Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/29731448-4bea-3430-aebd-8f0037a526f2.roa
File:                     29731448-4bea-3430-aebd-8f0037a526f2.roa (raw, json)
Hash identifier:          GtyioRdpMib1y/8YFg/38g/JS2wd83IsCTfw7vsqZM0=
Subject key identifier:   BA:84:F5:68:F9:07:D5:7F:6A:86:4F:88:E5:25:DF:BD:30:A5:12:15
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DFBD5D728498CAE87D9C6D6C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/29731448-4bea-3430-aebd-8f0037a526f2.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     852
IP address blocks:        173.182.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:d7:28:49:8c:ae:87:d9:c6:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=b82f9c54-19fb-4a85-956b-a7f482bbd180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:25:2c:fe:ca:fd:35:2c:46:67:a9:25:7b:
                    1a:57:0f:ca:d4:65:4c:0f:99:ab:1d:e6:0f:34:b9:
                    86:db:50:66:93:53:f8:e0:e8:b1:c5:9d:3e:d5:b7:
                    b1:f7:25:4e:df:c5:7b:80:c3:04:73:4d:43:60:f8:
                    1e:c3:41:d5:d3:d3:32:a9:ef:89:b8:9c:30:57:2d:
                    d4:bc:07:87:4a:46:b3:8a:59:04:65:fb:00:b3:67:
                    a7:b7:94:71:10:f5:bf:11:71:4a:d2:46:97:32:8a:
                    f7:13:25:0c:9b:af:0f:eb:dc:0b:e9:1c:fb:45:19:
                    61:65:5d:2f:49:46:79:f7:9d:ff:c3:a2:51:0c:a7:
                    55:8a:12:89:81:fd:df:93:26:12:e6:0e:4b:c9:1d:
                    ba:44:dd:b8:cb:28:f5:cb:f9:4b:0b:d2:c5:06:90:
                    47:54:9b:2c:3a:89:09:93:62:7e:8a:c6:db:82:23:
                    f4:f7:cb:c4:c5:e5:07:bf:1e:28:67:74:50:d4:c0:
                    51:5d:06:e0:d9:86:a7:ce:78:31:11:9b:14:18:15:
                    00:75:28:6b:70:b5:da:f5:00:9c:5e:82:fd:be:f6:
                    c7:be:f6:5f:8f:e2:01:3b:7e:c7:88:88:9f:70:d8:
                    75:ba:bf:2f:7c:2a:4f:49:70:fd:ae:8d:11:bf:9e:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:84:F5:68:F9:07:D5:7F:6A:86:4F:88:E5:25:DF:BD:30:A5:12:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/29731448-4bea-3430-aebd-8f0037a526f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.182.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:d3:9e:c2:24:c2:9c:1e:7b:a5:6b:d8:ef:2b:a6:c0:44:13:
         41:67:d6:a9:c3:3a:c6:b9:6f:04:37:d2:40:ab:ff:5f:55:30:
         b5:b5:12:6d:d9:8f:2c:04:66:6e:07:5c:12:a8:89:a7:fc:03:
         a5:4f:c1:4f:9e:25:e7:9b:8a:09:b6:91:d3:30:b6:90:bd:1c:
         32:c4:3f:c3:15:aa:93:92:a5:82:77:eb:28:88:a2:7d:db:f7:
         82:c0:42:2d:b2:72:96:fb:28:28:68:63:76:73:25:07:65:1a:
         32:a9:71:2d:5f:4c:60:c0:e7:b4:65:df:a9:9f:32:68:bc:09:
         5a:53:50:03:bf:e3:a2:c5:ef:1d:06:98:77:e8:eb:e3:91:ae:
         fc:c6:44:14:6f:1f:59:65:62:29:29:0f:33:28:66:9a:22:ee:
         87:90:4a:27:5c:ac:68:21:d3:20:1a:ed:bc:e5:3e:90:f3:60:
         b2:85:8a:03:ff:ea:8a:67:ce:7d:95:94:d4:c2:14:11:52:91:
         b2:6b:81:26:2f:3c:c9:dc:3f:66:0b:49:c3:d1:93:5b:2c:30:
         05:e8:08:1f:1d:e5:a9:43:8f:b2:ba:5d:1b:03:fb:1b:f6:e3:
         0e:d7:45:6c:89:ec:ac:40:e1:a0:e0:53:25:e6:4c:43:f7:7a:
         f8:2d:02:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:54:16 2026 by rpki-client