Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/9eb11a25-a7a2-39ce-a5a5-3425d8d2e1eb.roa
File:                     9eb11a25-a7a2-39ce-a5a5-3425d8d2e1eb.roa (raw, json)
Hash identifier:          WAGWUiqkP1XuywigqO8Kcs+RxSLCYvO23UX8FdyIcMY=
Subject key identifier:   76:AA:8B:A4:AF:76:56:F2:DD:94:6F:93:17:37:95:C0:7B:32:F0:71
Certificate issuer:       /CN=d90d18d1-dead-4d11-bed3-243759e40831
Certificate serial:       010D0C9F4328584E147EE5AB56489EF6029C3B60
Authority key identifier: 61:32:55:2F:11:F0:26:05:2B:F5:5F:AE:CA:CA:C4:A7:9A:70:59:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/9eb11a25-a7a2-39ce-a5a5-3425d8d2e1eb.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     3066
IP address blocks:        168.245.132.0/23 maxlen: 24
                          168.245.232.0/23 maxlen: 24
                          208.72.84.0/22 maxlen: 24
                          216.41.142.0/24 maxlen: 24
                          2610:178::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:e5:ab:56:48:9e:f6:02:9c:3b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d18d1-dead-4d11-bed3-243759e40831
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=6d6f6db7-e988-4d39-9820-e6ca85de5d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:f5:81:73:ed:4c:7f:de:6e:08:ba:4a:cb:
                    b0:c6:62:a8:4b:0f:3e:9a:a3:74:a9:3b:9b:b0:b6:
                    1d:55:7d:14:05:37:48:89:f0:b6:64:93:da:ce:94:
                    40:da:8f:f8:6e:1c:f6:25:bb:35:cf:40:1a:df:8e:
                    9f:a6:a4:88:7b:b5:f2:05:6b:e4:35:2b:7c:9a:ca:
                    73:42:21:44:92:ad:07:ae:3f:c7:c3:54:7b:6d:62:
                    08:eb:87:71:30:94:37:84:71:59:f5:dd:89:16:2a:
                    94:91:0e:0b:a0:b2:fa:6d:8b:f6:e0:e4:af:7b:a3:
                    02:a1:26:46:3e:ca:1f:86:13:e9:11:06:da:a8:4a:
                    0d:9b:da:ef:d9:83:1e:3b:bd:7a:b6:9c:85:55:c8:
                    d6:17:27:cb:d7:4d:a5:85:19:f4:18:ec:43:e0:0b:
                    25:e7:fa:b1:5a:40:bb:44:ce:03:5d:c5:e6:59:8b:
                    67:b2:d3:95:5f:1f:c0:3f:b0:c6:7b:b3:62:3d:b1:
                    55:ad:25:eb:16:d2:0c:53:c2:10:d8:16:da:a5:40:
                    b1:18:98:e2:90:db:21:1d:98:c2:7a:51:cf:8e:7a:
                    62:98:be:0d:2a:dd:5f:df:44:a2:93:3f:e5:b8:f2:
                    66:b9:eb:f7:e2:85:97:61:28:0c:f8:20:fe:e7:72:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AA:8B:A4:AF:76:56:F2:DD:94:6F:93:17:37:95:C0:7B:32:F0:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/9eb11a25-a7a2-39ce-a5a5-3425d8d2e1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.crl

            X509v3 Authority Key Identifier:
                keyid:61:32:55:2F:11:F0:26:05:2B:F5:5F:AE:CA:CA:C4:A7:9A:70:59:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.132.0/23
                  168.245.232.0/23
                  208.72.84.0/22
                  216.41.142.0/24
                IPv6:
                  2610:178::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ac:9d:0e:80:0b:ed:78:b8:18:b7:53:d2:f5:ea:dd:a9:73:
         11:54:2c:35:05:f1:6e:14:e7:c3:a6:be:26:b5:54:99:ee:1f:
         78:d5:5e:60:0c:7a:06:22:66:41:73:55:9c:e4:56:1b:b0:e7:
         61:7a:2a:f7:3e:fb:90:50:b8:67:da:ec:c1:b2:66:e9:71:ee:
         09:5d:1a:10:bc:1f:7f:fb:6c:3b:bb:d1:c0:b8:86:16:e0:de:
         ba:58:b1:60:c4:f0:48:1f:b3:11:e2:53:0e:33:f9:cb:0b:b8:
         81:68:73:f0:42:7e:77:14:c1:6a:0d:5e:c7:db:2a:68:d7:80:
         50:c1:a6:47:d8:28:53:19:e2:ac:3a:f8:93:8e:98:cb:73:24:
         03:dd:7b:0c:ec:17:0f:67:bb:5b:00:2b:2f:e2:02:c3:a4:45:
         fb:5d:3b:02:bc:3f:31:78:70:02:00:06:9b:67:52:8e:b2:ad:
         d3:b2:ef:cc:84:8e:46:12:31:c3:93:eb:d9:01:7c:fc:aa:8d:
         d5:56:9b:86:81:83:cc:30:52:25:1d:95:6b:1d:42:53:d4:71:
         49:a6:d5:a4:e9:1e:14:bf:4d:4f:98:7d:67:da:f1:4f:e4:47:
         36:1b:e7:fc:18:86:0b:fe:36:20:45:05:30:e2:97:63:52:93:
         9e:b0:65:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 05:15:16 2026 by rpki-client