Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/71a385fe-00a5-30ff-a2c2-631ce2b62531.roa
File:                     71a385fe-00a5-30ff-a2c2-631ce2b62531.roa (raw, json)
Hash identifier:          xfnp1u3OJFDXODWC2qejnyFCTuQDWIoVA2VnQZw0jRg=
Subject key identifier:   F9:19:E0:4F:57:DC:39:8D:06:CE:85:F0:F0:8C:8F:15:1F:AF:A7:06
Certificate issuer:       /CN=65b75871-7632-4a71-a4a9-41f38235fc29
Certificate serial:       010D0C9F4328584E3334589747E3EA4C3F4D4E00
Authority key identifier: C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/71a385fe-00a5-30ff-a2c2-631ce2b62531.roa
Signing time:             Wed 17 Jun 2026 09:00:12 +0000
ROA not before:           Wed 17 Jun 2026 09:00:12 +0000
ROA not after:            Tue 15 Sep 2026 09:00:12 +0000
asID:                     13431
IP address blocks:        174.138.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:33:34:58:97:47:e3:ea:4c:3f:4d:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b75871-7632-4a71-a4a9-41f38235fc29
        Validity
            Not Before: Jun 17 09:00:12 2026 GMT
            Not After : Sep 15 09:00:12 2026 GMT
        Subject: CN=b037076e-e497-4229-8fc7-db277f865643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:e5:63:1f:4a:66:53:72:3b:36:e6:fe:3c:
                    00:97:17:67:4d:54:15:6e:96:54:c4:4c:17:b5:1e:
                    b1:e3:8f:5b:4d:56:d9:bb:f9:59:27:56:44:aa:24:
                    e4:c8:ba:33:68:7b:8a:b9:dc:b0:2f:fd:fe:46:a2:
                    55:b4:e8:f4:41:d6:38:e9:31:ba:45:33:f4:66:f4:
                    7c:a9:0e:cc:70:3a:14:e6:9f:b2:88:a1:96:c1:56:
                    0c:97:fb:81:1e:2e:77:2d:27:e4:1c:58:02:a7:b3:
                    11:b1:2c:13:aa:f3:22:2a:2a:ba:ef:51:6f:f1:85:
                    0b:bb:2c:e9:35:15:45:8b:ee:7a:3b:a2:64:ae:c5:
                    e2:53:82:93:88:71:8b:e5:6a:f0:b7:cc:87:15:36:
                    02:cd:d3:25:db:da:bd:e7:68:4c:42:48:11:ad:80:
                    47:e5:6e:f4:b3:d6:55:20:fc:76:f8:41:eb:dd:bb:
                    45:01:04:a6:7b:10:b7:39:b5:8c:bf:4d:4f:b6:0f:
                    15:27:be:35:f3:a3:66:71:e4:47:1d:ae:d8:ef:3c:
                    36:15:a9:9d:ab:66:96:d4:33:f3:4e:8a:cc:f5:a3:
                    6e:f5:dc:ab:42:ee:47:22:b7:e2:2b:98:dc:c1:8c:
                    91:e0:4a:0f:2a:17:c3:64:b9:bb:18:a5:20:18:45:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:19:E0:4F:57:DC:39:8D:06:CE:85:F0:F0:8C:8F:15:1F:AF:A7:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/71a385fe-00a5-30ff-a2c2-631ce2b62531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.138.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ab:e1:ac:89:ac:81:40:23:e6:2c:c8:75:ac:41:73:63:1a:
         93:00:13:12:b5:e8:f5:dd:7c:dd:60:42:6f:77:b5:05:67:b5:
         03:51:6a:ee:b0:8a:29:7e:e5:13:40:ea:55:b3:5f:b9:f7:78:
         0a:f4:aa:03:45:3b:d0:3a:58:c4:b0:7a:38:64:12:97:4c:6e:
         89:70:ca:54:72:4e:18:59:1c:58:29:b1:1b:17:5b:e4:25:56:
         b2:c6:65:0a:73:d9:af:c2:2f:43:78:ad:cb:dc:a1:4e:82:73:
         dc:55:a5:19:62:3d:26:5e:08:54:5f:26:55:12:92:41:f7:1d:
         ae:03:b0:b9:d4:c3:94:85:1b:6f:4a:a9:41:1e:d7:d4:f4:6a:
         cc:c8:ca:cc:6b:af:e2:a8:80:14:be:f0:ed:40:e9:a0:02:1f:
         22:0b:9f:c0:cd:bd:2f:f8:a6:c1:79:44:04:67:58:f9:8e:94:
         f6:8c:6c:48:72:88:bb:98:5b:74:b3:bc:99:b0:8c:34:da:fe:
         69:46:2e:01:9b:e1:ed:2a:28:32:17:cd:8e:26:ce:6b:48:55:
         6c:6f:53:49:74:b1:9a:f4:be:d5:8f:c4:cc:29:f6:9c:a7:e4:
         58:f7:b2:7b:13:ca:51:e3:7a:64:bd:06:73:a2:85:8f:11:33:
         37:42:9a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:15:38 2026 by rpki-client