Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/c6e465b1-bc77-3ef2-b067-2b36fc2a5eea.roa
File:                     c6e465b1-bc77-3ef2-b067-2b36fc2a5eea.roa (raw, json)
Hash identifier:          QyGMvfqmQctRnA2S1LA2g/0XQDtSSNj9RHe34BHq8HE=
Subject key identifier:   4B:C2:90:0E:16:DB:59:6C:63:A6:17:9D:FB:C7:27:EA:DC:7F:E8:68
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584E5084A1CDDCA337F93F828280
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/c6e465b1-bc77-3ef2-b067-2b36fc2a5eea.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     17012
IP address blocks:        192.160.215.0/24 maxlen: 24
                          198.54.216.0/23 maxlen: 24
                          198.199.247.0/24 maxlen: 24
                          205.189.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a1:cd:dc:a3:37:f9:3f:82:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=802433a9-297f-45e8-bb03-0fe51bd7f5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:95:3d:bd:70:1d:8a:d2:5d:4c:72:1a:f6:
                    ae:a4:40:cd:e9:eb:72:d3:1a:74:8c:8c:41:61:1a:
                    cd:2d:b3:37:c4:d3:02:aa:bb:4c:81:7e:68:67:a5:
                    dc:63:6a:73:be:7d:e7:4a:6f:fb:30:89:70:31:e0:
                    43:39:e4:a3:12:2e:49:28:80:20:29:23:7a:09:c9:
                    05:f1:86:9b:52:03:c0:b8:ff:df:7a:5d:81:f5:42:
                    a0:29:a2:9b:b1:0d:5b:94:a1:42:eb:93:c9:45:37:
                    e2:58:24:77:58:1c:76:7a:b1:d2:6a:32:ff:15:bd:
                    20:4a:45:2c:75:65:ed:6d:51:93:49:db:e7:77:47:
                    dd:b2:be:6d:28:56:bd:a7:73:0d:b8:66:e0:91:63:
                    be:92:ac:2f:95:0c:52:21:51:22:cb:91:6f:a0:fc:
                    01:93:44:7f:87:76:ec:0b:2f:45:a0:d0:83:44:11:
                    3c:97:1f:b5:92:17:b6:3f:6f:c1:05:2d:6c:a8:b9:
                    e0:f6:8a:80:89:0a:3f:69:c1:71:08:27:ca:d3:a5:
                    e6:a0:cc:bd:df:22:e2:40:5f:f5:aa:9e:3e:c9:37:
                    c8:ec:20:9f:41:9e:8e:0a:b5:66:f9:7e:16:1d:aa:
                    85:00:ee:a5:4b:39:85:94:69:d8:7c:b2:bc:5a:a8:
                    75:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C2:90:0E:16:DB:59:6C:63:A6:17:9D:FB:C7:27:EA:DC:7F:E8:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/c6e465b1-bc77-3ef2-b067-2b36fc2a5eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.215.0/24
                  198.54.216.0/23
                  198.199.247.0/24
                  205.189.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:13:29:0a:a7:c0:8d:5f:3e:fe:e0:7c:fe:e3:6e:ed:d2:df:
         09:2e:42:4c:ea:8e:18:7d:30:c1:5a:59:0a:e9:5e:f2:61:e6:
         52:c1:f6:b4:f7:77:f2:ad:1a:4a:a6:9b:a0:98:46:04:a1:83:
         a6:70:9b:2e:58:6f:97:bc:19:05:a0:4b:5b:77:61:8b:18:8b:
         f0:a9:1f:17:1f:12:d1:76:c7:22:65:d2:24:5b:b8:f1:b8:63:
         ff:9f:ca:7c:9a:f9:55:bc:95:a9:58:53:32:f6:b6:65:22:c3:
         f6:92:2e:61:10:72:65:b8:ae:25:8a:19:30:24:98:e6:d3:ef:
         f0:2d:c8:83:83:a0:14:94:5c:4e:25:53:78:ef:7b:b8:16:1d:
         ee:f8:9d:6c:24:e4:70:d0:33:0c:88:2b:89:e9:70:80:b3:a6:
         e7:15:ae:ea:3e:54:8a:24:a4:7d:79:10:ee:bb:14:9b:07:b0:
         2f:4a:0c:33:26:85:1a:f5:82:2d:af:91:cc:b4:fb:9d:12:94:
         79:ad:97:ec:5c:3b:0e:b9:7a:38:c4:61:c6:92:d0:9e:14:d1:
         8e:9c:7a:45:7a:61:9f:0a:c5:a9:6f:2b:c9:8b:58:e7:19:08:
         e4:fd:64:18:7a:17:60:11:8b:15:f0:6a:23:20:e4:e0:23:45:
         2b:65:16:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 05:13:42 2026 by rpki-client