Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa
File:                     86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa (raw, json)
Hash identifier:          7cKhCNh2WL1hdXBri1S9KUTnmShtiPutOeZQ0x5wbMI=
Subject key identifier:   50:2A:FB:17:6E:90:50:E9:F3:45:83:AC:C2:1D:48:EF:E7:B6:DB:94
Certificate issuer:       /CN=d5a6b267-6096-4872-9afb-b9517766833a
Certificate serial:       010D0C9F4328584E0005E4D28D81077D3CF5FB00
Authority key identifier: 5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     10886
IP address blocks:        199.7.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e4:d2:8d:81:07:7d:3c:f5:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a6b267-6096-4872-9afb-b9517766833a
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=8e41ff20-15a9-405d-a473-d393b8326721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:2d:8a:55:e3:ba:14:85:3b:dd:bf:64:cb:
                    d2:d8:09:18:69:ad:51:5d:5f:05:63:6a:f3:84:13:
                    f0:2d:70:55:eb:6d:07:78:5a:07:5a:fc:d1:7a:34:
                    c4:52:b7:44:df:be:91:50:f7:1d:97:d1:8f:59:7c:
                    d5:b4:1e:7f:12:e2:0d:41:9f:3f:34:56:cb:19:06:
                    8e:d4:d0:bb:d6:79:5c:0c:7f:0d:7e:15:f9:1e:17:
                    43:8c:8b:4a:1d:26:d8:8d:1b:d2:f5:8c:03:c8:54:
                    2c:6e:1c:01:a8:a7:0a:03:1b:db:37:9c:1a:b5:ea:
                    59:53:c2:50:7a:d2:e5:67:a8:d3:6e:d0:f5:3f:54:
                    2b:37:97:ee:5e:65:bf:48:c9:c2:4c:74:74:a7:28:
                    71:0b:50:47:b0:3c:07:a4:72:74:d1:09:00:e0:61:
                    6c:3a:d5:09:69:18:60:0b:98:ca:18:3e:f7:57:59:
                    f0:62:d7:a5:e7:d7:55:68:47:6d:5f:6e:51:bd:e2:
                    ba:b0:a2:9f:39:59:03:5c:e5:fe:62:b1:54:1e:06:
                    e0:81:fb:30:a0:0e:f6:7e:6e:1c:99:73:93:39:6e:
                    13:dc:ad:ef:8b:a1:7d:a3:59:54:37:71:7b:8f:7a:
                    61:dd:67:b1:88:aa:bc:71:66:49:b8:70:0d:17:fc:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2A:FB:17:6E:90:50:E9:F3:45:83:AC:C2:1D:48:EF:E7:B6:DB:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/86a637a0-d6f5-3b7f-80b0-a7b70f05d93e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:00:ae:e4:38:c5:02:ef:eb:e8:dd:91:d6:f6:2a:a5:15:
         0f:28:a6:88:6e:87:4d:ad:1e:c1:94:cb:d7:72:91:aa:00:16:
         b4:9b:8d:b3:c8:3c:b5:70:e3:d6:50:97:6d:b6:55:62:39:f0:
         47:bc:71:77:c5:ce:47:fb:b6:b5:1e:d6:5b:e7:c0:14:c2:02:
         97:6d:d5:5f:ca:d3:34:b7:9c:85:4c:b5:53:3c:51:dc:32:c3:
         6f:32:15:43:1f:c5:f4:e6:14:58:30:83:60:24:3a:92:df:51:
         6f:48:a8:09:cb:87:92:bb:0f:7e:4e:0a:95:2a:ae:a3:c6:11:
         a5:c2:84:45:b2:22:d6:1b:c2:11:54:ed:43:ad:cf:1b:bd:82:
         a7:1f:3b:3f:07:68:ff:50:38:4c:1a:25:e5:1d:4b:7b:cd:3c:
         db:7c:44:47:f8:a9:9c:dc:4d:4e:6f:7b:fd:9b:e2:48:5b:c8:
         fe:f3:a9:8e:27:33:7d:d7:59:08:5a:34:bd:8c:d2:bd:1d:c6:
         2a:cf:5a:8d:4e:e8:1d:5f:e6:ce:81:71:d4:a6:74:ff:1e:a2:
         bb:85:56:f0:81:84:02:4a:33:d8:02:41:26:fe:01:a1:ea:a4:
         fc:22:ae:de:2b:5d:b7:bb:3c:34:6e:60:2f:be:3f:eb:90:ef:
         f5:23:91:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:12 2026 by rpki-client