Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/35d3f806-ab98-3711-84ee-81f48a1a9349.roa
File:                     35d3f806-ab98-3711-84ee-81f48a1a9349.roa (raw, json)
Hash identifier:          HCjt2onMnoYShhHhd8EanQf1Knrqa8jaCXLSKDBU7Ds=
Subject key identifier:   F6:D7:B2:AB:05:E7:67:89:8C:B5:42:96:B7:E7:1B:5F:EB:8A:41:CC
Certificate issuer:       /CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38
Certificate serial:       010D0C9F4328584DEF45E04428D6A55F294B0A0E
Authority key identifier: 49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/35d3f806-ab98-3711-84ee-81f48a1a9349.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     7018
IP address blocks:        192.124.92.0/24 maxlen: 24
                          192.124.93.0/24 maxlen: 24
                          192.124.94.0/24 maxlen: 24
                          192.124.95.0/24 maxlen: 24
                          192.124.96.0/24 maxlen: 24
                          192.132.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:e0:44:28:d6:a5:5f:29:4b:0a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=cbb9a7a1-4fa0-4d5e-a3eb-95397519e9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:2a:95:d0:a1:c9:e7:aa:57:9a:c1:b5:f7:
                    a1:a8:97:9e:f1:5e:e6:5e:31:8b:45:84:08:25:9b:
                    e7:87:36:4a:03:2b:2c:ce:83:7b:58:5a:e9:78:4f:
                    d7:b1:52:6e:25:06:d2:85:b6:91:45:94:83:b4:74:
                    62:0f:e0:35:ad:9b:18:a9:17:5f:6a:2c:31:54:7d:
                    6c:87:6d:4c:ab:52:3b:c3:ec:21:02:53:09:2d:4a:
                    cb:66:30:57:0a:bf:93:24:b3:1a:ad:2b:9c:56:28:
                    b9:04:2d:79:67:3f:46:13:de:9a:7f:ca:15:1d:d9:
                    30:7c:49:4e:28:7e:94:9a:fd:32:c0:23:f4:ec:d2:
                    51:23:77:e3:2c:d9:2f:a3:1a:6d:5a:c0:da:01:43:
                    cb:b3:c0:18:c0:84:14:5e:85:4f:47:e1:5e:4a:d3:
                    11:21:a2:68:ff:37:af:35:6b:46:12:28:9c:d9:86:
                    83:6f:51:43:f2:99:1a:31:bc:cc:2b:de:85:be:9e:
                    28:78:c0:d4:1c:64:eb:d5:be:93:2a:78:82:94:d0:
                    94:d4:8c:dc:12:49:c9:1c:31:b6:cc:4f:85:56:b9:
                    7f:53:59:f8:de:d2:1e:c2:f2:3a:82:89:ea:30:b2:
                    0f:6e:71:79:61:a5:b8:ed:1d:e7:92:34:0c:e8:12:
                    f7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D7:B2:AB:05:E7:67:89:8C:B5:42:96:B7:E7:1B:5F:EB:8A:41:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/35d3f806-ab98-3711-84ee-81f48a1a9349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl

            X509v3 Authority Key Identifier:
                keyid:49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.92.0-192.124.96.255
                  192.132.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:01:75:91:df:15:4d:75:58:85:02:fc:e0:39:c6:be:36:69:
         c4:00:54:96:bd:66:ce:76:8f:01:24:0b:3c:d6:38:32:41:f0:
         42:94:ac:90:27:9d:eb:56:b5:bf:63:2c:cf:a8:e1:b0:d4:77:
         cb:a7:f6:87:8a:2e:d5:dd:17:1a:1a:6c:72:18:e3:2a:9a:7f:
         49:bd:95:b9:09:d6:2a:f0:41:0a:46:ea:7f:4f:1e:62:b0:a4:
         c8:5f:2e:4a:4c:72:19:33:2c:7f:fd:1e:90:b6:0c:4e:cf:bb:
         d4:5e:57:57:86:87:41:a2:36:be:57:7f:f2:e5:cc:4a:2e:37:
         aa:02:a4:aa:3d:89:50:98:f1:1f:eb:a5:c3:96:f6:ac:a4:91:
         43:1f:79:7a:45:85:5b:d1:7f:73:41:55:50:ab:37:d1:5c:b4:
         86:7f:b5:9d:62:3f:df:18:4f:30:29:1c:2e:00:d2:4f:63:81:
         76:a2:95:eb:2e:95:e5:a3:55:84:7b:19:51:39:f2:2a:b0:f9:
         4a:c5:fc:81:4e:6e:93:e8:f1:fa:81:b0:d4:20:6b:93:1f:34:
         d0:5e:58:de:10:b5:f9:91:d1:b5:58:8b:41:db:04:78:03:0d:
         40:47:58:9b:b4:72:7a:af:47:0a:1d:ea:84:54:54:58:f5:56:
         d3:11:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:39:12 2026 by rpki-client