Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6/06788f0d-13fa-321d-ae23-695683ebdc4f.roa
File:                     06788f0d-13fa-321d-ae23-695683ebdc4f.roa (raw, json)
Hash identifier:          o5QjJLOT7RN+YQLCCbXoKPmTMpgi4myrhTi0Pm3uEmg=
Subject key identifier:   0F:7A:4F:CE:19:88:F2:62:72:75:BB:97:18:35:09:07:7F:47:C6:E0
Certificate issuer:       /CN=9a8caad5-fdb4-41bd-bd4e-3b0251daede6
Certificate serial:       010D0C9F4328584EA17A8782366EB4044313CC00
Authority key identifier: 84:C6:F6:34:D5:6F:59:02:BE:3A:D2:41:33:64:C9:CF:AD:25:78:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6/06788f0d-13fa-321d-ae23-695683ebdc4f.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     19350
IP address blocks:        192.139.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6/9a8caad5-fdb4-41bd-bd4e-3b0251daede6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6/9a8caad5-fdb4-41bd-bd4e-3b0251daede6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:87:82:36:6e:b4:04:43:13:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8caad5-fdb4-41bd-bd4e-3b0251daede6
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=de0b24cc-e3db-4f29-a5af-6e0fa4b546d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:a3:69:ae:73:d6:ef:cf:cd:ce:65:1b:8c:
                    45:d5:be:39:f5:71:02:93:9d:83:48:40:6b:d4:48:
                    88:81:cf:78:bf:7b:58:2d:0b:5e:3d:c3:85:b4:8c:
                    8a:15:e0:0b:13:0a:5d:7a:40:ae:b2:1b:f6:b5:11:
                    24:ab:6d:87:71:34:b6:c6:c8:c8:cc:8c:f9:27:60:
                    fe:07:b5:6c:1f:32:c4:06:10:12:2e:61:51:73:12:
                    4f:04:6b:9f:9f:4c:8d:88:02:f8:59:9e:fb:fc:0b:
                    32:f2:7b:47:20:88:ff:b7:17:3f:86:b2:16:3b:d3:
                    40:54:7f:f3:89:3f:bf:eb:39:8e:0c:e0:0b:7d:da:
                    22:53:ec:0e:80:fd:06:ba:51:1e:4d:87:19:44:d8:
                    70:58:3c:2e:17:50:99:10:11:84:b3:b4:4a:48:f5:
                    f1:50:1d:ba:68:50:05:7b:54:80:ff:42:cd:34:e4:
                    8a:24:8b:db:52:58:c6:ed:61:e7:06:2d:43:19:aa:
                    91:07:a2:c2:09:3a:74:30:f6:0c:a6:b6:9f:33:2d:
                    9a:d1:37:fc:27:9c:a4:6b:3f:21:ee:77:60:57:1f:
                    eb:17:33:b8:a6:8e:39:38:a4:4c:bd:ef:7b:1a:18:
                    8f:5f:fd:9e:12:50:c9:b0:00:41:ee:19:30:57:dd:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7A:4F:CE:19:88:F2:62:72:75:BB:97:18:35:09:07:7F:47:C6:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6/06788f0d-13fa-321d-ae23-695683ebdc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6/9a8caad5-fdb4-41bd-bd4e-3b0251daede6.crl

            X509v3 Authority Key Identifier:
                keyid:84:C6:F6:34:D5:6F:59:02:BE:3A:D2:41:33:64:C9:CF:AD:25:78:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b6:66:8a:31:0d:41:05:d1:8d:8f:7c:cf:35:3f:48:10:29:
         f6:22:19:fb:13:70:50:c5:d0:8c:44:63:d9:ce:98:63:6a:50:
         14:18:a1:8c:e5:68:89:9c:8f:be:f4:ff:0d:74:47:08:cc:57:
         3f:b1:75:bf:1a:6b:fa:47:fb:9c:44:92:49:1b:44:ac:1c:49:
         77:a3:9d:2e:2f:00:9a:89:31:52:c7:6e:ff:78:8d:13:6a:9f:
         cf:4b:87:df:d5:90:95:90:f1:f6:94:ca:68:c8:da:bc:50:99:
         a1:df:1b:c7:2f:c9:c6:c1:3d:d2:f4:b4:07:1a:45:5c:9c:68:
         ba:29:b7:80:1f:37:83:2d:d0:1b:89:f2:1a:57:99:63:0f:79:
         29:84:00:25:35:78:38:2c:1b:f1:80:8f:06:a5:35:3c:61:35:
         af:14:4b:7d:27:be:47:9b:ce:10:1b:fc:d7:f9:eb:ef:51:7c:
         1a:70:7c:48:c6:31:b3:df:2b:ee:26:19:87:82:da:b0:b6:ab:
         53:c5:3b:c9:ec:f5:b1:28:18:8b:e0:2c:e7:5b:4a:c1:ec:e5:
         1c:de:cd:92:e5:3c:f4:d1:25:67:09:83:9a:52:21:7a:24:56:
         43:33:cd:55:de:98:79:33:17:f4:e3:d5:a1:7e:9f:f8:4d:48:
         03:df:31:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:08:13 2026 by rpki-client