Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/39634e50-2277-36ae-987a-5889869f1bb1.roa
File:                     39634e50-2277-36ae-987a-5889869f1bb1.roa (raw, json)
Hash identifier:          2tEGwILl0HIJn6U6/0qs83lJLmc9O5+tsI4oQDCPvqg=
Subject key identifier:   C1:67:1A:4F:75:62:87:CE:A2:C8:58:92:3D:9C:50:C4:D3:C8:23:7E
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584DD8F068E1224E173683F9B600
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/39634e50-2277-36ae-987a-5889869f1bb1.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     398415
IP address blocks:        128.254.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:68:e1:22:4e:17:36:83:f9:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=ee903394-0a0d-4046-9038-bb33acf32a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:67:d7:c8:a6:5d:90:4a:23:0d:08:54:9a:19:
                    a5:48:89:af:9e:55:b7:b2:25:b7:c0:3c:68:bd:3e:
                    61:66:2d:9e:46:3b:1f:47:6c:bf:eb:64:e8:d3:f5:
                    f6:ff:ee:a8:ee:5e:af:e2:6b:8a:b8:96:11:cc:31:
                    57:f9:46:c4:eb:bc:01:9c:62:e2:da:dd:d4:db:a9:
                    ca:de:5f:ea:d2:31:c9:c0:66:40:81:ba:ea:aa:1d:
                    4f:ec:36:c1:c9:32:19:8a:74:53:9a:d5:bb:3d:d2:
                    1d:25:3e:32:ba:a7:6c:c0:d3:be:47:74:c7:72:ad:
                    bb:50:c0:31:e4:fd:6b:87:52:e0:88:dd:58:96:e4:
                    0f:26:de:f7:29:32:62:92:2f:1e:cf:69:1f:d2:d0:
                    30:77:30:dc:f1:56:89:dd:12:44:fe:c1:a1:65:94:
                    6d:80:da:4d:04:33:2c:85:6f:8b:07:c0:92:40:bf:
                    7a:e2:76:75:67:74:46:77:5c:99:70:79:5a:47:67:
                    1b:0b:0d:84:10:5e:4e:d7:b0:9f:a8:a7:63:90:2c:
                    3c:fd:c0:f1:47:7f:02:70:51:33:f7:0d:c5:52:44:
                    6d:77:c0:da:b0:c7:22:20:e3:54:a3:66:7a:ad:ba:
                    d8:8e:bb:d2:71:71:e3:5d:62:bd:45:f0:cb:42:1d:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:67:1A:4F:75:62:87:CE:A2:C8:58:92:3D:9C:50:C4:D3:C8:23:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/39634e50-2277-36ae-987a-5889869f1bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c3:8c:18:9c:c2:d2:cc:8f:db:44:fc:40:c4:bb:4a:a4:a7:
         b0:b3:7d:66:d9:e1:1b:6c:ae:f5:55:91:63:ea:c5:94:17:e6:
         e2:11:d5:11:3f:db:89:0a:00:50:fd:45:00:f6:77:3c:1f:d3:
         8e:17:92:6c:17:8d:f2:d0:87:91:77:2b:8e:4f:c6:40:d8:3c:
         c0:ff:32:e9:ad:3e:44:67:06:14:13:14:ff:e1:ed:43:a0:98:
         c5:da:83:33:f9:90:2c:f3:49:2f:88:b3:a1:64:ab:26:6e:1a:
         37:54:f6:80:f3:99:44:c7:c5:4b:68:79:43:6a:d8:b4:5b:dc:
         1e:d2:b5:fe:2a:78:7e:80:8d:bf:5b:bb:7a:9d:8d:f4:16:e9:
         ac:54:0c:ac:ba:c2:9f:14:93:a1:f2:f6:b3:17:14:3d:c3:1e:
         a4:3a:08:07:8b:ae:b6:c5:55:4a:30:e7:33:aa:c0:75:7a:32:
         03:b3:10:14:8f:a3:eb:6f:34:09:99:0e:3f:c3:90:13:a2:87:
         a0:fa:c6:6f:70:80:99:73:40:35:d7:2c:5d:7f:df:75:bb:7a:
         e8:fd:f4:b9:e0:57:c0:55:63:2f:6c:98:8c:da:c8:94:ac:30:
         ec:ea:ff:9f:68:88:c6:99:16:85:46:4c:a9:f1:16:18:91:1f:
         a7:38:bf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 04:22:52 2026 by rpki-client