Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339/f8b8ff57-ea60-3786-b62b-12d11ff8e1fc.roa
File:                     f8b8ff57-ea60-3786-b62b-12d11ff8e1fc.roa (raw, json)
Hash identifier:          cuwfGcA2SBGZyfWy31Jtv+3ELyCrJOajlCC5DqlPY1Q=
Subject key identifier:   9B:E1:92:82:9A:BD:FC:1B:E4:F7:D5:EA:3B:C8:D3:03:A3:39:2A:8D
Certificate issuer:       /CN=19719a18-e52f-4638-aa55-1111ed485339
Certificate serial:       010D0C9F4328584E0A6FEFEBFB4BC69B75CCC180
Authority key identifier: E6:D5:9B:4D:63:52:9C:8F:6A:D8:FD:0E:CE:0A:47:4E:FE:9C:C6:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339/f8b8ff57-ea60-3786-b62b-12d11ff8e1fc.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     20438
IP address blocks:        192.80.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339/19719a18-e52f-4638-aa55-1111ed485339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339/19719a18-e52f-4638-aa55-1111ed485339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:ef:eb:fb:4b:c6:9b:75:cc:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19719a18-e52f-4638-aa55-1111ed485339
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=fcc2e829-4aec-4dea-aac4-ea9e12c90bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:f3:1c:92:eb:d7:f7:74:40:8d:d2:17:a4:
                    a0:33:ab:cc:04:c7:23:9f:54:25:6b:b2:4f:7a:f3:
                    46:8e:3f:e6:41:16:66:dc:f0:ea:54:50:31:6a:02:
                    24:71:f5:81:96:11:d1:e0:56:9f:f7:d6:ed:72:47:
                    77:75:90:b3:e8:46:e1:b5:f4:51:48:98:ea:66:09:
                    70:5a:ce:6b:4a:42:27:fa:05:92:60:5d:9d:c8:f4:
                    d3:71:9a:e7:72:f0:fe:1b:9b:10:b2:9a:29:72:d0:
                    7f:fa:a2:d2:5d:c6:89:bf:87:ca:9d:b2:c2:e3:0d:
                    18:39:bb:e9:90:31:8f:e2:28:14:ba:9a:1e:d2:30:
                    99:f1:08:f1:3c:6f:18:e9:f0:58:06:98:08:e9:b6:
                    cb:46:bc:18:8f:20:09:41:aa:d9:c9:27:c2:20:60:
                    bb:f8:92:4a:28:ab:32:0b:24:2e:23:8f:72:41:5f:
                    01:87:fc:96:8c:40:e6:aa:56:b1:22:e3:76:59:11:
                    b9:c9:f7:73:e2:72:29:f3:51:ea:79:e6:96:b3:b7:
                    ce:eb:4b:ef:54:5f:60:f4:a4:a8:be:0f:35:a6:be:
                    53:62:1d:b6:2c:44:bc:ec:aa:dc:08:66:75:29:18:
                    e2:8f:0a:ac:a8:11:fc:0f:61:e9:96:56:b6:3d:d6:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E1:92:82:9A:BD:FC:1B:E4:F7:D5:EA:3B:C8:D3:03:A3:39:2A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339/f8b8ff57-ea60-3786-b62b-12d11ff8e1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339/19719a18-e52f-4638-aa55-1111ed485339.crl

            X509v3 Authority Key Identifier:
                keyid:E6:D5:9B:4D:63:52:9C:8F:6A:D8:FD:0E:CE:0A:47:4E:FE:9C:C6:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19719a18-e52f-4638-aa55-1111ed485339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:cf:8d:d8:ee:ff:f4:d5:84:c2:ba:7d:f1:d1:7e:31:1f:16:
         89:d5:2e:4f:7b:df:28:e9:56:28:cb:fa:b6:c0:b1:e2:ec:e5:
         a5:52:8f:83:77:92:59:68:a4:9f:5c:37:cc:cd:83:8d:3a:40:
         74:ab:47:b2:a8:26:76:9d:6f:33:d8:61:1e:33:3c:33:32:cb:
         32:3d:cd:55:ba:09:22:f4:53:35:ef:34:86:9f:39:05:d2:9f:
         b9:40:9b:0f:c6:b7:5c:a2:fc:97:82:ec:1a:a4:44:f1:9c:4f:
         e0:2f:fb:23:4c:d9:d1:a2:19:62:81:73:3f:a8:4d:6e:a9:97:
         ec:22:a9:d5:79:f0:ec:af:98:74:9c:d2:25:c4:f8:d4:7f:db:
         01:85:9e:2f:e3:c6:77:a2:26:55:47:17:31:af:fe:f6:c1:e2:
         69:99:f0:e1:d9:22:8f:e0:ce:f4:24:7e:b1:c4:35:c2:41:6c:
         15:25:71:22:81:b8:22:54:6c:f3:cf:22:79:7c:30:3e:58:97:
         a4:4e:1f:86:3a:88:8b:31:45:ea:31:f7:28:35:47:2c:9d:d9:
         80:3e:9c:10:bf:6c:bf:8d:19:3a:ae:2e:d7:6e:95:c3:aa:04:
         a4:10:6f:01:f7:95:ce:32:2c:1d:27:b5:d0:b9:a4:9a:55:b3:
         ff:28:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:08 2026 by rpki-client