Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa
File:                     8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa (raw, json)
Hash identifier:          /RlC5Dw85KBKJhF8mzOtYqeFzZTP53XTrZRE1jbecXQ=
Subject key identifier:   3D:B5:67:A9:3B:86:F3:DC:F0:A9:A4:D0:36:1D:FA:F1:CC:C5:46:8A
Certificate issuer:       /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial:       010D0C9F4328584E1A144FE3E968465050EA0980
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     10996
IP address blocks:        192.154.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:4f:e3:e9:68:46:50:50:ea:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=1e671096-265b-40f5-bc90-0502a9130924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cd:20:f9:6d:f4:18:8f:d6:1b:d0:2d:3a:62:
                    6c:d7:db:b2:0f:80:0f:8f:23:fc:03:87:19:1e:24:
                    32:17:49:4b:87:be:3e:31:ed:14:3f:75:4d:28:f5:
                    65:c0:11:7a:70:33:0a:53:fa:e0:23:61:bf:03:ad:
                    27:c8:c8:fa:7b:69:af:c4:80:65:30:36:bd:67:c9:
                    e4:04:f3:21:d3:15:7a:3c:da:b9:ea:98:2e:86:11:
                    25:00:3e:29:d9:63:22:14:36:be:6c:b2:76:d7:9f:
                    54:8f:dd:f2:cf:62:2c:c2:59:6c:97:38:b4:87:a4:
                    19:90:f8:65:5b:43:b4:4c:5f:ec:b8:86:44:90:82:
                    6a:5e:f3:b7:ce:08:8e:18:de:a3:80:40:68:24:3c:
                    0b:1d:d4:fb:c4:89:bf:3d:5a:94:1b:3d:ee:9d:2e:
                    d5:71:02:f9:31:2f:50:0c:29:2c:d4:b1:0f:c5:46:
                    c1:71:56:32:22:b8:bc:ec:95:1f:a9:b7:f8:f5:5b:
                    ad:06:12:37:c7:60:08:8d:3e:bd:8d:c5:01:04:18:
                    38:6b:f9:12:a9:95:81:ec:e7:81:4a:3c:52:49:ec:
                    c9:ac:69:e9:08:dd:12:45:d2:f6:2e:a0:2a:ac:3d:
                    4c:60:20:ef:11:cd:9b:86:31:70:d4:b2:f6:c9:44:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B5:67:A9:3B:86:F3:DC:F0:A9:A4:D0:36:1D:FA:F1:CC:C5:46:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl

            X509v3 Authority Key Identifier:
                keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:41:6d:4c:f4:b9:6f:13:dc:e4:43:de:bb:3c:be:88:df:58:
         11:b7:a5:f1:05:c3:2b:c2:46:1e:02:51:a3:a9:8e:8e:2b:9a:
         79:7f:3a:29:c5:5b:6b:ac:13:f4:f5:6b:e3:49:ef:18:30:dc:
         c5:8e:aa:4f:4c:83:0d:c2:4c:15:b6:bd:cb:df:f5:18:93:08:
         6d:17:26:ca:96:cf:d3:2e:ad:24:e5:6e:9b:4c:56:91:1e:94:
         49:44:12:b4:9f:10:f3:ec:ee:36:b8:22:a4:7d:22:8e:a1:fc:
         ac:55:b8:67:1d:3d:7c:b3:13:89:c4:5d:88:3d:f7:5c:c4:9b:
         55:c7:7d:19:31:2c:e6:7a:a0:93:5a:ca:d9:97:b5:65:62:83:
         31:de:6e:23:e3:ea:78:33:e1:39:0b:01:e3:08:d1:b8:8d:53:
         1a:1d:df:4f:ac:7f:9c:a8:7f:f5:ae:52:ef:b2:db:93:35:1b:
         82:2e:c7:61:31:5e:f9:ac:05:cf:73:18:26:2f:da:a9:54:a7:
         02:ea:15:59:e4:57:d9:cf:12:42:54:90:f5:7d:65:58:32:59:
         6b:53:15:cb:69:00:6a:eb:6b:91:ec:12:25:50:3b:ba:23:1a:
         5b:ed:e8:89:ec:d4:02:bf:4e:e3:9a:0b:03:ca:8b:52:51:ee:
         0e:81:94:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:24:07 2026 by rpki-client