Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/889605e8-b381-38e4-9042-117f16829cdc.roa
File:                     889605e8-b381-38e4-9042-117f16829cdc.roa (raw, json)
Hash identifier:          sWeS60KA9GAJF6p2+/Qe7TPEMcXKIPT6udqtFxaY3+c=
Subject key identifier:   22:00:5D:AA:E7:69:AF:D4:19:22:45:D0:A8:E2:9B:3E:E2:E0:19:93
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F4328584E296F0A0A49685E1953AF6160
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/889605e8-b381-38e4-9042-117f16829cdc.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     55095
IP address blocks:        192.173.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:0a:0a:49:68:5e:19:53:af:61:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=c44bf55f-1e2b-464b-8851-f110ff6c5c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:bf:7b:54:8d:23:d4:85:b1:02:e5:ee:82:
                    0b:66:eb:f8:32:43:ef:8b:1f:e1:95:1b:68:94:55:
                    54:1c:c7:c3:9f:29:09:f4:51:f7:53:e0:05:4e:76:
                    ec:98:43:08:81:bb:35:fa:b3:da:af:b7:89:39:d5:
                    42:3b:80:41:1f:85:c1:d6:79:72:9d:19:ff:f0:dd:
                    c9:89:9f:67:1e:b9:dd:f1:00:20:85:ff:27:81:d1:
                    62:3d:cf:ae:08:bd:cc:fd:23:e1:87:f1:42:04:a0:
                    a7:34:aa:3b:6d:d6:51:9f:a7:9d:c8:8a:de:80:10:
                    5d:3b:cf:10:94:45:03:58:83:7f:ac:c5:51:cd:31:
                    4d:2b:c3:ba:63:42:93:f1:cf:1e:0d:1c:dd:8a:21:
                    74:3d:03:a7:20:57:04:b9:c9:24:e0:a5:3e:da:22:
                    37:5f:24:a8:7f:d1:83:9d:80:fa:07:4a:c0:6c:c6:
                    13:73:66:21:f8:12:3a:f7:90:c1:79:c2:d2:c1:36:
                    c0:50:24:c0:0e:40:cb:85:4c:af:4c:d4:f1:6c:d6:
                    3e:d1:13:6e:b7:08:55:1c:35:19:8f:16:ca:2a:d9:
                    1c:b9:39:b4:7f:90:ef:53:72:64:24:b5:f4:bc:1b:
                    d2:63:be:5d:8b:a5:44:23:de:dd:5e:ee:20:51:83:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:00:5D:AA:E7:69:AF:D4:19:22:45:D0:A8:E2:9B:3E:E2:E0:19:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/889605e8-b381-38e4-9042-117f16829cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.173.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ae:59:d4:50:34:c1:f2:ed:57:c1:88:64:82:2c:10:29:6a:
         d0:80:3f:e9:1f:e9:2c:b1:f5:e5:85:ec:b2:31:e6:a9:c6:52:
         03:dd:78:1c:2e:ca:16:ad:83:06:b8:f8:3c:96:b6:db:90:d7:
         d1:f9:2e:ce:ef:c0:c1:f5:0b:8f:71:73:32:69:67:70:08:6c:
         2e:5b:72:95:bb:c5:19:a1:1e:59:d7:b8:74:2e:02:d7:1f:22:
         6b:b7:dd:38:c0:ff:6e:81:1a:1b:20:50:ef:0a:c9:4a:27:88:
         2c:8b:dd:79:62:49:5d:fe:20:1b:13:cb:4c:73:23:9f:91:70:
         02:5a:1f:7e:05:cc:13:26:12:e0:74:38:8c:a0:bc:81:21:1e:
         80:2a:ec:1d:6b:2a:88:1f:01:96:df:5a:4c:ed:65:ed:11:52:
         e4:98:fa:e4:87:c8:e8:c2:00:53:d3:7c:17:a7:7b:4d:36:6e:
         e1:ec:6f:17:e0:51:e9:f5:a3:a6:f0:a0:dc:ba:5c:70:f6:5a:
         ab:78:63:fc:87:0e:cb:aa:a6:ea:0d:c6:84:fe:26:53:af:c5:
         06:bb:62:0d:57:61:2b:4b:6b:09:ef:10:e4:4d:a1:65:f8:4b:
         49:2c:5f:b8:14:5c:15:49:f9:8a:4a:da:39:b3:65:67:74:5e:
         ba:6a:88:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:59:05 2026 by rpki-client