscXe3dzwTIUoMENoWdj/wn1XWObs=
Subject key identifier:   AD:02:DF:66:01:BE:36:26:9D:A8:31:FF:95:16:79:70:28:47:FB:92
Certificate issuer:       /CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
Certificate serial:       010D0C9F4328584E1E444F662F1026EB9BD18980
Authority key identifier: 36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/f7144ebd-d1d4-3483-a8ba-95452a3eb4e4.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     14977
IP address blocks:        192.146.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:4f:66:2f:10:26:eb:9b:d1:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=d6ed94fe-78d8-4bfe-a7ae-dfe096ce0415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:44:41:4e:3f:17:ef:9d:ad:41:28:21:73:
                    6a:ec:d4:c0:b6:94:9e:ba:f5:33:1c:6b:17:10:a1:
                    c0:a6:28:62:91:a2:6e:10:66:be:83:cd:8d:48:c0:
                    b4:5c:a2:78:26:52:4b:7c:43:e4:05:18:a3:98:5e:
                    a0:71:1c:11:3d:9b:72:bc:fa:48:69:f4:2c:7f:f6:
                    a8:5d:c3:28:79:64:9d:d5:84:7c:45:a2:77:82:1f:
                    e9:69:cc:55:3c:d7:37:81:17:da:9b:a1:22:2d:0b:
                    f3:79:01:00:bb:2b:33:57:39:fc:64:60:d8:c7:d7:
                    68:94:09:29:21:9c:d4:3c:7a:a4:01:4c:17:fb:d9:
                    54:86:dd:b1:5e:cf:8c:48:3c:30:98:a9:d9:f0:21:
                    7a:46:d5:ea:eb:d9:ae:30:6e:3e:96:f4:65:b0:43:
                    20:44:9d:32:04:74:48:91:3c:ca:8e:2f:6a:f6:1b:
                    65:39:9a:0d:ee:8a:ae:93:13:a3:d4:86:86:49:0e:
                    2a:a5:90:e8:90:39:82:cb:8a:bf:de:ea:1a:1f:24:
                    cc:aa:76:f6:1e:cc:93:91:9b:89:44:8e:f2:2b:c3:
                    9d:a6:80:5d:9a:7e:65:42:08:c3:48:de:81:a1:95:
                    93:91:a1:16:9d:4f:b8:9c:42:19:70:96:d5:4d:2c:
                    3c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:02:DF:66:01:BE:36:26:9D:A8:31:FF:95:16:79:70:28:47:FB:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/f7144ebd-d1d4-3483-a8ba-95452a3eb4e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl

            X509v3 Authority Key Identifier:
                keyid:36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.146.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a3:26:c1:a0:3d:4e:74:0b:33:3e:ae:e6:86:b2:36:5a:e3:
         e4:50:60:f1:4c:8b:d8:54:09:3c:dd:25:ad:03:65:a7:c3:bd:
         73:0b:54:66:d4:23:7f:a8:11:a8:ab:77:bf:a5:86:ac:01:6b:
         f9:31:0c:9b:78:66:19:d3:c7:17:d0:3e:09:c0:e5:0c:ae:ad:
         fb:91:16:85:87:25:cd:7c:d0:65:d4:ed:f6:29:4f:b7:96:a0:
         18:12:77:45:38:a0:17:b3:50:d6:8b:8a:83:d5:7a:53:5b:76:
         fb:63:9c:ba:db:37:32:c0:88:02:c7:3e:6a:42:6b:d7:b1:8a:
         a6:a8:56:66:7b:9b:0e:e8:41:a7:ae:f6:93:5d:12:55:18:69:
         c1:e1:e1:95:19:da:86:0e:60:64:2b:c3:43:e0:43:98:58:7b:
         19:f5:45:e9:4a:01:dd:70:58:e4:f2:61:b2:fd:dc:51:7a:b5:
         1e:3c:79:be:78:d5:9d:1b:f7:e2:cc:27:93:0a:20:4f:5b:99:
         6d:18:db:af:bb:71:59:78:09:89:36:0c:5a:29:15:e6:8e:72:
         f2:f4:67:46:40:a9:0d:a7:40:f4:76:88:a7:43:18:2e:c0:8c:
         01:ee:25:ea:fa:fe:b9:b3:0c:0b:be:f0:0c:b7:cb:37:94:34:
         97:ba:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:05:24 2026 by rpki-client