Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/2ecb1149-7b71-3bdd-bace-1f0d177b21d3.roa
File:                     2ecb1149-7b71-3bdd-bace-1f0d177b21d3.roa (raw, json)
Hash identifier:          BszSQkX68j2sfNUOFJ8thhMv9ORoaDDe44m8QantpZw=
Subject key identifier:   72:84:7C:91:BC:C3:07:50:A9:C9:63:2F:AC:B8:23:D0:BB:22:48:19
Certificate issuer:       /CN=df6bc3b2-e621-4272-b604-10ed5dbb4ec1
Certificate serial:       010D0C9F4328584E84639C6FBB3D1481EE337380
Authority key identifier: 1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/2ecb1149-7b71-3bdd-bace-1f0d177b21d3.roa
Signing time:             Thu 16 Jul 2026 10:55:55 +0000
ROA not before:           Thu 16 Jul 2026 10:55:55 +0000
ROA not after:            Wed 14 Oct 2026 10:55:55 +0000
asID:                     0
IP address blocks:        134.49.228.0/22 maxlen: 22
                          2606:c250::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:63:9c:6f:bb:3d:14:81:ee:33:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6bc3b2-e621-4272-b604-10ed5dbb4ec1
        Validity
            Not Before: Jul 16 10:55:55 2026 GMT
            Not After : Oct 14 10:55:55 2026 GMT
        Subject: CN=0bf6244e-160c-4e13-8020-f41248734109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:c1:f0:df:a8:10:4b:18:7d:a4:44:7d:0e:
                    4e:a4:81:8e:30:e2:49:b0:c2:9a:af:8c:34:1a:be:
                    ff:29:5c:04:38:9d:42:43:53:91:90:ba:58:fa:c5:
                    d3:85:83:35:9b:02:b3:3c:31:36:53:2c:88:e8:db:
                    db:fc:62:07:1a:a3:c0:9c:12:33:ae:8a:0d:24:b2:
                    b5:aa:a1:78:2c:c1:29:13:1d:3a:cf:b9:43:39:e6:
                    8d:09:e4:17:d5:81:a1:47:bb:ec:d7:cc:4d:11:ca:
                    20:b8:6b:98:a9:8e:36:4f:4e:17:f3:a7:9c:0f:33:
                    d5:cd:f7:36:fc:c5:88:f8:89:61:27:e2:b1:d8:d2:
                    ab:7d:ce:d5:c2:f5:19:80:34:70:65:7b:6a:ce:45:
                    dd:00:02:c6:a1:3a:33:a6:22:bb:8e:b2:a1:d7:af:
                    df:57:ba:b8:7b:e8:a2:d6:51:1b:f2:75:2f:a4:2e:
                    58:dc:28:9d:4c:d2:1e:dc:ab:70:03:29:ea:e6:16:
                    8c:58:ca:68:70:13:a4:b7:e4:90:32:32:a3:92:71:
                    0e:3d:eb:2d:d8:3a:04:1b:cd:b9:03:65:87:94:4c:
                    48:a2:35:73:31:7b:87:9c:d3:cf:0d:51:da:c7:c0:
                    de:6b:87:72:ec:77:a7:40:c4:f6:d5:98:a6:fa:0e:
                    6a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:84:7C:91:BC:C3:07:50:A9:C9:63:2F:AC:B8:23:D0:BB:22:48:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/2ecb1149-7b71-3bdd-bace-1f0d177b21d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.crl

            X509v3 Authority Key Identifier:
                keyid:1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.49.228.0/22
                IPv6:
                  2606:c250::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b7:07:9b:21:6a:bd:3e:a2:5a:27:78:23:c4:76:25:17:ea:
         ff:e6:14:38:16:96:11:fc:81:aa:a3:fa:e8:71:f9:bd:b8:bc:
         18:7e:b4:60:a9:24:ff:33:e0:33:52:b8:bc:4d:d0:ad:d4:a6:
         8f:ad:88:1a:be:da:da:3d:3e:dd:20:b8:ad:1b:54:99:0a:1a:
         80:39:a3:9a:ac:13:50:f5:7e:1c:03:f3:9d:14:ab:97:4e:96:
         04:09:9a:d0:ef:b1:0e:28:6e:58:cc:d7:07:df:87:14:d7:97:
         d4:23:ba:89:f3:8d:d0:50:8d:62:4e:d5:28:d5:34:23:f0:e2:
         d9:09:e7:c6:9e:6d:3a:5c:fe:5a:c1:25:fe:d0:9d:6c:61:b2:
         a3:5a:f7:9d:d0:52:f7:0d:29:4d:e9:93:74:28:1c:2c:3b:d4:
         71:06:0b:9c:55:80:c4:5a:8a:f0:cc:a7:94:b7:e0:6a:42:11:
         6d:8d:50:f5:45:6b:d3:94:98:93:69:8b:79:b8:b6:87:0a:3f:
         b5:e5:a3:d3:20:89:0d:2f:85:45:ac:12:f1:25:cd:6a:30:84:
         bc:47:d1:6b:d1:49:e4:2c:45:6b:83:6e:e8:cf:61:07:63:48:
         86:26:40:eb:ed:d4:ad:71:cb:c5:81:a0:72:0e:41:03:11:1f:
         5d:4d:67:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:49 2026 by rpki-client