Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa
File:                     c4a6b7c2-8475-3612-9c69-66526f25323b.roa (raw, json)
Hash identifier:          8Neae9GmqU74rWeNXCombfibkrTiNizR6+fNnQ5x5WQ=
Subject key identifier:   8B:3D:44:F1:85:DD:A4:FD:84:BD:1C:9F:74:FC:53:2B:36:9B:B4:AD
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584DFA707D3B5081B08E4B4BF200
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     11273
IP address blocks:        204.124.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:7d:3b:50:81:b0:8e:4b:4b:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=74a7f0cd-059f-47ad-8c54-d02a739b97c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:39:56:cc:47:75:eb:26:2d:bb:0c:83:9a:
                    f3:c1:c5:67:35:c2:1e:06:86:be:ed:e1:95:47:5a:
                    15:38:32:03:39:88:34:5e:46:e4:e5:ab:64:30:59:
                    d7:fe:1d:f9:ff:e0:fa:6b:ce:5e:4c:6d:88:38:eb:
                    fb:ba:43:63:bd:96:c8:74:e5:79:44:fb:44:73:c0:
                    65:63:07:47:55:77:a8:47:13:5f:fe:48:87:b4:88:
                    56:65:0f:a8:51:f5:fe:d3:7a:c8:02:f4:2d:7a:17:
                    11:73:14:0b:eb:6d:00:d4:95:1c:4b:a1:8b:fa:bd:
                    31:4b:47:bf:20:d2:5e:e7:81:ad:b3:4d:35:ac:c4:
                    47:72:e7:b6:f4:7b:60:8d:71:f0:e2:ff:21:b1:89:
                    a0:b6:93:8c:2d:55:cf:45:3d:3a:21:db:03:6c:87:
                    92:78:27:60:ca:cb:01:81:74:9a:0f:7f:e2:07:9d:
                    84:48:3c:bf:fa:14:a0:73:42:aa:dc:ba:5c:e4:19:
                    6e:d8:8f:bf:7b:63:ff:c5:c2:52:c7:78:a5:e1:bd:
                    0c:10:57:35:bb:55:30:a2:cd:5a:4a:a0:b6:8e:7e:
                    26:2a:fa:68:0f:39:71:04:fc:06:50:63:a2:61:01:
                    2f:01:46:ea:5d:3c:1c:70:74:96:91:52:56:35:df:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3D:44:F1:85:DD:A4:FD:84:BD:1C:9F:74:FC:53:2B:36:9B:B4:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c4a6b7c2-8475-3612-9c69-66526f25323b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.124.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:30:35:c9:5c:17:1c:e6:f9:26:e7:5b:ca:84:c4:61:96:
         bd:b9:b2:8a:e4:eb:33:1a:0d:6e:89:bb:21:61:7f:e8:15:cc:
         dd:d7:64:06:05:92:a2:74:5a:41:4a:bf:bb:21:be:15:4b:c4:
         6e:30:4e:5e:f4:4c:da:74:76:58:df:7c:2d:5d:bc:ea:a8:30:
         fc:91:e9:e5:f9:38:ac:2f:06:61:49:12:e7:f2:86:e1:76:bc:
         07:d3:18:ca:da:05:a2:a4:61:06:96:0e:3b:c9:02:19:bd:76:
         1c:a8:99:32:e9:88:9c:ac:ce:67:36:8e:b5:16:6b:55:d2:bd:
         7f:a1:bb:66:ee:8b:df:4d:c5:d5:3a:45:32:45:4b:51:5f:75:
         b8:5b:f8:7e:8a:57:3d:45:f6:42:d4:eb:32:6e:f0:2e:0c:46:
         1f:07:96:cd:e5:c0:d8:2f:15:af:9f:a9:03:68:d3:c6:84:cb:
         15:c0:db:79:48:27:0a:32:33:39:44:1c:1e:b0:fb:bc:1c:fd:
         1a:e3:9b:9a:11:c2:dc:2d:39:73:30:38:38:80:d4:78:f6:0a:
         ee:4e:a0:cd:88:f3:42:41:ff:d4:a4:9b:f7:fb:16:27:d3:2f:
         65:82:d9:58:5e:9c:eb:64:3a:c2:16:43:07:5b:21:1e:4e:41:
         86:a6:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 21:55:08 2026 by rpki-client