Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b6e5dbda-3120-3da2-809d-08cbeea6979c.roa
File:                     b6e5dbda-3120-3da2-809d-08cbeea6979c.roa (raw, json)
Hash identifier:          b3sfzfJUSkQVBT3RQTC6RY8ZU1AYfIA0nqkGZ6muO1k=
Subject key identifier:   D9:A1:A7:A2:A2:34:8D:5B:46:72:5E:89:04:DC:25:FC:8A:D7:5A:17
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA787FA61D6FDE96B81505D60
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b6e5dbda-3120-3da2-809d-08cbeea6979c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        96.63.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:fa:61:d6:fd:e9:6b:81:50:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=655a5914-f2c3-44bc-b44a-228d3b7ec2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:93:57:ba:8a:45:ee:df:2c:7d:a5:fa:8a:
                    93:70:73:7f:e3:e1:ef:34:44:bb:40:ae:e4:52:b5:
                    55:b3:1c:54:05:de:31:ed:6b:30:e2:5f:ff:d1:2b:
                    66:4b:a1:a0:96:e0:49:7c:6a:54:79:fc:dc:8b:28:
                    d0:86:81:af:69:81:f9:4b:b1:fe:1a:6b:b6:b9:c0:
                    a8:9b:d2:e3:c3:c2:bb:09:e2:70:a1:98:72:49:36:
                    c4:8d:d7:78:51:9b:95:6f:4e:2e:a6:25:cf:5a:f0:
                    b8:06:c8:af:63:f0:e3:c4:e7:01:ad:e2:5a:a3:8c:
                    ee:04:c4:8b:87:b6:2c:e1:1d:e3:f8:e4:f6:2f:7c:
                    2b:19:20:0e:0c:b0:53:88:3a:c4:dd:83:85:ef:a3:
                    29:16:ba:c1:31:3d:40:ab:1d:f0:fb:be:67:ab:34:
                    f9:ca:da:0b:d9:35:68:a1:ca:5e:66:31:22:cb:b4:
                    e5:79:8e:e1:a1:c3:ec:ec:cb:0f:d7:f9:a2:4a:dd:
                    22:fc:8f:c4:d1:f8:85:32:bb:65:e8:72:e3:7a:8a:
                    fb:d3:b5:0c:e7:77:d4:7c:96:18:cb:93:41:12:f1:
                    03:03:2e:8f:fb:a7:dc:d3:75:1d:48:c2:e8:9f:92:
                    66:c5:22:ca:38:3b:a9:a5:05:fd:3b:f1:02:f2:b0:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A1:A7:A2:A2:34:8D:5B:46:72:5E:89:04:DC:25:FC:8A:D7:5A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b6e5dbda-3120-3da2-809d-08cbeea6979c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.63.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:54:3e:78:d0:05:75:e1:94:20:8c:0d:ca:9a:be:e9:68:33:
         72:44:7b:ac:64:08:bd:78:0f:9a:ad:4b:9b:d0:f8:72:39:1d:
         5d:b0:c8:71:73:f8:fb:77:b1:c4:4b:6c:b6:6f:aa:d6:20:e6:
         5d:c1:ef:5f:72:2e:11:57:cb:10:8c:20:eb:57:a4:26:53:12:
         8e:14:a1:0d:96:75:0e:d1:45:78:7c:01:fc:4a:15:69:ab:ab:
         9a:cb:00:66:b1:41:2c:54:3c:16:9f:02:34:a4:d5:14:f9:1e:
         64:a1:13:e3:58:21:ee:fb:78:09:d9:65:ca:62:fb:82:2d:da:
         e7:d7:ff:40:5b:0c:2d:4f:67:4f:0d:7d:b3:eb:05:02:02:79:
         b9:72:28:bc:c8:4b:a8:a4:21:9e:5e:b1:9f:22:ea:2f:19:66:
         35:7b:00:9b:4d:95:7d:3e:52:0d:da:33:77:56:af:ed:2c:7a:
         eb:3c:78:3e:b9:d8:ba:00:a4:fe:4b:b3:b8:8e:d4:7e:20:43:
         fd:6e:fd:29:5a:59:05:5d:67:c7:e7:22:e5:01:9f:50:4a:92:
         f8:d9:fa:3b:9b:60:d1:f0:05:57:6e:71:9f:02:65:0a:c5:e0:
         77:73:97:33:fc:e0:3f:18:d0:0a:5d:d8:7d:4a:4d:b1:4a:e1:
         59:ac:11:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:44:58 2026 by rpki-client