Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa
File:                     839e5923-d592-30e5-ba37-9fbbbf065f7a.roa (raw, json)
Hash identifier:          0nJMguD/u6Hbv/nOsIHlXrV1u5jKympQoWqNzOswD2E=
Subject key identifier:   A6:56:74:45:40:83:DA:3C:69:9F:73:05:DD:EF:6E:9F:79:8E:1D:E8
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059BBA16D1D49ACEA1DD2380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        172.217.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:ba:16:d1:d4:9a:ce:a1:dd:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=43485eec-23ac-4cf5-a3f7-161197d14f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d6:02:a8:08:1e:81:6d:ca:b5:56:c1:86:3e:
                    54:eb:0b:c0:0a:fd:50:fd:5a:27:13:a4:ed:48:9c:
                    f9:b2:eb:f9:54:2a:fa:b5:0d:23:6c:5a:4c:72:44:
                    7e:01:29:44:63:2c:ac:8e:77:4a:a6:56:81:b8:8b:
                    81:11:27:7e:c3:a2:0f:97:0d:25:1b:90:af:c6:a5:
                    7b:23:6a:e0:75:11:5a:7e:e9:58:f8:71:6e:ca:b5:
                    3b:ae:c4:69:4b:8f:18:e8:b6:f2:db:72:06:0f:64:
                    a3:af:75:32:44:46:5c:64:fb:6e:dc:5a:70:b7:87:
                    21:4a:27:26:bc:9e:e5:66:31:ea:83:40:54:30:a9:
                    32:27:44:be:c5:e4:14:9e:ef:52:11:42:69:a5:96:
                    0b:0b:7c:2d:a4:4d:5f:21:13:9b:90:b0:66:89:80:
                    dd:43:3e:04:13:99:17:50:bf:36:84:1c:e5:ab:4c:
                    52:17:d1:f7:eb:f7:25:ab:7d:2d:02:d7:9b:bc:42:
                    f2:3d:99:80:c9:18:10:72:86:bd:70:c6:fa:65:0b:
                    96:51:38:6d:2f:8a:7d:69:8f:dd:25:53:88:bd:4a:
                    63:ec:cc:e8:77:91:3b:b7:dd:03:71:ce:f6:6a:a3:
                    d9:e1:d6:2d:a3:d9:79:fe:ff:89:6e:ab:2d:29:ba:
                    56:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:74:45:40:83:DA:3C:69:9F:73:05:DD:EF:6E:9F:79:8E:1D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:2e:8b:45:1f:6e:30:71:ca:1e:79:00:eb:11:79:a3:8a:
         f2:95:b5:7c:c8:4d:35:9d:1f:e8:23:0d:2e:b6:bb:25:a8:1a:
         12:27:84:2c:b9:d1:f9:51:ef:11:b5:4f:e4:8c:c7:fb:51:03:
         62:7b:bc:f8:69:c0:c6:33:df:3a:63:ac:df:19:1f:4a:ce:af:
         5d:85:a5:f0:6a:0d:52:f1:04:d8:9c:75:28:7b:7f:29:b0:c3:
         01:56:24:24:7e:d4:92:cb:90:35:7e:df:9e:a1:2d:84:7e:d3:
         ff:ca:6e:4c:56:3f:b4:93:9e:54:91:3b:2a:38:be:5b:da:b6:
         3e:c3:88:bf:88:89:15:3a:bf:b7:c7:8a:f8:78:dc:45:f2:ab:
         42:d1:29:ea:02:05:37:06:0a:c9:09:33:6a:32:a5:c3:85:1b:
         4f:b2:a1:0d:27:f6:b9:1a:50:ca:76:1b:bb:da:96:69:8d:cc:
         b7:20:e2:e6:fe:1c:33:9b:b4:0b:8e:71:28:9d:83:22:d2:48:
         3c:c9:66:4a:56:3d:d2:9e:fe:0c:a7:69:82:39:77:cd:7f:2e:
         de:85:26:00:b7:9e:da:4a:ae:0d:89:31:b2:6e:7c:6c:66:ca:
         dd:e1:8d:18:42:d8:48:e0:e2:18:ef:e3:ae:3d:6d:3f:39:82:
         b0:d7:26:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:08:04 2026 by rpki-client