Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa
File:                     f8690b69-feea-3870-a431-f819071fa236.roa (raw, json)
Hash identifier:          m7gq/bHwjw478Vh31+XG4Am4zNb0EYhqR5pnUjutSB4=
Subject key identifier:   2D:A4:B9:16:44:43:A7:C7:62:CE:C6:5B:C7:74:B6:99:4A:0F:18:D3
Certificate issuer:       /CN=355b6459-d3e6-4569-b278-aef1a714f5bf
Certificate serial:       010D0C9F4328584DF4DB481095226C0D1DD10C80
Authority key identifier: CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     1708
IP address blocks:        204.63.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:48:10:95:22:6c:0d:1d:d1:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355b6459-d3e6-4569-b278-aef1a714f5bf
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=3c165b64-d961-4fc5-9994-acdbdf2cb7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e3:1d:54:d6:99:6c:7b:97:0c:e1:4e:f3:8b:
                    dc:af:53:5d:59:ba:f3:ed:08:ab:cd:28:6f:f5:14:
                    c4:dc:6e:b0:c3:7b:c4:73:81:87:a7:62:f0:0b:6d:
                    56:4d:35:d9:5f:98:ae:d9:1b:32:14:bd:43:ce:b5:
                    40:a0:39:99:d7:a5:ba:cf:26:87:d0:d1:3b:87:9e:
                    8c:96:9b:77:da:7c:97:ee:f2:de:08:f0:1f:e9:0b:
                    0a:b0:79:34:b1:52:9e:49:bb:5f:2b:ff:8a:20:d6:
                    4b:ed:a1:44:9c:17:a8:bc:e8:bf:a4:ec:7f:b3:f9:
                    6d:ba:40:c8:76:00:39:b8:9b:ab:17:ff:53:f7:5e:
                    66:5a:d8:49:4f:df:65:fe:3f:71:e5:20:2f:24:e9:
                    88:ac:d7:89:d7:71:58:eb:3a:b9:3c:6f:ab:a8:2d:
                    fa:b1:c0:d0:9a:95:a6:a1:e1:ca:c0:66:b1:18:6c:
                    2e:ab:6b:82:48:3e:d2:01:15:85:e3:44:64:85:62:
                    23:dc:c6:44:94:cc:01:50:13:de:21:fa:60:fd:f2:
                    e5:4e:f6:5c:68:ca:da:a7:af:3f:17:92:ea:4d:75:
                    88:11:5f:af:e3:16:46:ed:db:45:f3:49:18:71:c7:
                    f8:bb:10:6d:5f:c7:69:b5:f1:af:a2:9a:18:e2:3f:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A4:B9:16:44:43:A7:C7:62:CE:C6:5B:C7:74:B6:99:4A:0F:18:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl

            X509v3 Authority Key Identifier:
                keyid:CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:91:ca:aa:d7:3e:76:21:87:77:39:72:06:f8:09:65:82:91:
         e8:22:4f:4a:05:d5:6d:c7:66:ca:b0:27:a9:77:3d:b1:57:50:
         57:f5:04:bc:7b:12:65:c7:f9:28:ca:b3:2d:e4:fa:7c:03:0b:
         fe:dd:ee:ff:d1:ee:65:08:1f:21:8c:3b:78:ac:0c:74:08:a6:
         a8:5b:6d:32:00:0d:94:91:3e:e4:ea:7b:87:34:5a:72:59:ec:
         1a:1a:d6:af:58:07:c0:82:8e:b8:38:ef:41:4f:76:5e:47:ed:
         54:66:36:ae:26:62:3b:7c:60:77:1b:49:7a:24:e6:bc:f2:be:
         ff:14:38:c4:b9:88:26:90:1e:1d:d4:d1:75:c8:5e:bd:b4:60:
         b7:63:f7:8e:0a:36:7c:f8:91:b7:e1:6f:d9:b8:c4:1d:85:d5:
         74:c8:44:a3:4c:2a:c4:18:68:27:8e:4d:0b:1f:35:b0:f3:c3:
         fc:a5:78:3a:09:e4:93:3f:f3:98:f9:52:f2:94:cb:53:c5:4d:
         27:96:05:d5:42:34:e1:94:9d:0e:94:ee:c3:b3:4d:01:20:e0:
         82:4f:45:e5:11:20:1c:ca:52:37:7e:b2:71:d1:ed:0b:64:b6:
         78:4b:ee:38:cb:78:6a:97:d2:ea:28:b9:98:18:ba:b8:6e:8f:
         17:91:7e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:36:23 2026 by rpki-client