Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/6caa52ef-7e2c-33b2-9a75-4df694812a7d.roa
File:                     6caa52ef-7e2c-33b2-9a75-4df694812a7d.roa (raw, json)
Hash identifier:          1fpfoAj4Pwh65X4RvAfqJzbjnFruN0/g2i+adORot3Y=
Subject key identifier:   40:19:1A:E4:16:5D:86:B2:15:33:D0:AD:8C:5B:A9:78:32:46:0D:B1
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F4328584DD487CAF73C09291A07B799E0
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/6caa52ef-7e2c-33b2-9a75-4df694812a7d.roa
Signing time:             Thu 14 May 2026 11:06:33 +0000
ROA not before:           Thu 14 May 2026 11:06:33 +0000
ROA not after:            Wed 12 Aug 2026 11:06:33 +0000
asID:                     214143
IP address blocks:        167.253.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:87:ca:f7:3c:09:29:1a:07:b7:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: May 14 11:06:33 2026 GMT
            Not After : Aug 12 11:06:33 2026 GMT
        Subject: CN=295ec5d8-0337-4e7c-87b1-7e1d379f2efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:d4:5b:3a:56:a6:32:61:c6:79:d4:2a:43:
                    3a:bd:1f:bd:ac:e3:a2:c2:6a:e0:f4:8b:b7:89:31:
                    18:71:39:13:43:be:7e:4b:d3:cf:05:c3:c6:f1:39:
                    9d:f4:fd:ef:88:76:6f:f3:19:3d:bd:7c:f4:09:34:
                    a1:32:3e:98:bb:39:62:76:38:44:5f:97:cc:47:51:
                    be:5e:46:69:39:89:ca:da:4e:92:38:b6:6a:de:36:
                    db:3a:6f:8c:1b:98:6d:04:af:52:57:f8:c8:94:a3:
                    61:dd:26:ce:9d:14:76:33:e4:4a:5f:4e:ca:60:bb:
                    d8:88:8b:82:f5:20:d7:59:49:b2:a3:77:c0:79:03:
                    15:f3:bd:fd:e4:43:81:d3:8b:2d:f9:44:ef:28:e6:
                    cd:72:e5:65:a0:5a:e6:1f:a6:d3:06:b0:9d:6b:de:
                    ec:81:e5:7e:a4:cf:b0:15:90:84:73:fc:21:2e:bf:
                    9c:71:ee:05:ec:02:8c:42:09:87:08:f2:b8:df:a2:
                    83:27:e1:b6:bc:50:66:08:a8:8c:5f:b0:02:8e:f3:
                    f1:18:18:df:91:66:16:03:c9:d7:e9:71:40:bd:be:
                    db:36:52:8c:08:ad:1f:ea:34:d5:35:c4:97:ff:cb:
                    ae:7f:11:41:72:98:9b:cf:db:35:f2:73:ee:f2:f4:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:19:1A:E4:16:5D:86:B2:15:33:D0:AD:8C:5B:A9:78:32:46:0D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/6caa52ef-7e2c-33b2-9a75-4df694812a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:3f:75:48:44:ba:7d:88:9a:ce:bc:64:d1:a1:53:79:98:21:
         f8:42:83:43:30:5a:a1:f7:c1:8f:87:48:d2:bf:17:51:60:69:
         b9:7e:18:a0:4f:aa:9a:d3:7d:a1:4d:35:c9:6a:7d:35:c8:b3:
         35:80:b7:a3:d9:d2:c4:7c:f1:c0:e1:ce:4b:59:4a:fb:15:c8:
         23:2b:9f:ba:c2:8c:b3:35:d6:85:ae:fb:ad:6a:91:cd:7e:24:
         13:1e:9b:81:95:07:ea:9a:70:92:5e:ef:4e:ba:04:4d:69:60:
         03:1c:d3:aa:2a:55:b6:7e:b7:08:1c:ad:23:33:95:27:4b:c5:
         fe:08:8b:08:05:2c:c4:5d:b5:c9:4b:1b:fc:a2:55:4d:d0:ac:
         03:d9:69:bf:2e:a2:a1:cf:4e:ab:13:2f:c2:57:3e:ae:ee:0b:
         6e:c3:b7:81:8e:d7:0e:d6:9c:80:47:2d:27:5a:74:bc:f5:1d:
         0a:43:d5:2b:1c:ac:e0:cb:db:70:b3:aa:72:c0:04:17:7f:6f:
         e9:72:00:67:7a:12:e5:b4:e2:39:d6:79:98:9c:0a:6b:89:03:
         90:e0:c1:32:cc:10:bb:b6:af:c0:a6:51:fe:62:88:ee:c8:f0:
         1a:c4:84:60:cd:8c:a5:e4:c2:8b:fa:79:78:5c:2d:e3:56:7d:
         1a:30:4b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:39:35 2026 by rpki-client