Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/527fa986-35bb-33c1-a1c2-8579672b73ec.roa
File:                     527fa986-35bb-33c1-a1c2-8579672b73ec.roa (raw, json)
Hash identifier:          fimq12xoRwIhbS/kElku7U1BS6Z7G74dpINYsqi/ZuY=
Subject key identifier:   15:B4:5F:E5:7D:77:6C:4D:5F:82:5D:21:92:D2:B7:5A:AE:B6:18:5C
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E3A2F1DC814C9D9628AE56500
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/527fa986-35bb-33c1-a1c2-8579672b73ec.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        134.224.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:1d:c8:14:c9:d9:62:8a:e5:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=d17e2fa7-da54-4cd2-8c58-b19f42dba74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b4:84:9c:2a:22:fb:74:dc:94:91:a8:15:28:
                    79:6f:4f:db:ce:89:e8:10:bf:5b:ec:74:58:93:fe:
                    d7:59:e1:50:e5:0a:a3:f1:db:44:23:60:db:ff:80:
                    23:ac:17:b0:da:21:ec:81:f4:e2:73:74:56:fc:92:
                    1d:ee:1a:53:97:f7:f4:73:a8:83:63:7c:56:f6:e1:
                    dd:8b:57:71:82:32:ee:1a:be:1d:06:00:a2:e2:43:
                    5f:4f:01:f1:b8:e0:a7:44:c5:6f:c1:16:dd:a6:fa:
                    f2:77:2d:38:a8:34:cc:ee:21:07:d1:75:ee:63:30:
                    14:d0:62:0e:19:fb:1a:0c:6b:60:af:da:98:ee:39:
                    02:b3:87:1e:fa:69:9b:0a:4f:e7:8e:27:66:3b:b4:
                    58:01:6a:2b:80:18:43:67:d6:4c:38:f6:a2:43:17:
                    82:8c:75:44:48:7b:e5:8e:ad:5e:79:fa:e2:51:9c:
                    5c:f0:f1:96:16:03:b0:93:f5:f2:fe:5f:4e:24:b5:
                    c0:48:42:55:4f:b9:8f:4f:60:eb:a6:4d:1c:e3:7a:
                    43:3f:a5:1f:6c:d5:ab:e8:be:50:57:52:22:77:b7:
                    50:31:ec:62:19:0b:8b:11:13:40:ea:c3:47:45:d8:
                    0d:7d:77:62:c8:4a:9a:76:2b:c4:a6:f9:43:b8:bc:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B4:5F:E5:7D:77:6C:4D:5F:82:5D:21:92:D2:B7:5A:AE:B6:18:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/527fa986-35bb-33c1-a1c2-8579672b73ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0d:0f:1a:76:e9:78:f5:fa:fc:d5:02:77:70:a0:91:32:64:
         8c:3d:b7:63:a2:f1:99:e6:c9:fb:08:71:87:81:b8:b5:06:3f:
         5c:75:95:70:e6:e7:48:9d:6f:5c:be:7e:f7:07:c9:11:55:16:
         ad:93:0b:82:1b:16:48:f5:9b:f4:ff:3c:7f:21:a4:0a:bf:bb:
         d5:e4:0e:09:0f:94:20:64:da:f2:0e:9f:6b:6f:ea:90:af:fb:
         aa:fa:bd:6b:4d:71:dd:fb:d9:42:d4:65:4a:d4:b8:1e:c5:32:
         d4:a5:fc:94:fc:38:2d:91:a6:a7:04:76:d2:53:4b:a3:3d:53:
         1c:96:50:93:f8:53:bb:e0:9a:15:03:91:36:b8:a5:8c:9b:20:
         3a:03:e1:e6:51:32:c7:26:4d:74:a8:9b:aa:64:fc:f5:59:12:
         74:bc:e2:a2:79:dc:70:03:d3:fd:34:28:04:0e:95:57:ee:de:
         38:a2:09:03:98:5a:fb:98:85:c1:42:03:13:82:59:8b:93:00:
         c9:13:7c:96:68:27:72:20:00:17:4b:c7:66:c1:7e:11:ef:11:
         58:22:e7:5e:9c:8d:ff:3c:e6:fe:90:55:ce:2b:12:bd:ee:8f:
         90:73:74:6e:0a:94:c6:8b:91:db:50:fd:59:b2:93:fb:87:78:
         8b:11:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:11:21 2026 by rpki-client