Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa
File:                     880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa (raw, json)
Hash identifier:          t7CBHB45/PR4LaSz5pcbMeQyHQGagZfwsygSnuMBFrI=
Subject key identifier:   AB:D6:A1:72:D3:46:A8:23:06:6C:37:86:D7:48:1E:FB:1D:9D:B0:7A
Certificate issuer:       /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial:       010D0C9F4328584E253EFB648A046A2876FAEC00
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     7224
IP address blocks:        192.111.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:fb:64:8a:04:6a:28:76:fa:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=4bd5431b-43f3-4e3c-a702-3af1d94c03b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:93:14:5c:96:4d:bb:25:40:3c:8c:d1:d3:a2:
                    81:3a:81:a4:37:0f:13:ef:d4:76:47:2c:20:b4:f1:
                    e3:5a:64:77:b4:35:fb:5a:7e:f4:0d:25:2b:cc:58:
                    71:42:6c:94:7f:47:a5:33:20:92:77:8e:d3:0f:20:
                    23:a1:23:14:08:18:6e:94:f9:77:d6:f8:04:80:76:
                    fb:49:a7:5f:93:30:73:dd:2d:bf:7b:2b:a3:13:0f:
                    f6:10:36:61:55:be:b0:5e:37:bb:5c:1b:74:a0:6b:
                    da:ad:66:71:3c:db:62:ea:5e:a8:cd:be:cd:64:80:
                    8e:8c:86:b5:cf:76:84:ff:a1:f8:72:16:69:1d:75:
                    49:77:c2:ed:22:1d:b3:4a:eb:33:a9:e5:85:8f:b3:
                    d2:d5:f0:3f:fc:f5:40:70:98:1c:31:d5:4b:d3:09:
                    f6:e9:c2:22:bb:29:c5:95:4e:4c:6e:fa:8e:87:6d:
                    d1:00:91:95:0f:87:26:e6:50:38:a0:db:48:fd:c8:
                    a9:0f:b2:19:69:54:ac:b0:2d:ab:c6:3a:1a:66:67:
                    dd:a4:57:44:85:6b:b3:47:d7:80:68:67:6f:27:43:
                    e3:61:c7:ae:d6:e4:16:da:9e:cc:9f:05:a7:a7:bf:
                    4d:89:25:7e:5b:21:62:4c:c5:19:8e:0a:ca:36:90:
                    47:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D6:A1:72:D3:46:A8:23:06:6C:37:86:D7:48:1E:FB:1D:9D:B0:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl

            X509v3 Authority Key Identifier:
                keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:55:67:c0:a2:2a:a4:c8:bd:0d:0e:99:02:0d:31:09:05:ee:
         a2:57:38:72:85:37:9c:0f:15:3d:25:b6:c9:f5:f7:69:b9:f6:
         e9:eb:4a:c5:63:89:ab:a3:45:07:a4:8b:2b:36:88:54:c7:d9:
         6b:e9:1c:b5:27:0a:54:64:6e:21:19:76:ec:a1:79:25:68:be:
         fe:da:e9:b8:f6:a6:91:d5:68:5d:d6:99:45:a1:22:92:a1:ef:
         fb:b7:cc:cd:3d:a5:f5:b4:14:f4:b3:c5:07:59:68:da:f3:82:
         c8:54:5d:a7:1f:2e:33:18:a6:0b:cd:9c:94:a9:2e:8c:ca:45:
         21:7c:90:e3:94:4e:4a:ef:b3:81:ec:21:1c:a4:78:42:36:a3:
         74:ae:e5:c4:f7:ab:14:e6:98:8f:4f:a9:99:31:c8:28:c8:6e:
         49:2a:aa:e2:6e:ef:80:fa:7c:8e:fe:0f:1d:2f:d0:b0:a2:fb:
         6e:0f:10:35:d7:20:08:8d:fa:9d:fd:ab:94:77:2d:1d:b1:43:
         7e:58:49:5f:e1:37:91:fa:2e:1a:bc:8e:74:30:74:9c:57:9f:
         b4:2d:f4:d0:28:fc:ca:d6:3e:4e:b7:44:2c:bd:67:f5:30:74:
         fa:1a:4a:92:1e:79:e8:aa:64:b1:34:1b:c6:6a:ba:ce:21:6b:
         e3:74:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:12:18 2026 by rpki-client