Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/bde6f42d-15e0-3bfa-b507-80108d43faa0.roa
File:                     bde6f42d-15e0-3bfa-b507-80108d43faa0.roa (raw, json)
Hash identifier:          UeEQHY7V0fjslK/acSRFujNvUOJbwS1IzFZ2JCc+5c8=
Subject key identifier:   9C:C8:0A:24:6C:DE:E8:B8:CE:F5:CB:63:D4:CB:FC:EE:57:2A:7C:B2
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584DFC6A97DD0D30AF2DCD2FEA80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/bde6f42d-15e0-3bfa-b507-80108d43faa0.roa
Signing time:             Thu 28 May 2026 18:00:03 +0000
ROA not before:           Thu 28 May 2026 18:00:03 +0000
ROA not after:            Wed 26 Aug 2026 18:00:03 +0000
asID:                     209341
IP address blocks:        216.137.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:6a:97:dd:0d:30:af:2d:cd:2f:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: May 28 18:00:03 2026 GMT
            Not After : Aug 26 18:00:03 2026 GMT
        Subject: CN=a8e839af-9ec5-416f-8ca8-d8a4fe4aafd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:56:e4:54:b3:cc:92:69:f1:2e:d3:f8:f6:ac:
                    48:69:06:64:47:ad:86:fd:9f:e3:c2:fb:bb:da:d8:
                    04:32:7a:76:49:d5:60:48:d1:dc:4f:f4:91:28:92:
                    d9:ad:0f:30:de:90:92:d7:6f:cb:96:4f:fd:61:5e:
                    95:6b:c9:1a:7a:19:87:48:9c:7f:98:d8:33:5b:53:
                    af:6b:50:c9:21:e0:bd:59:58:2a:a5:44:88:b0:12:
                    38:fc:f3:5f:00:fd:13:b6:b3:98:a8:3c:6c:44:3b:
                    86:77:1a:b8:29:ee:d8:89:8a:54:dc:ee:5c:53:db:
                    33:8c:4b:a7:55:73:0d:81:6b:6e:f8:49:f8:9d:e7:
                    7c:b8:05:fe:40:b7:d0:fd:b2:b5:4f:9f:70:98:98:
                    c1:39:60:da:2d:89:d4:21:e5:82:00:18:61:47:2b:
                    3d:5c:55:97:bf:ee:6b:58:cb:63:93:97:55:67:55:
                    fe:0c:9f:e6:b9:91:d1:3a:8e:29:7e:15:e6:fb:89:
                    1c:89:2c:ef:98:bf:07:e1:d8:1f:f8:cf:8d:29:ec:
                    c6:99:cc:62:5c:3b:94:eb:a2:ea:a0:a8:95:84:dc:
                    64:87:7b:ad:82:17:e3:f8:ca:3b:cb:05:7d:22:34:
                    18:9e:79:e9:a5:ee:ba:68:03:c1:c6:05:59:06:5a:
                    a8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C8:0A:24:6C:DE:E8:B8:CE:F5:CB:63:D4:CB:FC:EE:57:2A:7C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/bde6f42d-15e0-3bfa-b507-80108d43faa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:03:d2:cc:e1:b8:49:79:c3:53:30:21:59:e2:95:64:e3:da:
         08:54:7d:7c:43:96:be:13:21:17:25:d6:f5:42:64:3a:45:1b:
         bb:3c:58:12:0f:85:9e:9e:7d:9c:77:5e:48:4e:6c:3a:94:50:
         d0:b0:d5:a1:5c:fc:35:13:d0:24:be:4b:5d:32:c7:3b:d2:52:
         89:2d:0b:a0:63:9b:4a:3d:92:de:68:03:7d:ff:cd:22:29:97:
         74:38:93:46:80:47:f0:06:5d:9c:2d:dc:c2:37:8c:dc:f4:4d:
         95:9b:be:f3:90:b3:29:97:1b:bd:41:14:8d:f7:6a:ba:c6:cb:
         2c:6d:d7:78:ba:dd:07:81:d7:0d:c1:1b:f3:b1:14:d3:df:cc:
         34:e2:39:4c:54:3f:cc:67:19:51:46:3b:f3:18:e9:e5:cb:cd:
         77:e4:0c:ea:cc:bd:d3:13:4a:1c:4c:60:af:d3:b3:09:6c:8f:
         3c:80:93:0f:25:c8:9e:66:ea:7e:17:4f:bd:9b:91:d3:59:49:
         70:a8:47:78:10:e6:d0:5f:66:c1:34:44:77:b8:d0:44:4e:ff:
         58:c0:f6:aa:f4:6a:4e:03:26:f4:55:84:a1:97:df:79:13:d3:
         04:7d:4a:9a:18:1f:f1:bf:6a:e0:3c:65:35:7c:5f:81:52:c2:
         3d:90:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:01:07 2026 by rpki-client