Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7ccd4c55-d3aa-37a4-9a11-917256097fd9.roa
File:                     7ccd4c55-d3aa-37a4-9a11-917256097fd9.roa (raw, json)
Hash identifier:          nr2ttvm8ccukQ3g5zLEtTiGggBsn2PiJrPLlK7zYMOk=
Subject key identifier:   E2:DF:0B:FA:C4:DE:A2:09:F4:FE:44:62:5E:8A:16:6F:61:06:FE:B9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E0C1ED8ED5BD086C83E935210
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7ccd4c55-d3aa-37a4-9a11-917256097fd9.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     64267
IP address blocks:        173.214.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d8:ed:5b:d0:86:c8:3e:93:52:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=ffcc1de7-00a7-4dd0-8de7-458407b5e301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:df:f2:df:23:78:d5:10:36:3d:59:41:be:41:
                    ce:d1:03:bd:78:e8:88:a6:a7:d4:dc:35:ca:e4:81:
                    d7:c8:8a:dd:a6:7c:39:d2:25:22:20:5d:1d:fc:5f:
                    80:2f:61:61:e0:f4:1f:1e:ff:73:06:09:bf:d9:06:
                    0e:2b:8d:fd:c3:cb:0a:1c:1c:20:d3:3c:33:46:3a:
                    aa:85:ee:c2:c6:8b:b4:27:f0:5a:fd:e2:39:e1:2f:
                    f8:54:ed:9b:5a:ee:10:ee:37:42:bf:ca:b0:3e:e2:
                    6a:f9:d9:ae:40:83:89:73:25:73:6f:8c:ed:c7:84:
                    cd:9d:b1:4b:21:56:b5:e4:72:9e:57:c7:13:25:85:
                    27:e9:7f:a0:21:d8:36:8a:3c:de:a0:0a:1b:22:85:
                    a7:de:9d:d4:22:77:85:55:03:f1:02:57:4d:3a:71:
                    f9:d5:8e:f8:7d:46:43:d6:31:b1:9b:ed:fd:d6:05:
                    6c:e9:ec:07:c6:58:c0:08:20:f8:41:47:51:3b:82:
                    c3:c1:53:89:12:ad:a5:6d:80:f9:40:ef:87:57:47:
                    5b:00:f4:f9:38:cf:54:e0:80:ca:cd:5b:9d:f6:6c:
                    42:c8:10:10:0d:69:f7:7f:4e:8a:7e:89:d0:ac:56:
                    41:ee:35:d2:5f:ba:b7:66:8c:b6:d8:bd:b6:50:b2:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DF:0B:FA:C4:DE:A2:09:F4:FE:44:62:5E:8A:16:6F:61:06:FE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7ccd4c55-d3aa-37a4-9a11-917256097fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:54:df:1b:b4:71:51:e8:5d:21:36:61:5f:13:a6:8c:fe:2d:
         34:44:49:db:b6:c4:73:34:2d:08:ca:d9:52:85:06:c4:f0:ae:
         1f:7e:8f:fe:42:24:3a:8f:f7:03:4d:f9:2f:af:79:8f:1c:64:
         cd:bf:bb:2a:6a:b6:94:d5:7b:0a:a6:d9:75:69:f9:e5:4f:de:
         0f:f7:75:e9:e6:9b:1b:3a:6a:30:b8:3b:ff:66:a1:75:3d:ef:
         0a:80:aa:29:3d:ae:04:63:8d:07:ea:cc:a7:7e:bc:36:36:b0:
         01:44:6e:8b:2c:0d:3b:4a:00:bb:ca:19:28:b1:1c:a3:1f:6c:
         88:67:4a:e3:57:70:28:09:9d:d3:53:d1:39:79:a1:e3:3d:0c:
         31:d4:39:d9:1e:ed:14:e0:ff:a6:10:a2:3a:57:c4:f4:80:cb:
         3e:9b:e7:d0:ea:b9:fc:fd:13:6f:18:49:a4:01:b4:f6:c9:95:
         0b:46:8e:aa:18:68:85:1d:3f:2f:f2:be:d0:ac:a7:9c:6a:ae:
         87:51:75:d0:cd:88:8c:13:4b:76:53:af:4e:5c:15:24:98:30:
         50:af:63:f8:2a:35:b9:b4:43:ce:50:ae:ad:31:2c:16:24:18:
         51:45:86:ac:6d:7f:15:00:4c:34:37:a6:9f:d6:7b:76:e7:3b:
         6c:ca:90:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 23:23:14 2026 by rpki-client