Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/7dab8bae-4738-3508-81b7-a25749bccb14.roa
File:                     7dab8bae-4738-3508-81b7-a25749bccb14.roa (raw, json)
Hash identifier:          Whve6pgbK2/z0ea6dVMZYn3qDGXVAdo1p13kVfrLZiU=
Subject key identifier:   18:73:E5:AB:13:03:BE:A2:D9:52:55:D4:4E:3F:61:58:EB:BA:02:D1
Certificate issuer:       /CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20
Certificate serial:       010D0C9F4328584E3A2F217641EDC46CB1809280
Authority key identifier: 5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/7dab8bae-4738-3508-81b7-a25749bccb14.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     5723
IP address blocks:        162.129.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:21:76:41:ed:c4:6c:b1:80:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=fb568fb5-6d85-481e-a8e1-a347a68d171c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b2:e4:81:b7:93:c6:92:b2:22:fa:69:8f:f4:
                    24:26:a9:04:5a:8e:ab:75:fd:b9:3f:44:fa:27:6d:
                    62:80:90:52:b4:2e:b6:08:aa:c0:7e:38:b6:bd:68:
                    4a:ee:8f:2a:73:1f:d3:ff:d3:c6:b0:25:db:f6:59:
                    8a:8c:19:92:b4:db:7f:70:57:10:e5:e6:14:68:64:
                    97:d0:96:1b:d9:63:de:48:a6:1c:98:c6:34:d2:d0:
                    24:01:c0:ef:eb:23:b7:33:cb:51:c5:d0:b7:de:db:
                    49:09:db:2c:4d:96:c0:8f:9a:95:bc:b9:de:37:46:
                    e9:05:78:f3:31:d0:a3:96:7c:7e:0f:2b:80:75:9e:
                    65:74:ec:b5:e2:96:93:8b:a7:9a:ef:99:b5:ab:6f:
                    1c:f5:bc:6c:d6:ab:63:c7:8e:00:6d:72:8e:08:68:
                    29:f5:11:04:e1:67:e5:29:39:13:44:78:e1:05:89:
                    52:5a:24:5c:09:a9:6e:5d:a4:56:83:72:04:6b:87:
                    54:06:91:d2:c6:68:5b:97:cb:65:42:18:2c:ab:08:
                    e4:60:ed:3e:ff:b7:d1:d6:91:5f:f3:d5:21:30:34:
                    0f:7f:c6:0d:d0:6d:13:c5:f9:e6:a1:72:f2:b2:df:
                    86:5b:82:56:2b:76:72:93:fc:9d:ef:fc:46:0d:64:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:73:E5:AB:13:03:BE:A2:D9:52:55:D4:4E:3F:61:58:EB:BA:02:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/7dab8bae-4738-3508-81b7-a25749bccb14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl

            X509v3 Authority Key Identifier:
                keyid:5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:fa:39:a9:33:7b:f0:0e:d3:74:86:47:35:f6:a9:1e:8b:05:
         4e:9c:a0:98:1a:e6:80:db:8a:30:43:72:dd:fd:65:f1:5d:22:
         81:3e:f0:49:db:d6:4c:7c:53:0d:4e:64:73:40:58:72:40:7f:
         eb:43:38:91:03:c3:fa:9d:c2:e7:f9:1a:17:d4:ff:81:5f:45:
         33:09:f5:aa:de:4c:8e:ec:08:c1:e4:0d:a6:d6:93:90:99:79:
         de:06:17:99:e2:02:2b:2e:5f:35:e2:81:da:52:e4:74:63:75:
         cb:37:a3:48:92:56:93:8c:27:73:84:48:cd:02:5b:43:9d:42:
         81:60:e1:c6:b9:d6:60:9a:3d:3f:80:45:83:8c:00:60:2d:80:
         73:7b:0d:d9:b0:dd:e7:2e:25:5d:67:23:3d:4a:d6:2d:34:a1:
         32:f3:ef:79:ec:1d:7a:bc:5f:a7:da:86:24:1a:5d:cd:90:3e:
         0c:a4:27:f5:e7:43:aa:28:61:a9:cf:9d:24:bc:ad:14:9c:90:
         cf:cd:e5:80:f0:61:93:a1:a6:f9:6e:7e:1b:2f:5c:cb:fd:31:
         7f:0d:a9:31:fd:06:7f:16:3f:7c:5e:d1:14:30:86:39:28:25:
         83:8f:aa:25:8e:d4:5a:1a:96:80:a5:41:bd:c3:1b:34:ac:b4:
         83:20:5e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:47:02 2026 by rpki-client