Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/cfbc42fa-5160-3f57-a7b7-cb0f5c28d970.roa
File:                     cfbc42fa-5160-3f57-a7b7-cb0f5c28d970.roa (raw, json)
Hash identifier:          E48BUvQoVHRL5xKG3CQ+x0k3K3zeNyls7uvJ0eYShLk=
Subject key identifier:   41:24:89:AA:ED:3C:30:A5:0E:4F:48:63:32:3B:CC:9E:B9:63:64:E1
Certificate issuer:       /CN=ce873e69-2136-49b1-9533-e478f41d2301
Certificate serial:       010D0C9F4328584DEB147E2400EF4713E2D82A00
Authority key identifier: CD:58:0A:52:DA:E2:D1:72:D1:6E:D6:1D:12:E5:69:BD:F3:97:A7:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/cfbc42fa-5160-3f57-a7b7-cb0f5c28d970.roa
Signing time:             Fri 22 May 2026 12:57:50 +0000
ROA not before:           Fri 22 May 2026 12:57:50 +0000
ROA not after:            Thu 20 Aug 2026 12:57:50 +0000
asID:                     33503
IP address blocks:        141.106.0.0/16 maxlen: 16
                          141.106.12.0/24 maxlen: 24
                          141.106.67.0/24 maxlen: 24
                          141.106.68.0/24 maxlen: 24
                          141.106.69.0/24 maxlen: 24
                          141.106.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/ce873e69-2136-49b1-9533-e478f41d2301.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/ce873e69-2136-49b1-9533-e478f41d2301.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:14:7e:24:00:ef:47:13:e2:d8:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce873e69-2136-49b1-9533-e478f41d2301
        Validity
            Not Before: May 22 12:57:50 2026 GMT
            Not After : Aug 20 12:57:50 2026 GMT
        Subject: CN=2d159a0d-9a06-4ab8-8427-479472009eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0e:bc:9c:a5:f9:5f:d9:eb:8d:8a:e4:7b:d9:
                    2e:12:ea:db:bd:cd:ef:13:d8:57:9f:78:e6:e5:fc:
                    2c:47:bb:2e:c8:ce:9c:59:f9:6c:75:16:0a:de:09:
                    ad:05:d4:60:8f:54:70:1b:f5:db:6d:85:3f:7d:d6:
                    7a:31:f6:2d:4c:57:fa:fe:b7:62:d5:24:5d:e0:c5:
                    22:04:27:f1:2e:67:2c:c9:d4:2b:73:02:0f:0e:1b:
                    24:7f:58:7e:ad:15:c4:97:95:57:0b:30:8b:e4:ec:
                    75:4e:f4:2d:ed:5a:13:52:76:57:29:20:68:71:9c:
                    d2:c2:5a:4b:90:cf:19:de:e6:9c:9d:6d:92:2c:4a:
                    45:44:88:72:b4:7f:c8:ea:89:67:aa:58:6d:e8:2c:
                    70:4c:69:62:ec:ae:ce:4c:55:66:50:99:a2:36:4e:
                    4a:21:07:ff:24:f6:43:1b:c9:3c:d6:c5:02:e6:48:
                    a7:49:60:ce:2d:f0:8b:d8:2f:14:3d:90:dd:a4:e6:
                    62:85:a1:fa:1e:1a:2a:5a:27:3c:e7:56:ff:b2:a9:
                    c2:06:57:69:d7:2e:94:9a:95:01:de:5c:0f:e9:31:
                    ac:2c:cc:d2:f2:00:aa:f4:42:8a:aa:1f:6d:84:41:
                    31:3b:c5:55:9c:92:82:c6:f3:c8:57:e6:fc:3f:4f:
                    43:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:24:89:AA:ED:3C:30:A5:0E:4F:48:63:32:3B:CC:9E:B9:63:64:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/cfbc42fa-5160-3f57-a7b7-cb0f5c28d970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/ce873e69-2136-49b1-9533-e478f41d2301.crl

            X509v3 Authority Key Identifier:
                keyid:CD:58:0A:52:DA:E2:D1:72:D1:6E:D6:1D:12:E5:69:BD:F3:97:A7:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.106.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:c2:cf:01:df:60:c0:8d:66:14:f3:4b:ec:a6:c4:c8:45:
         37:88:5a:c8:09:6d:24:22:1c:f5:cd:e1:d1:50:7a:8b:af:d9:
         fc:b9:1d:01:06:04:8f:18:46:d7:b7:10:e7:82:1c:3f:5b:02:
         6f:42:92:fe:1a:f6:8d:08:4d:03:09:b5:46:3e:62:b3:05:78:
         8a:03:4e:94:1e:8d:7d:5e:f4:0d:ef:d0:92:f2:bd:9c:c4:08:
         52:31:f2:2e:e5:57:5b:0c:34:2b:58:c2:54:10:43:72:4c:b2:
         56:d2:1b:14:47:1b:24:c0:58:1d:ba:3e:b3:44:85:9f:c4:f4:
         ff:66:c2:bb:61:60:2d:82:1b:33:5f:27:e9:fc:07:a2:f9:01:
         8a:0f:0d:ff:e4:f2:45:53:34:fe:98:88:21:c8:1f:41:09:86:
         0d:c8:f0:0d:29:49:63:6f:f5:eb:db:77:f2:b2:f0:c8:0b:52:
         dd:89:5b:b0:a1:61:60:fb:ab:9b:b5:65:3f:ed:8b:74:78:e5:
         9e:a7:dd:b4:ab:17:b3:51:19:bd:40:0a:56:3b:bc:49:e5:97:
         12:3e:c4:1b:a1:b8:05:fb:9a:94:f0:63:8c:e8:bc:fe:e0:f1:
         de:b2:be:6c:a0:7b:1c:f1:f9:38:93:5d:19:6b:8a:6a:e8:12:
         93:75:13:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:04:32 2026 by rpki-client