Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa
File:                     9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa (raw, json)
Hash identifier:          onDLLhe0v83OHtypsgBdSa5Dqy093YafxdcRUD023jQ=
Subject key identifier:   93:4D:5E:6C:3C:2C:DF:29:89:8E:C6:EF:74:A5:8A:A2:37:9B:25:43
Certificate issuer:       /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Certificate serial:       010D0C9F4328584EE38C995C7ECD8B65E038E340
Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     21766
IP address blocks:        192.131.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:99:5c:7e:cd:8b:65:e0:38:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=7c64f230-cc12-4b10-8ea0-40697e7f4aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:9c:34:50:4e:c6:12:a9:3c:6c:c2:b8:ae:
                    47:f2:e0:04:d5:11:d8:d1:57:db:02:08:5f:a2:73:
                    54:e9:41:34:57:c3:9a:9c:c7:86:61:ad:6c:be:81:
                    9b:b2:a0:6e:f0:42:d6:10:10:10:31:89:9b:be:20:
                    68:a9:a6:77:7f:a0:c4:55:79:0e:75:13:da:d5:58:
                    7f:80:4f:dc:ad:06:e9:a6:ee:21:83:42:89:14:bb:
                    27:92:c7:24:e5:a6:b6:fb:52:7a:5d:4c:35:06:b0:
                    39:ad:99:ca:65:db:1f:40:bc:0a:c2:65:c9:b0:25:
                    c9:bf:f0:b1:29:b8:a1:48:52:b6:c6:4c:fd:48:71:
                    2f:ee:cf:16:1d:88:e3:b8:e0:81:38:75:ef:d5:23:
                    91:6f:fc:44:9a:d5:af:22:c7:be:47:c6:04:96:03:
                    c9:da:08:92:ec:bd:e9:52:b9:2f:8e:47:58:b8:a4:
                    ec:e1:5c:8a:06:ca:ef:76:7f:6d:22:86:88:f4:de:
                    8c:3e:97:ce:d4:01:9a:6c:75:45:a0:b9:ab:13:4c:
                    11:46:bc:d7:c7:cf:96:f9:c1:87:18:ea:ea:4c:ec:
                    08:c3:95:e4:84:10:1f:79:75:4f:cc:44:03:a1:94:
                    f3:2b:90:01:04:f5:2c:49:20:06:4b:21:34:cd:1e:
                    13:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4D:5E:6C:3C:2C:DF:29:89:8E:C6:EF:74:A5:8A:A2:37:9B:25:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:02:36:c0:3b:61:a4:d7:ef:ce:0a:20:c9:a0:d1:cd:90:fe:
         74:97:10:dc:f7:9e:01:04:95:61:8f:1c:6f:32:f0:b8:25:9c:
         a4:42:54:30:92:02:3e:61:ab:fb:fb:93:01:97:da:b8:df:ef:
         39:20:47:38:fb:8d:05:d4:9a:b1:63:97:07:99:23:96:5e:13:
         0e:2e:b6:f2:e4:48:5f:ea:e8:d0:7f:51:c5:56:d5:d8:b2:9c:
         d8:4b:6a:15:a2:8c:49:dd:2d:eb:d5:c3:2e:bd:c8:4e:ae:9a:
         61:20:8b:62:99:ef:d9:c0:44:d6:45:a0:36:27:cf:49:68:a4:
         1a:cd:b5:f1:f0:9c:40:0a:c9:5b:5d:f2:8f:a0:80:41:cd:14:
         42:e8:42:63:96:06:1f:1f:08:9a:fb:f4:79:b1:09:87:25:b9:
         7a:0a:63:b4:f2:0c:d5:a6:e6:1a:35:36:c5:66:37:d9:a0:95:
         64:7a:a2:e9:94:c3:ec:8f:49:22:35:dc:bf:83:d4:ed:ab:36:
         6f:f4:20:70:87:5c:61:9b:64:b4:b0:e5:a0:ba:fa:92:a9:99:
         36:90:2f:2a:d2:0d:99:65:4b:63:e4:11:dd:74:5e:be:86:9d:
         be:92:40:98:8f:45:79:3e:f8:9c:29:d9:a4:1a:6f:32:37:72:
         c9:50:42:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:25:02 2026 by rpki-client