Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1b3e453b-e16a-3584-8bb8-cf0c6e819cb2.roa
File:                     1b3e453b-e16a-3584-8bb8-cf0c6e819cb2.roa (raw, json)
Hash identifier:          Y2lzxOTjqf5C1fUOncjx7b2J+yrdEQpjDvDJXPNBgpo=
Subject key identifier:   9B:87:E2:DB:F8:D6:56:B1:CE:1D:D6:2A:5E:AB:36:EE:33:EE:13:66
Certificate issuer:       /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial:       010D0C9F4328584DFBD5D4EC6012B5EF917D8480
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1b3e453b-e16a-3584-8bb8-cf0c6e819cb2.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     23167
IP address blocks:        149.234.0.0/21 maxlen: 24
                          192.80.67.0/24 maxlen: 24
                          192.80.68.0/24 maxlen: 24
                          192.80.73.0/24 maxlen: 24
                          192.122.250.0/24 maxlen: 24
                          192.206.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:d4:ec:60:12:b5:ef:91:7d:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=28c720c8-ef31-4b74-83d1-69b35b75cb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:57:e9:39:ea:16:2a:64:3b:b1:ef:2b:39:
                    ef:fb:b8:ff:b8:5c:de:6f:37:91:ae:ec:05:3b:b8:
                    29:05:b9:5f:14:7a:83:d8:63:99:fc:0e:34:38:09:
                    49:7c:f4:50:ad:09:ba:94:b5:ec:c3:b6:25:02:7a:
                    12:cc:88:dd:3e:f4:36:bf:05:c8:92:40:89:f4:6d:
                    e0:9c:40:44:3f:83:5e:5e:f4:f7:37:2f:df:2e:e3:
                    9c:7f:61:80:f5:f6:2a:8c:da:b7:80:e2:a0:22:01:
                    d6:a3:97:3b:98:86:5c:2d:01:13:cc:4e:40:63:a4:
                    ce:a7:ed:03:2a:50:ee:dd:2e:5b:26:f8:47:ad:c5:
                    e2:60:8a:5e:98:db:6f:f7:9e:d2:71:14:e2:24:ab:
                    ae:f6:1f:45:83:1a:13:ec:cc:67:46:10:f5:39:c4:
                    f3:8a:ed:54:e1:76:d4:49:d9:d2:32:30:17:fe:c3:
                    47:32:6e:59:25:7a:65:ea:e8:56:9e:73:30:4e:c0:
                    72:4e:e4:3f:4d:f3:1b:8e:9b:5b:dd:2b:12:52:f2:
                    4f:69:2b:85:fe:63:11:b6:a0:88:f3:61:9d:dd:bc:
                    01:6a:e3:23:df:09:6b:b5:5f:38:5c:cd:7b:13:64:
                    b8:27:58:e1:e3:8b:09:be:85:8d:7b:45:c4:cc:83:
                    76:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:87:E2:DB:F8:D6:56:B1:CE:1D:D6:2A:5E:AB:36:EE:33:EE:13:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1b3e453b-e16a-3584-8bb8-cf0c6e819cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl

            X509v3 Authority Key Identifier:
                keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.0.0/21
                  192.80.67.0-192.80.68.255
                  192.80.73.0/24
                  192.122.250.0/24
                  192.206.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:7c:7c:65:29:10:8b:2c:c6:33:2c:fe:f9:7f:ae:e9:c4:d7:
         a2:b7:c0:83:64:cf:70:c9:00:6e:29:63:c5:81:2c:1c:76:5d:
         52:2f:0c:af:6c:0f:04:fc:fa:81:7b:d7:af:3f:8a:4a:50:be:
         1e:76:4e:a5:2c:25:3f:b7:40:33:79:03:5b:ca:8a:9f:df:a1:
         1e:0f:1c:73:63:52:dc:f9:3b:4e:0c:08:f2:d2:91:6f:8c:70:
         36:94:5f:34:46:63:b2:d8:b9:b3:99:b5:62:21:64:77:4e:18:
         62:7e:0d:58:a7:53:a4:74:9d:d6:a4:a2:13:3a:84:c8:db:7a:
         9e:c0:12:ec:69:76:6f:f8:30:48:6f:52:ed:8c:04:1c:d1:0b:
         d6:52:65:8b:fe:b0:29:24:7a:d9:c0:37:fa:a0:a4:d3:1f:6c:
         4d:fa:4e:e6:19:40:ca:d2:7f:7d:dd:fc:ad:b4:f0:0d:50:e5:
         1e:ba:1f:10:ca:4e:4e:48:f6:ce:9f:3d:ff:60:4e:8a:2c:7f:
         1b:c9:d6:04:43:ea:fc:55:2b:17:ca:35:67:96:81:35:42:b7:
         4b:3b:a3:98:66:6a:97:17:7d:9e:9f:08:0d:58:c8:f9:06:d0:
         26:4f:fe:ce:14:79:5a:4b:1b:ee:ac:ba:0b:7d:9b:43:c8:51:
         da:77:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 01:45:46 2026 by rpki-client