Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/072f301d-1465-3672-86af-70905208910e.roa
File:                     072f301d-1465-3672-86af-70905208910e.roa (raw, json)
Hash identifier:          bN4IY1mz4Z+Qh2bd7sPY7W4HLHi8ZF28t9XlXGT/HjQ=
Subject key identifier:   26:7C:AD:90:A7:1C:DE:3E:E3:B8:1C:A8:B5:44:13:9F:92:7A:B6:57
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584EA5AA98531A54710475059D80
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/072f301d-1465-3672-86af-70905208910e.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     3738
IP address blocks:        192.250.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:98:53:1a:54:71:04:75:05:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=ddc75e2d-aebf-47ce-8d66-f6b57bfe8ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bf:c6:81:4c:b3:7b:de:70:12:7c:2a:73:90:
                    dc:39:09:32:7e:6b:fa:eb:44:1b:ae:99:26:e8:d1:
                    75:f8:18:fd:d1:d3:0c:13:45:31:d1:3b:89:55:da:
                    ac:1c:7c:52:9f:1f:16:b1:d8:28:3c:55:03:d2:f5:
                    e2:f7:73:f6:c9:5f:74:0b:47:20:37:ae:83:29:99:
                    1f:12:2b:a5:a0:0d:df:2d:56:0e:4d:7b:91:91:44:
                    10:70:58:58:9a:c6:d6:1e:76:ca:a8:e0:1d:fe:6e:
                    50:2a:e5:6d:27:bf:99:03:13:7c:3a:57:18:e7:e4:
                    be:3f:7e:fa:0d:15:20:d8:a0:00:ed:50:a3:2b:f1:
                    14:5d:8d:2d:86:91:8a:a6:74:24:50:d0:a3:33:cf:
                    b4:95:b5:d2:a0:c6:df:d4:cc:5b:08:e4:d1:29:97:
                    37:10:d6:7a:5a:11:44:c9:87:ab:ed:27:4d:b2:63:
                    e1:78:ba:63:d1:87:72:f8:d3:4e:9e:c0:b0:dd:52:
                    08:05:fa:ce:c3:01:83:9a:3b:51:c0:3c:b5:b6:67:
                    d2:c7:eb:12:85:72:49:51:63:98:a5:1f:5d:02:22:
                    a5:ec:e5:80:ac:6a:20:7a:01:5c:0b:61:1f:53:a4:
                    2e:eb:06:f3:5c:dc:8f:11:b9:61:b6:7f:07:0a:88:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7C:AD:90:A7:1C:DE:3E:E3:B8:1C:A8:B5:44:13:9F:92:7A:B6:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/072f301d-1465-3672-86af-70905208910e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:65:87:1f:47:77:c0:2e:64:99:98:0c:45:db:81:15:1a:be:
         af:55:3d:12:79:19:08:b0:53:a6:8a:b1:34:cd:53:5e:9a:f8:
         57:17:19:3b:6a:68:3f:db:2a:53:02:ca:3c:82:22:75:0c:ae:
         a0:aa:e2:ee:12:ec:4f:23:cf:23:84:51:0d:93:4d:63:4b:36:
         29:df:46:17:5c:1b:ff:ee:95:16:11:04:d0:44:9d:bf:6f:1a:
         3f:a2:74:3f:15:8d:9e:29:2c:b8:5f:08:fd:14:d0:71:2e:dc:
         58:2c:f9:7f:ae:9f:59:e7:a2:05:26:43:88:7e:c1:0b:e8:56:
         13:c1:b4:5c:32:2e:d5:53:c1:a2:d1:8e:0e:e4:ad:64:5e:16:
         be:ec:54:ee:63:13:5a:fd:06:71:23:90:d9:5a:32:ad:d6:76:
         dc:71:d8:69:d4:bf:42:14:f3:bf:5c:60:b4:48:2e:b5:0e:f8:
         22:62:ff:4a:f1:48:23:35:9c:61:00:29:c3:35:ce:43:2c:f9:
         0c:70:d1:48:bc:c7:f5:06:59:e2:dc:29:c7:be:be:dc:dc:b4:
         ef:e5:06:2c:16:7e:a2:9e:3d:8a:73:c0:18:29:04:17:ce:67:
         38:67:88:9f:9d:9a:a3:26:0f:89:2c:1e:84:55:eb:08:48:02:
         ae:5b:1d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:20 2026 by rpki-client