Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/a2ef3ac1-bf17-3325-bcd7-9945efaa9116.roa
File:                     a2ef3ac1-bf17-3325-bcd7-9945efaa9116.roa (raw, json)
Hash identifier:          Gn2RkMcSgRSfv/2FUbN/eAhqrcpS61t32/0VgAmJhcY=
Subject key identifier:   B4:3A:C7:6F:34:64:77:B5:2E:B7:91:41:F2:82:76:37:1E:FF:10:93
Certificate issuer:       /CN=4cbd1783-5272-4e33-b882-bdd928a5e339
Certificate serial:       010D0C9F4328584E3A2F76B03191909449796080
Authority key identifier: 04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/a2ef3ac1-bf17-3325-bcd7-9945efaa9116.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     31996
IP address blocks:        216.189.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:76:b0:31:91:90:94:49:79:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbd1783-5272-4e33-b882-bdd928a5e339
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=3890d0de-a90b-4365-8dd8-50b8f3acd9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:a9:03:c1:42:fd:d4:54:87:2f:82:1b:f4:
                    d9:c0:e4:33:8c:d5:10:fa:41:a3:94:e9:16:51:33:
                    bf:22:14:ea:00:0e:a3:50:a5:b6:75:26:df:79:6d:
                    0d:92:96:a9:28:76:86:71:9e:01:64:ed:b8:12:5d:
                    e5:da:87:eb:e1:4b:88:23:ea:8e:66:bb:b5:ef:24:
                    5d:07:b6:dc:29:0a:42:7a:9c:88:c6:a4:12:de:72:
                    ee:81:3e:45:95:9e:fb:52:da:66:74:00:b1:ff:72:
                    53:5f:2d:7b:8e:00:04:d9:13:43:f1:03:37:ff:ec:
                    0c:13:02:ff:90:c2:18:b1:26:01:e9:dc:5d:58:2e:
                    6b:86:75:07:37:33:be:32:ad:3e:20:06:c2:43:97:
                    0d:07:da:7c:0c:db:41:2f:4d:47:01:77:2b:90:97:
                    e0:b6:90:82:42:36:3b:8e:f5:57:9a:bc:88:3d:7e:
                    cb:5e:16:82:61:db:84:03:32:5f:6a:ef:7a:50:1e:
                    c4:dd:c9:a3:b8:56:b1:77:87:7b:ae:7b:8f:c2:c4:
                    c8:68:47:85:53:59:94:6f:ea:1c:10:47:84:2f:45:
                    a1:fe:be:32:5c:38:16:87:1f:40:91:2c:6d:74:73:
                    bc:ab:52:c6:67:38:58:33:38:c6:b2:81:a5:f5:87:
                    4f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3A:C7:6F:34:64:77:B5:2E:B7:91:41:F2:82:76:37:1E:FF:10:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/a2ef3ac1-bf17-3325-bcd7-9945efaa9116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl

            X509v3 Authority Key Identifier:
                keyid:04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.189.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:82:ef:63:60:84:1d:ca:07:68:69:f1:79:b3:d3:23:81:48:
         60:55:4d:94:fc:3a:7d:d6:b6:60:6e:3e:12:4a:ac:b6:8e:3a:
         e6:0e:ec:65:e5:76:4e:7e:cc:b7:11:40:88:84:31:80:9e:f4:
         91:bd:4a:0b:87:ca:be:2a:6d:df:54:59:c4:96:ce:0e:38:9e:
         49:6e:8e:35:3d:a3:11:33:5b:83:52:c4:e0:b6:d2:2f:fb:ad:
         e2:3e:2d:81:1a:1d:48:68:7d:c5:e7:04:79:b3:89:66:29:28:
         8f:ae:4d:f7:fe:c3:3f:da:18:91:20:06:e4:11:d1:7a:65:b4:
         e3:a9:f1:12:ab:fa:78:df:39:d7:96:19:bd:83:2e:8f:d2:0f:
         e9:a1:ee:31:e2:fb:ac:68:7f:4e:c1:81:64:6d:70:d3:f9:1d:
         a3:5e:b8:d4:f3:d2:77:21:58:d0:9a:ab:08:46:21:79:f5:83:
         68:ed:f5:3d:50:6f:60:4e:3a:b3:88:79:d5:57:3f:c6:d8:60:
         32:11:79:f3:36:9e:21:a3:a6:e6:19:93:cf:b2:5b:e7:d7:df:
         9a:95:e0:9a:60:3e:c7:c1:de:74:f1:2f:30:9f:8b:e8:9c:00:
         b4:fb:aa:0d:b7:c3:d2:f1:64:41:de:5d:13:43:33:b1:84:19:
         7f:fb:a5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:16:48 2026 by rpki-client