Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa
File:                     3baf912b-384b-3427-b752-a35aa9af6107.roa (raw, json)
Hash identifier:          2qgNWBYTza9DOUg0ng+6dGNI2BUkVai+NBc2mNTDctU=
Subject key identifier:   81:5B:0D:BE:92:7B:5E:47:2C:A0:36:26:D1:42:3B:4D:CE:E5:9C:F2
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DFBD5D45751043BE0B5247680
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     852
IP address blocks:        172.219.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:d4:57:51:04:3b:e0:b5:24:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=65a2701e-bc28-4f44-8d6f-7249d5888394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:46:1b:b9:57:08:6d:6e:3b:8e:df:c9:48:
                    e6:fc:0e:4f:30:14:74:78:48:1b:0b:c0:ac:34:d4:
                    24:74:6f:3f:95:bd:da:f1:68:4d:45:91:25:08:8b:
                    0b:03:91:38:39:3d:a8:95:a1:bd:6f:81:0e:62:ee:
                    a8:97:74:b1:16:58:6b:09:81:69:47:c4:68:bc:cf:
                    52:f3:2c:53:9c:03:8d:f3:11:60:a6:a7:c0:a9:ee:
                    fb:67:d7:aa:5c:71:21:3f:ef:ee:c2:00:63:38:f3:
                    80:3a:13:49:b8:3d:99:91:50:26:bf:01:51:ab:e1:
                    a2:6c:a8:d1:d8:a6:47:4f:10:3e:fa:97:8b:93:77:
                    ec:d0:e3:8d:eb:6f:e7:ba:30:e4:c2:a0:dd:2f:69:
                    70:a2:56:51:5d:1c:6f:f7:9f:09:7c:7e:92:47:9a:
                    5f:47:be:53:f9:45:f2:be:3d:56:8e:b3:7a:19:25:
                    b9:cf:6a:5f:02:c3:6c:96:dd:65:b9:3d:a4:db:1a:
                    01:d7:1d:70:66:9c:cb:52:fa:7e:f9:6d:04:c0:a7:
                    7b:da:80:d5:f9:ca:65:da:25:7f:3c:e5:9b:8e:47:
                    58:7f:25:2d:ae:6c:5d:0c:bb:e4:a1:bc:d2:d2:07:
                    18:2f:20:54:0c:7d:72:f4:2c:d5:3e:75:15:52:d8:
                    81:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5B:0D:BE:92:7B:5E:47:2C:A0:36:26:D1:42:3B:4D:CE:E5:9C:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ba:e4:df:cf:6b:c7:24:17:af:cf:e7:e1:24:f1:08:fd:80:
         3d:28:de:15:8f:7a:6b:03:e9:5b:4d:f0:de:0a:9a:23:5a:64:
         fd:0d:53:d4:e0:24:85:7b:71:7f:80:83:1c:df:bb:ac:1e:02:
         0c:6c:fb:57:d4:f5:59:38:e8:8f:18:14:8f:9c:9e:a7:40:bd:
         31:7d:36:c9:ec:ab:6c:34:e4:56:d5:99:60:ce:01:5f:b6:1d:
         d5:93:45:6d:2d:9d:90:ed:23:d1:b8:aa:e0:2c:71:d5:b4:a4:
         81:64:c1:b4:1e:fe:51:ba:fc:71:59:6c:43:43:fd:fd:b9:bb:
         c8:08:1a:e9:da:01:ad:be:fd:1e:d0:97:63:97:6d:c0:b2:fe:
         18:dd:9c:dc:07:46:1a:c6:82:33:83:62:ca:4e:ee:8d:9c:79:
         71:68:4c:d0:40:b8:7c:67:4e:0a:90:16:44:0a:f8:24:cf:ff:
         8d:8a:e8:20:34:1e:69:ff:ce:80:ae:3c:54:5f:e4:a9:76:70:
         f5:72:4a:71:8c:f5:cf:93:fd:6d:f5:62:93:92:10:b9:42:f4:
         10:e1:30:c3:43:48:0b:ae:fd:98:1f:92:69:e0:3b:ca:bf:a0:
         45:19:f3:8c:d9:6a:8d:e3:01:69:05:4f:3e:45:60:6d:44:24:
         cb:51:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:56:50 2026 by rpki-client