Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa
File:                     955a609a-42f8-316d-a938-27d1ede991ad.roa (raw, json)
Hash identifier:          71BhIbCUKR3Z3tm6anRpmHdtsWKP9cRG1nreo6wMTW4=
Subject key identifier:   6D:E4:31:8D:D5:C0:69:0F:2F:25:28:00:A2:79:7E:82:39:68:2D:4A
Certificate issuer:       /CN=4b0cf977-e8ab-492d-bd1d-e7b11385e631
Certificate serial:       010D0C9F4328584EA79C42A170D07BCA3DA6C5E0
Authority key identifier: 31:2D:BC:40:C8:98:37:68:4D:D7:DF:28:3F:A8:DC:28:EA:73:99:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3477
IP address blocks:        192.94.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:42:a1:70:d0:7b:ca:3d:a6:c5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0cf977-e8ab-492d-bd1d-e7b11385e631
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cb87ede0-e7f9-4f11-86a5-6965a5a7a837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:4a:e6:fa:af:f0:1b:b0:f2:e6:04:1f:85:
                    fc:53:01:4b:84:cf:ea:65:f0:ab:17:bc:a6:fb:99:
                    6b:1e:c8:ed:1a:73:e3:85:5b:c2:40:97:18:fc:28:
                    c6:eb:a8:3f:cd:68:1b:ff:09:20:35:bb:88:ea:46:
                    9a:ab:a4:60:27:fe:5f:5d:b0:fe:87:bc:5a:8a:b1:
                    b3:82:00:7a:2d:2e:9b:0a:1a:a0:ed:f9:bb:0c:f2:
                    b1:0e:d7:27:20:54:14:65:7e:28:c2:4a:8a:72:fa:
                    6b:ec:6c:c2:64:6b:fd:3f:f4:e7:0d:b5:f8:8f:65:
                    7a:74:c5:d5:8f:0a:5f:2e:b7:aa:ad:02:d8:25:eb:
                    92:bf:49:6d:92:c8:b5:10:63:99:94:f1:c6:7d:bf:
                    77:ab:1d:f7:e2:a8:27:8b:ca:b1:27:ef:e8:d6:fc:
                    f6:d7:00:71:d0:cf:cb:31:ee:22:38:ae:2a:dc:41:
                    15:c3:80:6b:16:37:03:15:96:04:02:c4:e0:0b:f1:
                    b7:b2:6c:37:2c:5d:07:ad:16:fc:fc:3f:61:b1:53:
                    9f:12:5e:66:97:37:cf:97:23:64:b1:6a:ac:df:16:
                    99:c6:dd:66:b6:01:fc:21:d4:2e:12:2f:e2:a7:29:
                    74:43:6c:4e:9b:07:fd:63:91:1d:76:81:5f:06:a2:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E4:31:8D:D5:C0:69:0F:2F:25:28:00:A2:79:7E:82:39:68:2D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/955a609a-42f8-316d-a938-27d1ede991ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631/4b0cf977-e8ab-492d-bd1d-e7b11385e631.crl

            X509v3 Authority Key Identifier:
                keyid:31:2D:BC:40:C8:98:37:68:4D:D7:DF:28:3F:A8:DC:28:EA:73:99:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b0cf977-e8ab-492d-bd1d-e7b11385e631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6a:8f:28:3c:4b:e8:ef:06:46:1d:32:1c:53:58:07:4e:6c:
         ba:c0:b0:4c:ad:a0:05:e9:fa:02:e7:03:8c:7c:cc:31:dc:a7:
         20:b8:25:39:21:ff:1c:58:f4:0c:dd:5a:8e:59:a9:67:be:bf:
         a8:51:3b:ff:7a:c2:15:7f:01:db:1e:41:87:e7:2e:87:52:8e:
         ef:5f:d4:65:8e:3f:41:6c:a3:0d:29:d9:8f:bc:e3:25:0d:0e:
         0a:b4:a5:1a:da:64:64:74:7a:80:dd:82:ff:44:50:d7:91:66:
         68:8b:83:d7:6a:4b:6f:e8:65:6d:49:e4:97:20:7c:35:d3:6b:
         a5:29:e1:8e:cb:30:95:13:16:e8:35:24:f9:b8:e9:8a:46:37:
         60:26:cb:de:19:6e:e6:fd:48:bc:70:5a:3c:49:8e:8b:ef:df:
         ab:22:46:e3:4e:94:5d:d5:e2:91:68:ec:c5:7a:9e:90:b2:39:
         72:40:27:27:f1:c0:aa:1f:a4:7c:70:16:44:47:66:12:dc:33:
         ea:c1:d5:dc:52:df:2d:49:e9:7b:dd:a4:2e:6e:77:18:eb:33:
         74:12:41:81:31:79:b2:29:40:d3:02:ca:c7:dd:34:06:91:df:
         d6:9c:7a:af:e4:9c:b4:70:f9:76:29:5c:a5:cc:68:9a:a7:22:
         00:01:45:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:32:21 2026 by rpki-client