Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/cceadf2b-0fe1-30c9-882a-958ec7249cf4.roa
File:                     cceadf2b-0fe1-30c9-882a-958ec7249cf4.roa (raw, json)
Hash identifier:          ZXfPVLSmaTT081CQ7fyRPseAqksKuiw8RPvJysgyeFY=
Subject key identifier:   66:FB:51:D2:45:A6:F3:3A:C7:A0:31:17:04:1E:19:ED:34:19:FD:AC
Certificate issuer:       /CN=a91f81ff-5317-40f4-a544-5df2e3358a57
Certificate serial:       010D0C9F4328584DBBA0538EB1FC9A880275B980
Authority key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/cceadf2b-0fe1-30c9-882a-958ec7249cf4.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     40628
IP address blocks:        204.87.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:53:8e:b1:fc:9a:88:02:75:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91f81ff-5317-40f4-a544-5df2e3358a57
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=6272cea2-49e1-48ae-9a63-3f7d086ee41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:ec:51:26:47:1a:5f:e4:b8:3b:25:ad:76:
                    a8:ef:05:16:8d:dc:d9:a3:75:c0:f0:55:c6:1a:e6:
                    c3:e7:24:24:7a:7e:a4:2a:55:53:72:d9:09:11:ca:
                    8a:c4:6b:94:bf:49:ac:0a:27:e1:d6:aa:78:1f:2e:
                    03:03:f6:d4:e5:d8:66:52:ed:8c:cc:1d:aa:71:2e:
                    82:71:16:5e:0a:4d:24:16:b4:39:a2:57:3e:1b:90:
                    1c:d6:52:90:a8:c2:40:d4:74:4b:93:4f:08:93:7c:
                    6f:a6:cc:ab:2d:7c:c8:38:ac:cb:df:ff:ba:4e:c8:
                    d9:d4:c4:67:fc:0c:96:71:9e:34:89:ec:88:4c:90:
                    e8:fa:1a:a6:ca:aa:0c:49:76:aa:94:88:2e:53:ec:
                    59:8c:a6:3e:3d:d3:11:3b:83:45:dc:88:b6:b6:2a:
                    8a:36:d7:8e:bf:ed:e6:4b:86:f8:aa:aa:23:3d:a3:
                    de:60:d2:cd:e9:06:34:4f:89:93:72:42:3d:47:a8:
                    97:55:9e:a2:d9:c4:6a:96:25:7f:ef:6e:b7:fb:e4:
                    23:43:2c:c9:dc:01:cb:6c:a8:70:f0:1e:41:3e:8f:
                    6d:f6:82:25:b0:41:bd:80:15:ca:ab:59:5e:b8:7e:
                    af:bf:15:6e:c2:0f:22:6b:5f:02:b7:5a:bf:b5:87:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FB:51:D2:45:A6:F3:3A:C7:A0:31:17:04:1E:19:ED:34:19:FD:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/cceadf2b-0fe1-30c9-882a-958ec7249cf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl

            X509v3 Authority Key Identifier:
                keyid:34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.87.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:80:b2:ea:a9:80:34:a7:7d:2b:6c:15:73:1b:09:ab:9f:b2:
         18:6a:01:7a:ef:4c:8d:e0:62:51:1e:aa:a0:08:21:b2:75:3e:
         e2:02:85:5a:28:85:e5:da:91:c6:10:3c:22:c2:45:54:67:db:
         ab:ec:c8:9d:3c:87:64:64:7d:10:0f:d8:f0:54:9d:40:f6:28:
         72:88:36:7b:e2:5d:b1:50:64:b3:fd:9e:98:ff:b8:a2:f1:d9:
         10:7e:f6:7a:37:3a:9b:bc:3b:73:2d:07:8a:27:32:21:e6:0e:
         4c:ee:99:cf:43:a2:1a:34:70:6e:44:99:0a:0a:4a:43:3f:29:
         8b:88:59:fb:44:80:2c:bf:8f:89:4a:aa:8d:8f:e6:36:1a:89:
         c2:04:56:f2:17:c5:ed:80:6f:86:20:59:a7:1f:40:f4:34:4e:
         93:3c:92:ce:fe:db:d8:f1:0e:83:8e:2e:94:62:1d:8d:92:10:
         25:be:5a:12:d0:69:ac:db:75:55:1a:01:f9:e9:66:2f:9e:0c:
         0b:cd:be:7c:b9:99:e4:94:0b:30:8a:4e:18:06:1b:6f:ea:da:
         c6:ae:dd:06:91:d5:cb:38:e5:61:90:af:97:34:47:1a:38:77:
         db:14:40:ea:0b:4f:31:c8:83:6d:8e:4f:aa:3d:f4:ad:83:17:
         2f:2e:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 16:42:02 2026 by rpki-client