Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/580161d1-b418-3d89-be63-693dd80c5158.roa
File:                     580161d1-b418-3d89-be63-693dd80c5158.roa (raw, json)
Hash identifier:          vhvsnXj7S2fpGmUfLcHreh7WotMbFCYEKpkd38zTW1s=
Subject key identifier:   AB:86:A3:B7:8D:1D:12:A9:12:E1:93:FC:63:7E:96:A1:06:7E:62:29
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E09CB3382358AC2E309E8F2C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/580161d1-b418-3d89-be63-693dd80c5158.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     23222
IP address blocks:        174.87.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:33:82:35:8a:c2:e3:09:e8:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=45c7fe22-b8d4-4cec-82b8-f6dd62ea1fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:ef:30:46:e4:1b:1f:7d:72:9e:41:07:e3:
                    75:3c:c1:a8:aa:7b:1f:a4:12:ed:a5:6b:09:54:71:
                    b4:38:bd:df:ea:b9:d1:43:c6:5d:f6:45:f1:ee:d3:
                    c9:3e:b4:30:d3:ec:bb:ba:ca:ed:38:62:b7:98:6c:
                    44:70:0a:1a:27:1d:18:09:4d:66:5f:ad:94:db:39:
                    a6:93:53:68:44:2c:7f:ee:71:88:2d:87:8f:fa:47:
                    19:9c:39:de:ba:ca:c4:49:6f:78:39:dd:20:5a:67:
                    93:22:c0:f8:bb:79:e3:1d:2a:97:a3:7d:9e:19:d9:
                    86:d9:ea:b3:59:c2:52:96:bf:d6:33:20:df:84:09:
                    30:77:c8:d5:e0:3e:73:23:1b:14:69:a9:bc:c9:4f:
                    7e:f0:a6:f3:c1:d4:d9:93:0c:5c:ee:7a:62:21:94:
                    00:88:d4:50:41:05:5f:c6:87:21:69:3d:0e:98:bb:
                    cf:1d:58:11:f6:e1:ea:eb:3a:4f:66:e6:0c:14:a3:
                    bd:21:6b:84:f5:73:38:f9:c6:2f:d9:ce:67:13:a3:
                    0c:ba:2a:2b:9a:05:30:c5:72:59:95:eb:c7:70:ba:
                    ba:2c:da:bf:a7:1e:2a:cb:c2:48:35:4a:d2:ef:1c:
                    6e:0e:33:e1:8e:92:a1:a9:0c:28:b2:6d:ca:9a:12:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:86:A3:B7:8D:1D:12:A9:12:E1:93:FC:63:7E:96:A1:06:7E:62:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/580161d1-b418-3d89-be63-693dd80c5158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.87.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:fa:33:e5:a5:6b:9b:6e:10:e8:97:23:7e:3c:b6:e9:de:07:
         2e:e9:ae:87:25:86:30:14:b4:5e:b5:82:c9:2e:84:b3:bc:38:
         99:d9:61:9a:60:91:16:03:2d:be:ba:34:ed:7e:4a:ef:3b:9d:
         68:89:cd:c6:7f:97:35:59:3f:d7:42:be:6a:74:09:06:19:36:
         51:ef:75:d2:3e:17:8a:13:1e:23:76:62:6c:00:21:4e:4a:72:
         be:0f:ce:47:6a:7f:f4:bb:5c:69:1d:29:ea:c7:c6:8b:9d:3c:
         2d:4b:d3:a9:a9:25:f5:77:bd:8b:49:86:31:17:d9:b7:6d:d3:
         07:cc:cc:ca:9e:90:bc:bf:51:17:79:13:8a:ea:05:bd:c0:67:
         8c:ed:d2:96:4a:e2:9e:97:f2:72:b2:ff:ad:9a:1f:57:d6:bc:
         22:1a:dd:85:ee:5d:e4:ad:68:37:5c:42:f8:c4:96:22:34:23:
         77:92:fa:1e:cb:c2:36:a2:76:c9:11:01:cc:16:71:59:6d:11:
         8d:f8:96:3f:97:f6:6a:60:f5:3b:2b:78:8b:be:dd:b8:68:84:
         f3:6b:50:1f:9c:de:ea:df:c7:89:6d:0d:05:49:bd:0e:90:4d:
         2c:cd:23:44:24:6a:b4:8e:7f:82:83:17:7d:f4:0a:77:34:f0:
         13:7e:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:06:46 2026 by rpki-client