Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/9da9e6da-7a0b-3944-ba89-756a4cce94b6.roa
File:                     9da9e6da-7a0b-3944-ba89-756a4cce94b6.roa (raw, json)
Hash identifier:          ThySQZDbF8nJScyUqoDCq1jwJA4fMnU+RvHZhC9gsFE=
Subject key identifier:   4B:2F:0F:6B:7B:9A:35:84:EE:07:4E:E9:08:58:1B:FD:13:8C:5A:BD
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584D730A6CEF48A72E14CC7BEF80
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/9da9e6da-7a0b-3944-ba89-756a4cce94b6.roa
Signing time:             Thu 09 Apr 2026 13:00:30 +0000
ROA not before:           Thu 09 Apr 2026 13:00:30 +0000
ROA not after:            Wed 08 Jul 2026 13:00:30 +0000
asID:                     812
IP address blocks:        209.104.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:0a:6c:ef:48:a7:2e:14:cc:7b:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Apr  9 13:00:30 2026 GMT
            Not After : Jul  8 13:00:30 2026 GMT
        Subject: CN=771c1f21-ee73-46f1-ba6c-2bd4cfb9a085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d3:5a:2b:b2:52:61:1f:6e:4d:5c:2f:33:e8:
                    79:b1:af:ce:8e:7b:dd:ab:19:e8:15:a7:71:40:10:
                    60:ab:c2:bd:e3:3f:ea:22:e0:73:c5:4f:71:ad:c1:
                    f9:a6:3f:7d:f3:41:bd:56:a2:3f:bd:ea:fe:13:df:
                    6c:2e:10:73:25:bf:f1:f5:97:c4:9b:c9:47:36:eb:
                    55:a4:3e:74:10:7c:55:d0:8f:18:41:25:b7:9f:bc:
                    17:cf:56:63:f4:29:42:94:40:ee:6c:92:8c:fd:49:
                    ce:9e:42:c8:e1:f5:e9:1b:2b:8e:63:52:1d:02:7b:
                    d6:86:02:50:3c:03:6a:1e:30:49:87:6c:05:b6:b0:
                    41:bc:06:77:f1:86:fa:68:5b:95:55:b3:7b:e0:f0:
                    57:cc:ef:64:92:5d:a0:ff:4a:42:ed:98:5a:47:53:
                    38:f3:fb:b3:4d:75:db:d8:9b:24:f9:1a:b1:ab:a2:
                    4d:1a:c1:fb:0e:09:b0:86:34:1e:c2:0a:17:68:6e:
                    df:bd:37:25:32:b0:e1:9b:cb:80:ea:79:fc:3f:05:
                    f5:09:50:c8:27:9d:e0:bf:7f:20:cd:b5:6b:d0:5a:
                    db:d4:fb:2f:7a:06:0a:9f:5a:57:11:78:72:20:a2:
                    ac:6f:c4:8d:df:0a:f8:ca:3d:23:b7:63:cf:57:25:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2F:0F:6B:7B:9A:35:84:EE:07:4E:E9:08:58:1B:FD:13:8C:5A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/9da9e6da-7a0b-3944-ba89-756a4cce94b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.104.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:fb:5e:c0:f7:f7:be:b4:28:de:53:3e:ff:35:82:32:4d:
         1c:76:a4:1a:2e:76:bc:16:8d:04:ab:49:15:25:38:de:7f:23:
         c0:e2:1c:13:cb:7f:b9:69:aa:7f:01:6a:13:eb:7d:a6:ba:7a:
         ce:98:07:a7:a7:f3:ad:e3:0e:b8:90:3f:bf:79:25:8e:d6:b5:
         92:28:3f:9e:e9:6b:79:8e:d3:13:8e:47:78:12:60:3c:70:8e:
         38:07:b9:b3:ea:6b:63:da:b9:63:a9:34:4d:70:1d:63:fa:b9:
         7d:6d:36:33:7b:3b:c8:ff:bf:8f:cb:0d:02:98:01:cf:31:a1:
         3b:28:e8:95:d2:4c:bb:9e:d3:28:01:3b:3f:bb:bc:fc:d8:9b:
         cb:a1:b4:60:97:37:cd:88:ba:a7:21:6b:1e:b6:79:a9:77:29:
         d3:9a:83:83:d9:0c:74:7f:bf:fb:5c:63:cd:5c:87:67:d3:2f:
         f1:fe:03:77:43:d3:c7:5d:b8:52:33:9d:77:34:5c:2d:18:ed:
         b6:93:a0:06:a8:fd:36:1a:6c:80:7c:5f:72:87:6d:af:6f:83:
         14:9c:dc:8a:35:c3:ce:ef:05:2e:a1:f6:0a:16:dc:ad:17:a2:
         82:fe:0f:b9:73:b5:a7:43:7a:2c:71:c0:23:9e:de:8d:ca:88:
         3b:19:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:59 2026 by rpki-client