Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa
File:                     9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa (raw, json)
Hash identifier:          g+7uU7VjsxR1THsLgCple/egXDpuRAw6ei4Q4dYO9Yk=
Subject key identifier:   1D:D9:34:40:26:AD:B5:50:57:6C:A7:B3:5F:0E:0F:DA:FB:0E:D6:B6
Certificate issuer:       /CN=6d271821-206b-40ae-ba11-9112dbf17eb4
Certificate serial:       010D0C9F4328584D6515181007CCCE088600AD80
Authority key identifier: F0:B1:B3:76:BD:03:1E:E4:96:FB:DA:41:D8:7B:69:95:83:2E:A0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     12129
IP address blocks:        192.96.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/6d271821-206b-40ae-ba11-9112dbf17eb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/6d271821-206b-40ae-ba11-9112dbf17eb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:18:10:07:cc:ce:08:86:00:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d271821-206b-40ae-ba11-9112dbf17eb4
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=da4cd45a-b575-4045-ba26-0884cf7c9ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:c2:5f:69:f7:76:2b:03:de:66:f8:d6:5b:
                    7a:dd:18:39:a2:32:f9:51:e9:e8:5a:cd:8c:ba:cd:
                    e7:86:8d:43:a8:41:c4:4e:af:de:e3:a3:c6:a3:f9:
                    b1:aa:bb:77:99:e3:5d:73:19:27:d1:4d:56:29:cd:
                    99:03:fb:15:0a:55:54:d5:4c:50:a7:8f:16:0a:3d:
                    04:89:ff:ab:3e:f1:4b:16:fe:c4:20:6a:18:24:8e:
                    17:9e:91:07:04:2b:6e:79:0e:d4:ae:0c:97:2d:fd:
                    63:af:8d:47:c1:80:2e:ef:17:a6:50:39:8e:4a:65:
                    3c:5b:90:49:64:63:b7:66:36:d1:2c:59:f3:e0:57:
                    d2:60:67:9c:0b:06:66:a0:74:af:48:5e:e5:bb:9e:
                    48:ae:03:ff:09:c4:83:48:15:7f:4d:c1:24:57:21:
                    72:97:c3:32:b0:dd:af:d0:af:bb:20:9c:6e:73:ff:
                    ac:5f:57:b1:51:7b:ed:8e:26:0f:4d:3d:6b:dd:16:
                    5e:08:4a:92:49:d9:1b:91:e0:b8:3e:a0:07:d9:84:
                    9c:63:8f:e9:cb:41:65:f7:3e:01:b8:a2:16:f3:82:
                    fb:5e:70:69:15:68:fd:53:8d:d9:f7:ce:b8:20:50:
                    61:65:d7:2e:ec:e9:d9:03:52:4c:eb:62:03:b9:c3:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D9:34:40:26:AD:B5:50:57:6C:A7:B3:5F:0E:0F:DA:FB:0E:D6:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/6d271821-206b-40ae-ba11-9112dbf17eb4.crl

            X509v3 Authority Key Identifier:
                keyid:F0:B1:B3:76:BD:03:1E:E4:96:FB:DA:41:D8:7B:69:95:83:2E:A0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.96.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:56:9d:6b:23:a8:50:b5:cf:99:54:c4:ec:a6:77:2c:7f:79:
         a1:aa:22:dc:e5:e9:09:4d:0d:29:70:3e:73:d0:81:95:06:2e:
         c6:26:43:ae:d9:02:e5:81:6a:59:ab:04:8a:c0:bf:48:1a:df:
         6f:c6:7d:c5:67:d7:c3:68:a4:61:7e:89:e1:85:b2:12:d9:95:
         9b:2e:6c:ff:55:9b:a5:df:00:ed:fe:03:4a:7a:92:fa:dc:3e:
         ca:e1:36:6a:f4:db:81:06:5d:76:48:b6:a5:16:56:72:64:64:
         8d:d2:12:19:fe:32:ae:cd:5b:b1:9f:2b:2a:fe:6c:da:3c:18:
         62:42:d6:2e:60:cb:a4:05:da:50:4a:7d:d3:2c:b3:3e:5b:17:
         eb:44:49:79:ba:f1:0a:e0:91:ca:7f:29:45:6f:4f:cb:df:93:
         9e:b9:29:91:5c:bd:a6:26:c5:a3:b0:ce:42:14:5f:60:91:51:
         ac:42:69:88:b0:ab:db:a8:8a:cb:39:30:aa:b2:e8:98:c0:c3:
         23:05:b0:df:3f:4f:4c:98:55:f5:7d:26:2e:5b:5f:67:f2:21:
         13:cf:c9:a9:0b:64:48:bf:a9:3b:9f:f6:7f:c7:38:b9:70:d5:
         8c:d5:02:34:16:74:46:18:f3:95:da:ba:31:3e:fe:01:78:cb:
         cc:c2:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:10:16 2026 by rpki-client