Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa
File:                     9721a2b0-73bd-3612-b051-3fefdae4d925.roa (raw, json)
Hash identifier:          Q1Rt5KFBUWt9WohDr6RBmJTbD/NQzp0Ha8Atsqc7jjk=
Subject key identifier:   50:01:99:DB:D0:A8:35:C0:8A:D9:1C:17:06:C5:7D:90:46:58:9E:6C
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584EA4451610BB2A7F518753C180
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     19637
IP address blocks:        192.19.66.0/24 maxlen: 24
                          192.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:16:10:bb:2a:7f:51:87:53:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=5995033d-1ea8-4395-850f-c8a19c5d9cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d7:fb:71:a5:bb:f3:d9:73:e4:98:9d:a2:76:
                    1a:1b:a1:3c:ea:ef:a2:c2:f0:fd:05:7b:6b:17:98:
                    39:65:2a:e9:6c:17:39:2e:22:0c:ed:2e:e0:17:27:
                    8a:fc:b8:50:f0:94:6b:99:18:6e:9b:5f:8b:6e:96:
                    5f:98:f6:2f:61:22:1b:97:d2:43:81:8e:f4:27:e8:
                    65:44:35:0c:a5:be:15:da:39:2b:7c:c5:40:2e:dd:
                    a9:fd:b9:84:7c:f3:ab:02:b5:bb:cb:90:f8:0e:d3:
                    9a:c6:f9:79:0b:a7:6f:10:cb:2f:df:94:8f:73:d8:
                    3a:e0:73:68:cd:78:ab:2a:7f:44:8f:95:8a:33:a3:
                    9f:4e:41:a4:97:92:51:a9:31:55:f4:90:26:ac:41:
                    96:1a:e6:67:04:24:40:53:ef:12:65:02:01:8c:74:
                    1a:18:f0:b7:b4:fe:26:0c:17:bc:00:78:c7:c5:9f:
                    87:d7:7a:65:83:63:32:a0:04:c4:5c:44:b9:a2:67:
                    0f:c2:83:c2:3f:c9:26:e1:fc:4a:36:ca:2d:7a:e6:
                    9d:6e:4a:a5:88:2b:ee:ba:90:47:d3:97:53:e8:54:
                    e3:18:18:c9:c4:2d:f8:91:2b:20:3c:3c:34:c0:22:
                    1a:3b:49:70:e5:e2:bd:d0:3e:1d:43:bf:96:1d:91:
                    b6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:01:99:DB:D0:A8:35:C0:8A:D9:1C:17:06:C5:7D:90:46:58:9E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9721a2b0-73bd-3612-b051-3fefdae4d925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.66.0/24
                  192.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:81:7f:34:94:b2:35:20:f8:0e:11:f5:fe:5b:d3:1d:25:f5:
         34:65:d8:51:9b:e4:0a:00:94:1d:aa:4a:5d:44:19:f0:8f:5e:
         23:21:67:99:ec:19:6e:b8:5c:bb:5c:6e:5a:b6:f6:a9:b5:73:
         2f:9e:c9:21:1d:3e:27:3a:a2:2e:6e:b5:29:0c:ff:c6:05:04:
         92:64:4f:9b:55:a9:f4:c3:d0:f9:1d:ad:7c:3e:0f:04:dc:01:
         a7:67:b2:83:44:61:c8:5c:bb:c5:13:af:10:57:98:4d:51:99:
         06:41:23:e0:37:ba:e9:34:2c:30:79:a7:75:3d:79:a6:a2:0a:
         ef:e6:0a:df:33:ba:8b:cc:cf:ab:bb:85:5e:35:c9:35:65:55:
         b0:00:5e:8f:a4:ab:be:9d:c4:b9:cf:9c:fa:60:28:01:00:6a:
         3a:b3:69:b3:32:f1:22:5c:50:e6:23:e6:bb:0e:b1:4b:84:98:
         b7:b7:df:04:93:76:de:a6:d5:ac:9f:c7:40:52:85:40:b2:1c:
         70:90:7c:ab:7c:82:b3:80:cb:cf:cf:6f:9c:13:17:95:d9:be:
         d2:11:b4:71:bb:b1:2e:c3:7e:b5:b8:45:31:3f:2c:0d:90:87:
         c0:41:6d:fa:ca:ec:5b:fe:d2:2a:fd:3b:b7:14:cf:f1:44:d7:
         35:81:31:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:29:56 2026 by rpki-client