Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa
File:                     2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa (raw, json)
Hash identifier:          lSF1dMqGK7etB1f2E3O8M+pzbey5CdNSdnWCtx8yvjo=
Subject key identifier:   AE:88:4F:C0:6C:1B:61:F9:9C:23:A0:BC:35:19:61:BD:35:AB:24:01
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584E2D9F1F904D0C64337527D480
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     11260
IP address blocks:        66.103.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:1f:90:4d:0c:64:33:75:27:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=274760ea-bc28-4865-8593-8a78dae08310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:88:c5:c6:b9:24:ce:02:f6:b8:a3:d8:b2:
                    b0:db:b3:39:b1:8b:32:09:5e:ca:35:de:c8:ce:99:
                    2c:cc:57:87:1c:ca:31:e5:ca:1d:46:3c:81:be:e6:
                    10:af:30:f0:7d:b3:70:5c:a1:bc:05:49:bb:cb:4b:
                    af:9a:2e:1a:4c:22:45:fb:b1:38:a0:f5:26:62:d5:
                    d1:de:21:f7:7f:35:b7:d8:48:fb:16:8e:fb:dc:99:
                    91:50:83:e0:88:92:72:5a:ab:35:2c:77:fe:ff:c7:
                    ee:8d:18:6b:e1:ab:6c:07:1a:b6:57:0c:ad:1b:54:
                    1d:31:51:7b:3c:a8:1c:39:b6:6e:41:b1:cb:98:0e:
                    cb:96:6f:8f:cc:a6:58:4c:4b:bd:cb:d6:b3:39:d8:
                    a5:4f:ec:2b:db:04:09:a6:20:0a:3b:88:5f:b3:2a:
                    26:b3:28:3e:2e:d9:cf:f5:e3:c7:fe:77:ac:c1:f0:
                    1f:93:8f:0e:a8:72:42:f9:bb:b2:ac:11:a5:0e:1f:
                    7e:1b:d8:96:92:fb:44:78:ac:40:d3:f6:4c:b9:5e:
                    0f:35:7b:0e:b6:99:2c:13:51:92:60:57:67:20:d0:
                    9e:36:c0:96:8d:48:3d:e0:44:99:42:4b:f7:73:17:
                    08:0e:3f:9c:6b:68:fb:c7:e4:3a:78:22:40:c0:e6:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:88:4F:C0:6C:1B:61:F9:9C:23:A0:BC:35:19:61:BD:35:AB:24:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:08:51:9b:67:a4:74:21:52:d4:a6:64:42:59:20:73:95:e5:
         39:86:ab:9d:1d:17:d1:47:95:ff:fc:6f:8e:c0:d7:95:35:c6:
         6f:be:4e:88:ee:a9:98:14:ac:5c:74:eb:fe:35:ed:90:73:d6:
         8a:a1:aa:96:0e:22:bd:b7:f9:fb:23:10:54:a8:d3:af:93:29:
         ac:22:dc:26:17:6c:64:0a:0e:5e:95:d1:7e:09:3a:ab:e4:08:
         d6:aa:d5:9b:7a:e8:a1:d8:86:d5:ca:c6:d8:5f:6d:a2:9a:11:
         1a:58:43:f4:4d:bf:b4:8c:d7:16:9c:29:45:30:0f:d7:b1:c0:
         fd:36:41:4a:3a:52:50:cc:01:bd:fa:c2:92:94:28:92:04:e1:
         a6:95:36:78:5d:e6:79:7f:88:a2:03:40:32:5d:51:24:b7:d9:
         48:f1:fc:9a:b0:55:58:bf:88:47:06:01:d7:cd:74:14:2b:b3:
         6e:6c:d1:ea:d9:40:c5:ca:f5:ca:c5:73:48:42:d8:05:65:d0:
         e5:45:79:b2:2d:c4:ff:59:d9:b6:ba:92:ce:6f:a9:3f:ff:62:
         8b:ae:5a:5a:81:87:f5:4e:16:e8:c7:fe:7f:70:ee:a8:06:81:
         6d:f0:cf:03:d4:cb:35:6e:c8:a7:5f:3f:09:5f:c5:a0:d5:16:
         ba:f1:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:03:38 2026 by rpki-client