Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fa4a444-d4ce-3503-b060-20450537e4a1.roa
File:                     3fa4a444-d4ce-3503-b060-20450537e4a1.roa (raw, json)
Hash identifier:          qVLqVepun3jiui0T5TXfLTsuijNxmtQKbFR72s4VEhs=
Subject key identifier:   24:11:F8:8E:7A:76:1F:7F:63:1E:86:60:FF:4B:A8:74:24:6F:39:97
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E15E46DC3C6C6712940181800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fa4a444-d4ce-3503-b060-20450537e4a1.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     397630
IP address blocks:        192.171.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6d:c3:c6:c6:71:29:40:18:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=2519d5d8-fbc3-48d1-b79e-6be589614ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7b:85:d7:8f:47:4d:67:09:7d:4c:02:95:cc:
                    61:cb:b3:63:f0:68:4b:0d:e9:3d:dd:6c:76:b0:b8:
                    d9:3e:36:e1:c1:17:7f:eb:a9:cb:26:0e:49:0f:19:
                    28:7c:a1:7f:a1:34:39:fc:0a:08:c9:6d:4d:4f:9d:
                    96:94:c4:58:dc:68:8f:43:0e:c9:09:8f:9b:c5:46:
                    15:02:c7:3c:a0:f2:9a:61:bb:f6:d1:02:2f:23:26:
                    29:c2:54:4b:87:29:e8:19:94:70:01:20:cc:a1:b7:
                    1e:51:03:63:eb:99:ba:9b:c7:2b:c7:14:43:da:39:
                    ab:3a:c7:65:c3:76:6c:d9:67:22:16:98:ca:29:4f:
                    bb:ff:4b:f5:ea:07:00:04:40:d2:d9:08:79:23:34:
                    fe:48:8d:97:93:7c:18:20:40:44:de:ee:ea:6d:20:
                    93:b0:79:a4:28:52:27:85:73:9e:46:13:2e:de:45:
                    75:11:73:60:56:1a:21:e6:df:ea:ec:c8:1e:e7:05:
                    79:63:c8:df:83:df:d2:4c:57:37:dd:71:61:4e:1c:
                    3c:cc:00:47:a7:71:f3:6d:a6:9e:95:bc:10:80:6c:
                    59:31:79:7a:2a:49:ee:fb:a3:04:d0:3c:cd:f8:3c:
                    89:9b:bc:5d:35:ab:00:ca:a1:21:d2:20:7e:12:9a:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:11:F8:8E:7A:76:1F:7F:63:1E:86:60:FF:4B:A8:74:24:6F:39:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fa4a444-d4ce-3503-b060-20450537e4a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:cc:01:8f:46:6b:d9:9e:a7:b7:ea:71:17:cb:d5:57:e2:28:
         9d:3e:f2:66:2d:3a:13:1d:f7:29:d7:e7:f8:0a:88:6e:1d:b1:
         ad:26:62:71:0d:f4:b1:c7:ba:88:4d:af:70:4b:9a:fe:ac:e6:
         89:38:84:67:2d:09:23:49:81:a4:8e:32:f2:85:f4:56:c2:d6:
         2b:ed:85:4c:61:2d:fb:75:8a:34:a8:ef:f7:7b:d6:20:34:31:
         13:c4:34:00:28:ec:83:e4:28:60:98:79:d8:75:03:fc:09:2d:
         ba:25:38:31:22:a6:22:2e:c8:ad:6b:c6:84:da:ce:2a:33:f3:
         e8:fa:a4:38:7c:0c:85:df:09:49:75:25:37:bb:cf:41:b6:3f:
         df:cb:74:05:47:a9:29:95:7f:b2:e4:00:08:a7:65:fa:ec:51:
         ef:91:7f:4a:91:bd:ac:89:f8:57:9c:58:c1:8b:bc:b5:98:bb:
         a7:41:33:d7:c8:f9:12:1e:c1:d4:b8:2e:e8:66:d5:45:86:9c:
         d5:7b:25:94:54:4b:22:09:fe:10:c6:81:fa:63:2b:5b:d7:07:
         cf:b8:ec:59:7e:04:c2:be:c8:bf:0c:33:59:b5:f3:01:e1:e6:
         6d:b9:a2:e6:f5:9d:01:2f:37:75:c8:9a:c7:f3:bd:a2:7c:7e:
         c6:54:d2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:48:59 2026 by rpki-client