Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/94209a94-76a1-3781-b0b4-d2422e2072aa.roa
File:                     94209a94-76a1-3781-b0b4-d2422e2072aa.roa (raw, json)
Hash identifier:          RjpPyehHugnWAZMhEuoiC3rmLTERVzCkQwBOc3+K7JM=
Subject key identifier:   FE:2C:97:4C:54:36:2E:5A:F5:2C:59:BF:AE:37:63:8A:42:7A:A5:51
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E1B8A7C5159C44A73A825F8C0
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/94209a94-76a1-3781-b0b4-d2422e2072aa.roa
Signing time:             Mon 08 Jun 2026 21:34:22 +0000
ROA not before:           Mon 08 Jun 2026 21:34:22 +0000
ROA not after:            Sun 06 Sep 2026 21:34:22 +0000
asID:                     402221
IP address blocks:        192.231.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:8a:7c:51:59:c4:4a:73:a8:25:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun  8 21:34:22 2026 GMT
            Not After : Sep  6 21:34:22 2026 GMT
        Subject: CN=a72da89a-224c-47dc-8f0f-319f306d0260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:b9:8e:1a:34:a0:f4:14:f5:57:62:24:33:
                    56:0a:68:0f:37:f9:6e:bd:43:5f:fb:9d:2f:10:73:
                    51:d7:4d:67:d7:f4:57:fa:39:90:73:ce:7f:45:9c:
                    ba:14:4f:ae:37:d9:7c:11:8b:8a:6f:5c:51:93:d4:
                    89:49:c3:e6:f3:e5:4d:1d:18:92:81:60:32:9a:17:
                    b1:9a:b8:c5:24:78:a6:ad:38:99:83:99:2c:a4:76:
                    87:42:76:45:30:8e:00:16:b7:b3:9b:08:5a:de:72:
                    45:16:f4:77:9b:0d:e7:74:7e:9e:02:82:92:51:b9:
                    13:2e:90:3f:27:30:f9:b9:e4:71:fe:c7:a1:db:2e:
                    93:ba:cc:3e:66:40:0f:86:a2:a7:77:f2:8e:c1:89:
                    a1:66:14:1c:6a:cb:bc:8c:c2:d7:bf:2f:28:c5:f8:
                    3c:37:09:6a:47:39:81:05:bc:8a:93:1d:06:29:e0:
                    33:6e:4f:ce:70:e8:6d:ef:20:27:f3:f3:32:f0:36:
                    75:cb:1e:06:be:dd:78:96:27:26:36:e7:38:c4:18:
                    f1:c7:2b:d1:71:b2:b2:87:72:72:55:86:5d:41:ea:
                    14:84:af:4a:9d:73:8d:7b:2d:88:fb:26:db:cd:c9:
                    3e:8c:5f:82:23:ae:f6:8e:fe:6f:c4:d2:18:9c:6b:
                    df:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2C:97:4C:54:36:2E:5A:F5:2C:59:BF:AE:37:63:8A:42:7A:A5:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/94209a94-76a1-3781-b0b4-d2422e2072aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:da:14:89:b1:9b:2c:42:4d:ad:00:b1:4f:a7:08:c0:ae:17:
         32:dc:15:43:45:99:33:f3:07:8d:4d:5a:70:15:8b:5a:ed:fe:
         3a:9b:29:13:e1:2e:cf:8c:58:ae:25:27:99:eb:1e:19:ec:09:
         2d:59:c8:cf:d9:57:78:2d:84:fb:f4:22:04:d9:d7:66:c8:08:
         c8:94:85:f7:b5:f6:01:0c:43:1d:ad:36:08:83:9e:af:f2:9c:
         b1:13:d3:ce:15:d7:2f:3f:54:a3:3b:78:75:16:b3:89:d7:d7:
         ef:19:f3:bb:63:a7:84:7f:f2:14:d7:73:22:3f:61:e4:6d:07:
         93:43:e6:03:fe:5b:3d:9f:2a:04:76:4b:3e:80:ba:74:9a:9c:
         76:ab:58:7f:29:16:8b:c4:19:2d:46:c8:f3:40:90:f3:2b:6b:
         0a:d1:3f:9c:de:9c:b2:7c:d8:4c:13:74:08:e4:05:24:22:25:
         82:6c:40:f4:99:26:3b:7b:f5:08:be:24:8c:45:e1:be:03:1b:
         0b:cb:8d:4c:b5:fa:87:c0:34:1a:91:6a:6c:33:fb:76:4f:64:
         c9:97:da:44:40:25:b1:d5:6f:b0:19:b2:83:90:02:03:cc:96:
         48:24:03:f6:f3:72:bc:67:a0:d0:36:0e:65:1b:24:b2:47:40:
         1b:6d:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:53 2026 by rpki-client