Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/1886b87b-dd54-3a76-beb5-bd7c6e813d7d.roa
File:                     1886b87b-dd54-3a76-beb5-bd7c6e813d7d.roa (raw, json)
Hash identifier:          X2LIMO/5SBfnk6nqPXFB+J/Zc9gpBulLT9kK1T1VqnM=
Subject key identifier:   C8:B9:41:EE:16:3D:4A:D2:0F:75:84:54:A9:46:CE:86:03:33:83:57
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F4328584D86954C09698D9AAB1E072DC0
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/1886b87b-dd54-3a76-beb5-bd7c6e813d7d.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     2013
IP address blocks:        192.80.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4c:09:69:8d:9a:ab:1e:07:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=0f905542-fc08-407d-94a6-7436a862c76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:e7:e6:89:06:03:e7:e3:c2:40:07:f1:b0:
                    54:ea:6e:b9:93:b3:b3:10:64:91:e4:ee:d8:9d:97:
                    bb:45:35:1a:ce:75:76:5b:da:2d:9e:f9:f9:ac:a7:
                    8d:b0:b9:db:8c:08:2c:79:36:6f:97:09:52:6f:b5:
                    5b:18:38:cd:88:ab:61:d3:12:4b:b8:01:c7:41:d3:
                    80:cd:bf:d7:e5:e7:d5:4f:b0:03:85:37:8e:a2:ee:
                    21:2b:05:b7:27:df:13:eb:da:bb:31:35:dd:83:66:
                    ba:fb:85:64:ca:e6:fd:ca:c7:5a:c5:ec:17:50:4e:
                    67:68:39:51:0a:dc:3c:5e:e9:30:bd:90:9f:a8:b6:
                    36:b2:45:1e:1e:a1:66:4f:e4:38:b2:a4:8a:c6:b2:
                    1c:9d:12:fb:47:87:5d:0b:4c:0b:63:98:0c:66:95:
                    64:22:ae:d7:c3:18:fd:82:64:8f:b8:01:f5:2a:25:
                    b9:53:f2:b4:fb:23:fe:21:cd:93:01:75:ad:ce:9f:
                    9f:57:ab:a6:b7:85:99:47:0e:fd:9d:70:62:c2:b6:
                    86:71:18:c2:b6:88:24:35:4d:fc:78:4c:5e:7c:46:
                    4e:11:3f:df:29:70:50:34:f2:1d:48:f8:63:b1:b0:
                    4e:33:6d:70:0c:96:b0:a4:04:6f:12:13:13:af:a0:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B9:41:EE:16:3D:4A:D2:0F:75:84:54:A9:46:CE:86:03:33:83:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/1886b87b-dd54-3a76-beb5-bd7c6e813d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:03:fa:e5:99:7f:39:94:46:16:bc:00:27:3f:ad:64:fe:e9:
         78:27:e9:3c:15:38:d9:c6:1b:99:40:a1:ae:79:07:b8:48:63:
         c3:8f:db:7a:89:11:fb:6a:1b:be:e6:e2:dd:7a:2a:6c:d0:6b:
         68:f2:bb:e9:02:ef:76:d0:ed:68:07:87:11:48:5d:bd:ce:67:
         ae:d9:8a:2a:1e:c0:e4:f2:64:2f:00:fb:d8:44:87:06:bd:65:
         c9:e5:fd:ba:23:bf:dd:ff:dc:4d:88:13:90:4c:19:e7:6c:d5:
         48:61:c5:e1:a4:c2:63:5b:bb:64:e9:c3:b1:9b:8f:db:45:21:
         39:e6:cc:a4:02:26:a8:79:d8:e6:56:1e:88:10:a2:e9:5b:2d:
         33:c5:19:64:3b:9c:b0:09:1d:b6:44:43:20:0b:b8:bf:ea:d6:
         35:c4:6d:72:14:49:2d:ae:f7:9d:06:3f:42:ef:92:70:92:39:
         cd:c3:b0:03:5c:48:d9:1a:b0:ca:2d:e7:1c:ec:f8:49:5b:35:
         a4:81:cb:1f:7d:3e:38:69:d2:1b:5d:7d:9e:3f:75:70:97:c4:
         ea:4b:ff:7b:d1:92:8d:69:15:da:0b:f1:14:e2:e7:90:3a:57:
         33:4f:dd:aa:69:6b:75:62:77:f4:39:aa:b2:7a:82:30:f6:d4:
         b6:84:19:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:10 2026 by rpki-client