Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/08fce3eb-bc2d-3085-8fe9-63e8a80f2e30.roa
File:                     08fce3eb-bc2d-3085-8fe9-63e8a80f2e30.roa (raw, json)
Hash identifier:          Xm56TsBUh4gpqpmnA18SnqkgPoP1WByDyryfIiF7SzQ=
Subject key identifier:   6C:F1:27:9B:24:D3:3C:6F:8A:FD:AB:D6:1D:10:33:33:AA:56:FF:1D
Certificate issuer:       /CN=7be1bbae-4c45-408f-b5e1-6618f1ec1863
Certificate serial:       010D0C9F4328584E1B89B5C82579D17A3E988680
Authority key identifier: 39:7B:1E:8F:50:89:18:F0:AE:AF:1B:6F:DB:07:13:9A:A8:CF:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/08fce3eb-bc2d-3085-8fe9-63e8a80f2e30.roa
Signing time:             Mon 08 Jun 2026 21:32:48 +0000
ROA not before:           Mon 08 Jun 2026 21:32:48 +0000
ROA not after:            Sun 06 Sep 2026 21:32:48 +0000
asID:                     400463
IP address blocks:        199.16.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:89:b5:c8:25:79:d1:7a:3e:98:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be1bbae-4c45-408f-b5e1-6618f1ec1863
        Validity
            Not Before: Jun  8 21:32:48 2026 GMT
            Not After : Sep  6 21:32:48 2026 GMT
        Subject: CN=373b8195-f8aa-46b6-b360-65253a3e2200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:76:97:47:9c:b4:0d:4d:0f:23:34:2c:22:
                    7d:88:10:f5:58:09:b9:a0:0c:62:c5:c1:63:90:8e:
                    79:62:1f:59:61:2b:11:16:2c:9c:c8:ef:bc:06:18:
                    53:49:05:81:47:46:ca:71:1a:6a:93:8f:65:8a:08:
                    f6:77:3f:47:bb:bf:3e:64:89:ab:1a:da:cc:6b:f4:
                    69:f4:e5:5c:8b:8c:24:41:8a:51:5d:ce:23:34:6a:
                    61:d4:c8:c6:50:a5:ea:fb:93:7f:91:ea:58:56:ab:
                    ab:d6:6a:ca:74:00:b7:3a:79:23:3c:b2:3a:c1:20:
                    53:60:23:0b:03:9e:74:ea:90:84:d6:1b:b1:9a:e4:
                    a8:d5:90:5e:0a:02:58:e5:61:db:76:85:de:8f:7c:
                    13:97:30:c7:24:8c:f2:9c:d1:fd:23:b4:c1:30:97:
                    7e:47:cb:f5:44:f5:e2:27:b0:db:9a:61:01:a2:db:
                    be:1d:dd:fa:8d:5e:9e:f8:c0:91:0c:a5:54:be:64:
                    e0:4c:05:ef:93:3c:f5:2a:1d:7c:4f:e8:d5:8b:18:
                    37:a0:96:19:bb:26:a1:e1:0c:11:64:2e:aa:85:ca:
                    ac:9b:f0:7d:d3:2c:17:2d:e9:66:ec:0e:97:5d:b6:
                    9b:a4:c3:17:75:78:4f:49:44:bb:47:35:ad:ce:34:
                    67:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F1:27:9B:24:D3:3C:6F:8A:FD:AB:D6:1D:10:33:33:AA:56:FF:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/08fce3eb-bc2d-3085-8fe9-63e8a80f2e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.crl

            X509v3 Authority Key Identifier:
                keyid:39:7B:1E:8F:50:89:18:F0:AE:AF:1B:6F:DB:07:13:9A:A8:CF:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:04:7b:5d:8b:47:8d:71:58:45:9b:a3:a2:64:fc:4a:a4:d8:
         9d:a0:b5:31:c9:bd:ea:58:bd:3e:3e:bc:0a:c7:57:70:b2:37:
         1d:8b:16:5b:a3:2c:22:bb:9a:dc:c8:d9:a2:75:bd:95:eb:d9:
         cf:cd:d3:51:27:ee:e6:89:35:97:58:84:18:60:ac:09:3e:b2:
         8a:0b:9e:ee:82:eb:7c:37:e9:36:16:77:9e:12:97:55:33:0c:
         68:06:bc:91:e9:6f:02:23:8e:65:3f:2e:9b:c4:74:8c:23:e1:
         93:0c:6f:d3:76:9e:aa:4c:62:b0:43:71:16:09:c9:4e:96:96:
         47:50:eb:8c:fa:03:19:69:b5:4d:ba:93:4c:e8:31:6d:1c:fa:
         d5:c2:fa:f5:6a:83:f1:27:f3:5f:38:5c:48:6d:a4:99:3a:1a:
         6e:1a:f5:23:d0:a8:4a:88:32:16:7b:64:3e:4e:1a:73:4c:1d:
         22:f4:55:f7:34:f4:2b:ba:77:51:d1:61:46:52:e8:0b:16:82:
         99:7d:5d:21:c0:c4:79:51:57:2a:9c:73:3d:07:a5:07:77:82:
         ff:e7:49:56:ee:70:fa:cf:83:cf:27:9c:1f:03:83:37:58:93:
         db:d6:d2:95:5f:43:88:44:00:86:28:c7:4c:b7:ec:0e:1b:f8:
         10:a8:dd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:51:57 2026 by rpki-client