Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6de39cfb-2730-3e9f-9736-3a6cac1071fc.roa
File:                     6de39cfb-2730-3e9f-9736-3a6cac1071fc.roa (raw, json)
Hash identifier:          7zXmXxRw/c6rHyEDHsjlxN+JJ5DHFYH+CYPagoK/OGs=
Subject key identifier:   0C:5C:85:35:4A:88:3B:4B:0C:FC:07:3A:A3:25:D8:76:3B:BA:BC:DA
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584EAE81A40B9E425150BA554BF0
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6de39cfb-2730-3e9f-9736-3a6cac1071fc.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     11090
IP address blocks:        216.137.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a4:0b:9e:42:51:50:ba:55:4b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=415def1c-c212-4cb5-9628-4d5e9694307c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4d:9b:6b:21:b9:db:0b:e0:ab:b0:38:40:9e:
                    f4:10:6c:15:67:dc:67:23:54:dc:28:48:21:e1:b7:
                    60:88:f9:ff:85:ce:bd:0b:93:11:f6:ca:46:2e:dd:
                    a5:23:ea:19:56:74:1e:e1:08:2d:d3:bc:13:c0:5d:
                    95:fe:9d:42:5d:d2:f4:7a:17:6a:9c:8f:a5:38:1d:
                    f9:22:c8:40:18:5c:01:de:50:cb:67:08:30:93:a2:
                    6e:a5:56:f1:00:88:18:21:cc:fb:61:df:f2:0e:32:
                    4c:f9:5b:7e:ca:56:85:eb:ff:59:7e:4c:2b:49:a4:
                    9c:d3:37:c2:fa:09:25:dd:84:f6:20:41:cb:e0:39:
                    7a:3a:6d:fb:82:a2:a4:96:13:a3:db:a2:05:01:eb:
                    21:12:67:e5:29:be:8d:f8:d2:32:d6:16:71:cd:ac:
                    ef:45:7f:2a:04:e8:e6:9a:a8:0d:b5:d1:06:b2:55:
                    03:12:97:70:d9:05:ce:a6:99:a1:d8:4a:07:95:15:
                    78:88:f4:51:04:c1:64:a6:c0:8c:02:33:91:df:79:
                    68:67:c8:0b:5b:d0:13:78:f2:5f:11:5c:50:5c:fa:
                    0f:e0:c4:1d:85:47:b7:37:de:c7:71:5f:28:67:f3:
                    3b:fd:f9:62:f5:e1:f4:f2:fc:fa:18:50:e4:cc:0c:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5C:85:35:4A:88:3B:4B:0C:FC:07:3A:A3:25:D8:76:3B:BA:BC:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6de39cfb-2730-3e9f-9736-3a6cac1071fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:10:2e:5e:c5:1f:b8:1e:89:53:37:39:4e:e7:21:7e:e0:70:
         a1:6f:b6:37:95:ac:48:3e:9b:46:b8:c6:b6:1f:0f:80:7e:69:
         bf:b9:d3:71:44:f2:9a:b6:c6:7f:2a:de:02:61:01:b0:33:ef:
         c4:13:51:a9:d0:fe:af:d2:b6:11:a3:5f:00:9b:b8:b9:dd:ba:
         c9:03:d8:b9:c2:5b:af:5d:0b:94:8c:af:91:6d:63:8f:95:8f:
         51:40:35:e7:64:d4:28:fc:8e:ba:9e:46:50:4f:1a:80:8a:e9:
         d8:ea:1b:07:3f:eb:ec:12:5f:3e:22:aa:4e:89:ff:44:43:e5:
         f4:5a:e8:ea:56:89:81:5d:19:a9:cc:fb:52:d3:32:35:4c:e5:
         22:9a:3a:8c:1e:85:2b:bc:90:4f:51:43:8c:2f:f8:12:f0:54:
         1b:d9:00:b6:89:37:d0:c1:bf:cb:97:d2:65:12:ac:8d:c8:96:
         18:89:d8:98:c0:0b:c6:a0:e4:bb:ef:31:7e:04:d7:71:ff:f9:
         fe:60:66:96:f2:53:8b:41:01:49:e8:75:27:91:4d:8b:07:bc:
         3a:e2:4a:55:db:fb:21:4f:45:14:17:e6:a7:29:5d:31:dc:9e:
         a4:ce:71:af:ae:3c:5a:92:17:70:ca:53:16:4f:7d:4b:8a:84:
         28:2f:5f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:55:26 2026 by rpki-client