Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f5e6732-c647-31bd-9571-873987679adb.roa
File:                     1f5e6732-c647-31bd-9571-873987679adb.roa (raw, json)
Hash identifier:          g0EC3bim71dWcdjthwFELliAxX+djpVfSTFcNSuDESA=
Subject key identifier:   8D:6F:17:58:E9:EC:44:D7:17:0F:BC:FA:22:0D:2F:13:99:D9:B1:55
Certificate issuer:       /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial:       010D0C9F4328584E0005CD71BCA843808B0E5C80
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f5e6732-c647-31bd-9571-873987679adb.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     40676
IP address blocks:        217.149.102.0/24 maxlen: 24
                          2602:fb1b:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:cd:71:bc:a8:43:80:8b:0e:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=94a44280-fe4c-45e2-952c-faa4437d7c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:37:77:e5:b3:e8:d6:73:d0:9c:0b:d3:cf:
                    6b:c1:58:64:fb:d2:9e:9a:c0:98:56:f2:a7:c4:98:
                    d3:c7:45:cd:91:ff:f2:28:71:d5:bb:74:59:b9:df:
                    85:fd:eb:3e:60:a2:cb:a8:bd:5a:2a:f6:b9:55:91:
                    f1:32:e6:56:67:6f:d0:42:92:d2:00:c9:9b:60:4f:
                    62:db:ec:7b:e3:98:12:e7:4d:40:41:75:43:ba:69:
                    4f:3f:7a:54:c0:81:86:0d:ba:9f:57:03:82:37:37:
                    44:dd:3d:20:f3:b8:f7:c7:01:17:d9:4d:66:51:06:
                    7d:45:23:f0:99:f8:b1:0a:cc:7b:f6:ce:08:a2:4a:
                    75:ae:70:0e:d7:8b:ec:6b:cc:6e:48:c4:77:45:3e:
                    db:a3:2a:52:82:d6:ff:a2:68:7c:3e:33:d3:d3:68:
                    a3:21:93:34:85:2b:9b:3b:53:00:b0:40:32:c5:2f:
                    33:1e:cf:7f:1b:d5:bb:c6:47:f0:98:6b:65:f7:46:
                    35:36:6c:33:16:34:b5:ad:8d:4d:2f:e2:9a:1e:28:
                    28:ea:fb:03:a8:1d:08:15:82:79:84:8f:6a:40:6a:
                    7f:24:b9:15:ed:be:52:c5:9c:fe:50:34:c2:62:ad:
                    47:7b:cb:d4:08:03:97:c5:47:64:68:23:26:5b:e5:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6F:17:58:E9:EC:44:D7:17:0F:BC:FA:22:0D:2F:13:99:D9:B1:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f5e6732-c647-31bd-9571-873987679adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.149.102.0/24
                IPv6:
                  2602:fb1b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:b8:2d:bc:bb:eb:84:5c:01:76:92:b6:db:25:54:f0:7b:
         23:ad:ee:bd:2f:64:3e:72:0e:63:40:9e:98:a3:05:a9:30:c7:
         56:de:92:aa:a5:5a:f2:4c:ec:27:bb:46:56:15:4d:02:a6:d1:
         3f:14:67:7a:d1:99:b2:16:af:ac:72:45:96:03:79:ef:de:e6:
         04:04:86:0f:32:6e:fd:fb:94:ef:98:82:59:f5:17:03:f5:9c:
         5e:4b:f7:1d:09:1b:e3:a0:73:89:eb:9c:2d:1b:8a:31:75:88:
         ce:7c:2a:70:0b:35:91:61:af:ff:7f:8f:94:83:f2:d2:58:e4:
         c2:ac:28:5c:a0:98:c4:fd:c1:35:13:de:1d:9a:3e:94:31:92:
         a6:eb:d5:f4:c5:88:a7:ca:5d:38:c1:8f:5b:8f:69:f2:65:16:
         4c:13:a4:b7:5e:a8:b2:fb:8f:29:2e:ea:28:d0:da:c0:b4:4e:
         ad:25:82:86:52:89:73:9d:17:1e:5a:f3:5c:57:da:95:9c:8b:
         d9:f4:5b:31:9c:23:e9:ac:d7:a8:44:dd:60:d0:8d:af:c8:d9:
         51:7d:23:64:f3:6d:cf:da:35:b7:0e:7c:3d:30:e6:02:f8:b5:
         78:9d:f6:f9:25:9a:a0:fa:2b:9d:45:62:6a:98:4f:73:a0:a7:
         4d:6f:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:39:00 2026 by rpki-client