Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/697391c7-f7da-3ef0-afd9-43b1cc0735b9.roa
File:                     697391c7-f7da-3ef0-afd9-43b1cc0735b9.roa (raw, json)
Hash identifier:          g9Njui2leA0lRXf2YzgiQE1IO/4Ya1ApNcoj6s3TE00=
Subject key identifier:   E9:AC:20:7B:A8:8B:F3:32:E3:0F:E4:09:B7:59:B4:7E:32:DC:F5:8D
Certificate issuer:       /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial:       010D0C9F4328584E9BE5147F6DD4E5E71C9CB980
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/697391c7-f7da-3ef0-afd9-43b1cc0735b9.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     40788
IP address blocks:        96.46.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:14:7f:6d:d4:e5:e7:1c:9c:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=e6aed928-e843-4156-b8ea-7483f4e9b15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:61:53:7a:6b:99:c2:a1:e1:37:c8:d9:69:ef:
                    bc:16:92:2e:d0:7a:6c:53:41:83:ce:04:1c:97:c3:
                    3b:b3:b8:50:30:31:8a:e9:0b:39:a6:b2:7f:88:da:
                    67:ae:97:e1:3a:e7:bd:e8:26:bf:c3:d2:1b:c9:71:
                    95:33:d7:7b:72:70:ad:c0:be:bf:85:cc:64:71:bb:
                    99:9b:e4:d8:34:77:2f:61:ee:55:16:4d:79:d8:a7:
                    5c:a6:98:3c:28:42:ec:49:c6:7d:26:bf:0a:ae:09:
                    35:77:c8:9a:0e:cc:29:a2:b9:51:77:37:e5:d4:54:
                    4d:4a:24:44:76:85:24:8b:df:85:9b:19:b2:2e:9c:
                    dc:1f:23:4a:fb:3b:0a:69:20:b0:0c:9c:4d:c5:6d:
                    5f:20:8d:79:c8:ae:29:00:54:57:5f:61:ef:9e:a6:
                    ae:5e:b5:d7:44:f2:1a:b0:72:9a:4d:55:ce:b4:5b:
                    95:97:f4:61:dc:b2:b4:49:a8:3b:78:3d:bd:aa:ca:
                    cf:09:5e:3d:f5:ca:bc:cf:cb:e7:b5:3d:2f:98:98:
                    5b:f5:0b:d9:e0:ab:5a:a0:ff:ce:dd:0f:a5:95:72:
                    d1:ca:a9:c8:36:ed:f9:ec:32:b2:80:cd:58:55:0f:
                    0f:72:bb:d0:32:a7:ea:cb:28:3f:7a:4e:d2:6b:9a:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AC:20:7B:A8:8B:F3:32:E3:0F:E4:09:B7:59:B4:7E:32:DC:F5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/697391c7-f7da-3ef0-afd9-43b1cc0735b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.46.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:fe:28:ff:c3:72:51:34:3e:d5:3f:71:8c:ca:d3:d7:1f:04:
         f7:b4:8e:ad:82:0f:a2:8f:64:69:83:ac:2c:85:7b:9a:0b:e4:
         cd:d7:a8:a5:8d:03:df:b2:1f:5b:53:46:92:25:94:45:d3:bf:
         84:08:2f:40:11:56:1e:e8:9b:af:94:e7:2b:60:e3:46:ca:31:
         ea:02:97:a8:14:57:76:e5:34:6b:d5:1a:35:0a:25:4e:74:e7:
         f1:ce:75:5e:8e:4a:b9:63:75:50:42:fd:f6:9f:c8:59:a6:bf:
         3e:5a:ca:0f:3b:48:a8:b4:7a:89:ab:12:9e:98:4b:63:cd:d5:
         f5:2e:19:89:9f:7a:bc:32:c7:29:76:6f:c0:d9:3e:65:8c:46:
         d8:fd:03:49:59:37:a7:6b:16:dd:8b:d1:78:e5:04:fe:b5:cf:
         b1:67:d2:56:0b:75:da:e1:18:24:14:86:2f:22:8e:f0:39:60:
         3d:d0:36:7a:73:0e:3d:9f:8e:4e:51:6c:86:91:2c:2c:51:14:
         93:ae:d9:ab:d1:5f:14:13:c1:ce:0d:90:ba:0e:8c:07:83:7d:
         f4:b3:57:8d:29:3b:cf:81:b6:26:99:cd:cc:13:91:60:ec:d0:
         30:29:2d:cc:af:04:b9:5f:8a:4f:d2:42:ca:30:ec:dc:22:9b:
         8d:07:51:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:29:01 2026 by rpki-client