Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa
File:                     79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa (raw, json)
Hash identifier:          x6oy8BP9Rg9A0IP5c/oHAV9w9VuE1IB5w8zwqQBK+Sk=
Subject key identifier:   9A:DD:92:35:3C:87:31:5E:5C:48:68:E4:91:46:4C:1E:A9:66:5E:09
Certificate issuer:       /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial:       010D0C9F4328584DFBD5EC4DB9E4C9EDD0CA2E80
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     7922
IP address blocks:        209.250.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:ec:4d:b9:e4:c9:ed:d0:ca:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=5f1e41fd-b9f8-402f-9aac-b21360b8adf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:b8:f2:76:da:31:2b:ce:bf:e2:b4:ec:78:
                    90:bc:fe:a8:dd:66:5a:b8:1d:49:14:90:84:b1:51:
                    5a:76:d1:2b:b1:a7:a9:12:ba:e7:39:c1:97:8f:fb:
                    e0:bb:c4:bc:9f:4a:3e:4b:9e:ae:68:b9:b3:9d:14:
                    9b:33:81:49:09:b8:40:ad:49:eb:3a:fe:57:08:77:
                    2c:e9:c0:8e:34:9d:c8:68:fc:26:45:34:01:df:81:
                    3d:fd:a6:82:e3:01:22:4b:fc:6e:b1:57:8e:92:8f:
                    b9:52:2d:e8:29:f9:46:44:fe:9c:03:f4:42:bb:b0:
                    fe:e1:19:34:e2:e4:44:0d:c6:76:ae:e5:7d:dd:da:
                    6b:52:05:86:62:98:00:c2:06:69:87:a8:fc:d1:34:
                    20:b0:7c:ae:ff:e6:b5:91:cd:11:2d:26:53:04:ea:
                    36:7b:ad:cb:a6:92:35:d6:10:99:3c:67:d3:9d:51:
                    c0:11:b4:ae:c1:f6:2e:56:b6:83:04:07:1c:69:00:
                    55:8a:ab:45:b1:40:de:be:dd:ad:64:97:77:6c:46:
                    47:72:ac:88:0e:a8:75:5f:27:55:1a:aa:79:3e:bf:
                    4c:ac:5c:e2:dd:40:76:36:83:e6:fa:46:c3:24:f6:
                    f6:24:38:5c:e7:f0:f5:c5:93:27:aa:85:ea:06:92:
                    64:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DD:92:35:3C:87:31:5E:5C:48:68:E4:91:46:4C:1E:A9:66:5E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/79bc0b77-dc72-3e9c-976e-1bbefdc1f8c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl

            X509v3 Authority Key Identifier:
                keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:64:76:46:5e:e2:08:50:36:b0:d1:58:f8:4e:fc:81:ad:47:
         ca:34:16:57:92:2e:ec:aa:8b:ed:f2:37:ad:2d:61:b6:12:7e:
         e7:c7:82:2e:49:3c:1d:cf:9f:da:d4:fe:f0:0a:09:7c:e5:b2:
         ca:eb:34:1c:f5:5b:b7:b9:b4:75:2d:9d:d4:4d:30:c8:f6:5a:
         fa:33:fe:e9:a2:dc:36:69:fc:56:56:6d:3c:6f:e8:51:62:da:
         aa:dc:eb:3a:65:bd:90:26:2e:a6:16:9e:41:f0:78:ed:4f:e4:
         37:d8:29:55:a6:4d:74:e0:46:ab:6f:3f:fb:d8:37:04:e6:77:
         51:94:2d:9e:1b:72:51:80:8c:0b:b6:60:c4:45:d8:28:81:2e:
         96:04:bd:7e:c5:bb:a7:b7:51:8c:ad:58:61:52:8f:b8:c8:a7:
         9d:10:c2:f9:66:e9:35:5e:37:bb:a6:6c:02:03:be:23:c2:ce:
         f1:c1:b9:5b:89:98:3f:58:b9:58:7c:d5:59:15:45:f4:8b:ef:
         ad:b6:df:28:1b:c5:f4:e4:a0:f4:ea:12:83:fb:a9:25:c4:3f:
         ca:4c:0e:c9:06:2c:2d:16:ea:c7:05:f5:8f:11:b1:d8:0a:f6:
         1a:04:11:8d:a7:91:2f:18:dc:38:2f:b0:b0:33:ca:42:72:a1:
         51:31:f0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:42 2026 by rpki-client