Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
File:                     487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa (raw, json)
Hash identifier:          tPvviLiWsWhfDpzMu5zyTNtybpqtdo/v/ZWUHu0Qg7U=
Subject key identifier:   FA:1B:19:8F:C0:36:80:F1:74:BA:20:C0:30:97:E8:0E:A3:BA:8C:FC
Certificate issuer:       /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial:       010D0C9F4328584E31CF0B2C7AE9D1EEE7661380
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     6939
IP address blocks:        204.15.220.0/22 maxlen: 24
                          208.86.120.0/21 maxlen: 24
                          2606:3840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:0b:2c:7a:e9:d1:ee:e7:66:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=308a9bf9-7726-4748-8105-945d74a0f00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:87:7a:57:92:cf:e5:24:94:e3:97:9d:84:
                    ef:4a:a1:02:73:0f:f5:1b:d6:a2:98:ec:b0:71:2e:
                    18:d8:d1:6c:85:49:9a:ad:60:08:bc:a6:76:39:b9:
                    5b:73:e7:b4:0c:30:ab:80:70:2e:9d:57:6a:1f:fe:
                    ef:54:55:5f:26:e6:ea:68:af:a5:ff:11:fb:41:7d:
                    5c:1d:45:25:21:b3:78:63:a9:14:d4:1f:92:41:98:
                    d8:d1:b5:fc:8e:08:b5:f9:8e:ea:7d:2d:31:66:fd:
                    69:e0:8d:69:d3:ac:87:62:ef:d8:ea:27:cc:30:d1:
                    f7:fd:b8:c6:95:0a:b7:9f:76:f9:b8:1a:6e:ed:b3:
                    b3:52:55:94:05:1b:08:3e:df:91:8f:82:ea:5b:22:
                    bb:fb:3e:cb:e1:e3:2a:38:36:b0:63:c2:e1:ff:94:
                    e1:59:3d:31:91:29:2f:ed:74:44:5c:4c:8d:5a:b9:
                    f7:63:92:e0:2f:6b:db:da:d1:9f:01:b2:b4:6e:4e:
                    bc:4e:8a:f6:cb:56:c1:e9:9a:f1:8b:ea:53:aa:aa:
                    1d:24:52:c6:26:a4:e9:ea:d6:b6:2b:3e:9a:50:0b:
                    1e:91:56:c8:13:1e:e3:19:86:e4:21:f4:96:55:bb:
                    77:0b:17:c6:23:83:e7:1c:ab:ab:4b:f7:c8:32:36:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1B:19:8F:C0:36:80:F1:74:BA:20:C0:30:97:E8:0E:A3:BA:8C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl

            X509v3 Authority Key Identifier:
                keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.220.0/22
                  208.86.120.0/21
                IPv6:
                  2606:3840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:de:1a:5f:a0:b1:db:53:1e:a7:7d:e5:bc:af:71:85:5a:fc:
         60:2c:37:3c:32:84:96:4e:a6:5e:7d:91:09:77:e0:fa:62:4e:
         57:71:35:ee:ee:56:31:c6:fa:5b:f0:39:99:9b:be:ce:e6:0f:
         64:22:92:04:32:2f:7d:85:eb:31:b9:6f:b3:14:fc:7a:32:33:
         7c:f8:fc:70:83:90:e2:0f:00:d9:2b:3d:7e:7a:56:ac:74:87:
         35:03:2b:9d:26:2e:9d:e4:a1:ac:67:62:dd:a1:02:71:ac:53:
         f9:1b:d1:6c:b4:10:16:a4:4f:06:f6:e2:ce:8b:d1:8c:e0:1e:
         a9:70:b1:70:de:f6:c8:3b:ee:f9:c6:e4:20:87:e2:94:ce:73:
         68:d1:7e:9a:9a:4d:ed:69:67:ed:24:77:15:ef:fe:cd:26:2c:
         da:24:f3:af:24:3f:7c:5d:36:0a:4a:eb:cd:ce:8d:f9:06:97:
         0e:a2:04:50:69:bf:3a:80:4b:69:a7:f6:76:49:07:5f:be:58:
         a9:3b:7b:c9:ba:9c:65:7d:da:55:a4:4f:fc:b0:59:6e:b7:64:
         3d:7a:61:9a:40:d8:bc:55:1b:87:f1:31:aa:9a:ce:31:47:ea:
         6e:55:50:64:db:c1:40:50:0f:08:4f:43:13:c6:28:f3:7a:a6:
         5f:e0:77:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:06:51 2026 by rpki-client