Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/7117b980-fe5a-3fdc-8f72-078d4660d968.roa
File:                     7117b980-fe5a-3fdc-8f72-078d4660d968.roa (raw, json)
Hash identifier:          r8a6reIdONGk5vvJ+ldlHrav4H10ANrQQmtBbGNV89Q=
Subject key identifier:   01:AB:4E:35:40:19:B8:41:9C:56:14:6E:CB:12:72:36:8C:8E:14:CC
Certificate issuer:       /CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec
Certificate serial:       010D0C9F4328584E296F131ED6068884EB7FCB00
Authority key identifier: 12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/7117b980-fe5a-3fdc-8f72-078d4660d968.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     46641
IP address blocks:        216.40.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:13:1e:d6:06:88:84:eb:7f:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef04fbb-44d8-4d48-8d23-e4b20831a0ec
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=ace54583-6687-4569-971c-096586c1fde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5a:bd:96:ba:65:c6:73:be:11:22:d2:24:b0:
                    e2:91:06:dc:77:fd:54:bc:0f:90:24:b2:81:3c:4d:
                    d0:08:5f:5c:d5:16:67:4a:9e:1a:26:be:a5:e2:47:
                    8f:a1:bb:c1:d0:a3:11:f9:55:99:8e:95:0c:d7:48:
                    57:43:af:86:c8:ba:2c:0a:6b:04:2d:8e:5c:b3:b6:
                    92:1b:c2:67:3b:88:b2:bb:80:07:56:73:0a:2f:95:
                    e6:ab:7e:f7:1c:18:53:38:ff:2a:5b:8e:81:3e:e0:
                    23:df:5e:0a:a9:0e:04:fb:8c:24:47:7d:98:ea:80:
                    e2:db:53:2c:3e:83:04:8c:56:c8:15:91:30:da:23:
                    c2:e5:af:e4:cb:47:8b:30:33:89:37:1f:b7:1f:56:
                    d9:da:15:59:5c:b6:10:ea:b3:02:a5:05:59:c6:fe:
                    6b:80:4e:f1:dc:c7:e5:c9:69:34:5f:34:a3:43:d5:
                    11:1f:44:e7:b4:cf:d9:4c:38:8e:d3:fc:bd:e9:4c:
                    91:ef:4c:c1:19:d7:e7:56:e1:55:da:84:cc:e1:e3:
                    bd:e9:4d:d7:a6:4c:03:6e:90:51:39:7a:bf:ba:a0:
                    2e:fa:e7:b3:eb:49:3d:4c:7b:6e:b3:4f:6c:e3:ab:
                    39:21:b7:7d:55:f1:28:66:48:17:cc:8d:f1:18:b2:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AB:4E:35:40:19:B8:41:9C:56:14:6E:CB:12:72:36:8C:8E:14:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/7117b980-fe5a-3fdc-8f72-078d4660d968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.crl

            X509v3 Authority Key Identifier:
                keyid:12:2D:44:D1:92:67:81:58:AB:13:64:E2:9E:CF:E4:76:BB:52:1C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ef04fbb-44d8-4d48-8d23-e4b20831a0ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:16:fc:fb:82:d6:00:36:fe:e8:c3:64:5b:c9:b4:58:85:d8:
         a0:06:e9:57:07:6b:46:dd:3c:6d:80:24:1b:67:b1:e0:12:c8:
         b7:a9:fe:4c:74:df:94:16:51:72:88:03:91:18:b8:c5:b3:04:
         45:7b:c3:63:20:7b:a1:45:a1:79:0f:a2:7d:32:dd:6b:f3:4d:
         db:6d:ef:30:d6:3f:dd:b4:43:bf:10:3a:0c:d9:8f:25:95:01:
         15:77:f8:b9:1f:54:b4:20:e0:77:49:a8:34:53:89:da:b4:52:
         3d:55:8d:e1:78:22:c7:c6:55:5b:b8:52:b3:14:4b:63:04:b4:
         d0:f7:fd:42:96:85:7f:53:16:3c:f6:48:09:26:a5:87:f6:df:
         c5:49:23:9f:f4:86:16:f5:66:59:00:25:40:44:89:8a:18:7f:
         51:8e:6a:74:14:71:a2:c3:b9:9d:14:b3:af:01:0e:26:b8:c9:
         ce:e1:a7:82:ef:4f:cf:fb:24:83:a9:9f:15:73:f0:a5:73:9e:
         c1:1c:69:32:85:57:c6:4a:e0:ad:5b:93:87:d2:a3:49:01:06:
         51:14:f5:e6:d7:60:cf:39:2c:80:bc:48:22:9c:f5:e7:71:41:
         61:05:d6:78:3d:25:9b:62:f6:c6:b6:21:e8:11:ff:ea:5a:64:
         69:f0:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 19:43:05 2026 by rpki-client