Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa
File:                     6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa (raw, json)
Hash identifier:          4Xz5HlAJhWoHnzHGNnnGK+UDhFgcK/NbhkXv09YPGB4=
Subject key identifier:   92:C4:BD:AE:0E:91:9F:B9:71:7B:73:3D:84:CF:91:A0:DC:94:9A:D8
Certificate issuer:       /CN=8792fa78-8f07-41ad-aaa5-9b445516bf82
Certificate serial:       010D0C9F4328584E1E4448FC2C53A21C8AF2C940
Authority key identifier: DE:A7:FE:B2:9E:14:63:F6:09:E5:68:DE:A8:F6:01:5B:6C:92:69:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     26286
IP address blocks:        23.138.156.0/24 maxlen: 24
                          2602:f661::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:48:fc:2c:53:a2:1c:8a:f2:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8792fa78-8f07-41ad-aaa5-9b445516bf82
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=1a2a1df7-0c19-47b7-8fd2-b16fea7a76e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:2d:50:ee:39:a2:a7:ba:72:cf:e8:b7:80:
                    d8:f6:f5:90:5c:cf:85:c6:e8:92:c1:22:8f:0b:5a:
                    03:34:84:3a:e8:2f:07:20:99:2c:81:41:ce:0c:1d:
                    84:20:07:a5:98:ba:15:d1:b5:eb:4e:01:93:e4:31:
                    cb:fc:65:35:7c:f0:ce:08:62:9f:33:d9:f7:8d:44:
                    bf:50:67:b5:33:45:64:a0:f7:a4:8a:05:56:f8:f0:
                    5c:da:08:2e:23:dd:bc:04:13:37:93:ea:95:e8:58:
                    07:6e:c1:43:ff:07:60:e6:13:1a:1d:1f:51:c9:39:
                    7e:bb:1a:94:6a:78:71:ff:79:21:39:f4:51:34:d6:
                    a2:ff:7e:50:d5:9c:e0:72:06:15:34:ec:1b:d4:8c:
                    42:e2:d6:65:c9:c9:ec:b6:ce:f6:c5:ac:c1:82:29:
                    d9:11:0b:6a:b0:e4:0f:b7:58:c1:17:81:65:7c:08:
                    53:0e:d5:19:ea:50:e0:7b:34:e8:5a:c8:2b:9a:bc:
                    c8:f8:77:3a:bb:e3:0a:d4:f7:25:6d:84:03:16:9b:
                    29:3e:51:a0:e3:19:98:a2:0b:d5:89:4b:7b:08:40:
                    23:05:6a:e9:ea:b7:6f:a0:44:37:a4:65:ef:73:c7:
                    90:f6:dc:f4:86:6b:a5:11:85:90:f4:a1:d9:98:ac:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C4:BD:AE:0E:91:9F:B9:71:7B:73:3D:84:CF:91:A0:DC:94:9A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.crl

            X509v3 Authority Key Identifier:
                keyid:DE:A7:FE:B2:9E:14:63:F6:09:E5:68:DE:A8:F6:01:5B:6C:92:69:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.156.0/24
                IPv6:
                  2602:f661::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:6b:38:58:5e:80:a4:d0:67:6f:76:fc:f4:34:d9:17:75:f7:
         3f:53:60:f8:dc:61:81:2b:44:ac:6b:2d:cc:43:ba:0d:63:8f:
         46:d2:e5:b9:c0:7d:6a:a1:0a:83:44:1c:a1:af:e9:87:3e:01:
         b7:7f:78:ef:ee:3f:53:22:d5:14:87:3f:3b:f6:6d:25:bf:9c:
         73:4b:c7:88:f5:95:35:74:6e:0a:5d:c3:83:f1:35:22:bb:ee:
         63:0a:97:70:d0:ab:13:f6:6c:3a:a7:8b:36:62:e9:86:0e:26:
         65:60:ce:44:8a:60:2b:9c:24:d9:bd:9e:79:9f:52:af:ef:44:
         6c:81:4f:43:fb:77:5b:9e:54:e7:e7:4f:94:f2:36:f6:ee:bc:
         c1:d5:e0:80:f7:24:a8:09:71:cd:e8:ad:73:9a:da:c1:94:ec:
         7a:69:f2:56:6b:89:fb:0c:59:73:76:98:4d:45:a1:46:dd:a9:
         d5:86:15:1d:20:61:83:e2:d2:b6:65:4d:25:38:8f:4c:fd:95:
         4c:ec:9b:18:17:23:fb:f6:bd:7a:35:36:0b:3d:fd:8d:2f:ac:
         c3:7c:46:a2:b6:f4:68:21:37:6b:8d:ae:7d:ee:c1:52:7f:e6:
         c0:32:25:f2:08:99:b0:3c:0f:6b:38:72:4f:93:05:eb:01:19:
         0c:22:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:34 2026 by rpki-client