Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa
File:                     e4e25509-90e2-3048-8aef-d1f4b44a806e.roa (raw, json)
Hash identifier:          Pq6wjavntlvk5n+NHW6AR6IJTieK22NWvIsySVJ2Rx8=
Subject key identifier:   E3:4E:E2:5F:65:BA:A2:B4:5A:FD:1E:A5:07:EF:35:C2:90:32:67:71
Certificate issuer:       /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1
Certificate serial:       010D0C9F4328584D300A4C1F447D3911DE8337F7
Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     22987
IP address blocks:        152.86.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:4c:1f:44:7d:39:11:de:83:37:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=bf1279f9-2a5e-4e26-9422-da64c29e2bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8b:f5:6e:65:d8:66:a1:6e:47:b5:42:e5:43:
                    0c:a0:30:c1:10:a2:82:f1:66:dd:13:f0:a3:d3:83:
                    b2:00:e9:ff:e9:b1:98:50:ad:c4:2e:3c:9d:f2:b3:
                    61:05:7e:5e:8e:67:63:04:79:21:91:3e:29:4e:1b:
                    6e:47:8f:58:4e:bd:07:10:25:7d:08:95:81:19:93:
                    94:61:09:0a:ec:56:71:98:5d:fc:d5:4c:10:61:e6:
                    03:07:7d:5a:f1:56:64:21:41:c2:bf:1b:df:a7:75:
                    22:66:f1:76:08:f7:26:85:4b:f9:03:92:a1:c3:9e:
                    25:63:7c:fc:41:da:0b:2b:49:f1:d0:7b:79:76:ad:
                    99:df:0e:61:2a:b7:a1:ee:92:a8:32:b3:af:de:19:
                    29:92:f5:7e:dd:9d:1e:4c:b8:07:f0:3c:11:fd:db:
                    ef:87:7f:6d:bc:51:e6:a7:e0:fd:14:56:61:e4:97:
                    44:ba:3f:c9:a8:7c:31:e1:81:7c:d1:fe:5c:73:d8:
                    57:a2:d8:79:18:dc:c3:68:a2:2d:6c:a8:6c:2d:3e:
                    58:6f:83:b1:44:be:c5:05:d2:7a:e2:84:b9:8e:55:
                    1e:58:77:c7:27:eb:ea:01:6c:42:2c:ae:36:74:31:
                    aa:a0:05:7f:e1:9b:4d:36:f1:c6:2f:de:f6:5c:25:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4E:E2:5F:65:BA:A2:B4:5A:FD:1E:A5:07:EF:35:C2:90:32:67:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.86.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:96:03:4e:a5:1d:9c:19:fd:ed:31:b9:0e:fa:d9:80:f3:ce:
         ef:d9:90:81:7c:17:e1:10:1f:43:26:80:32:07:e5:20:d7:c8:
         fc:57:ba:8b:f1:93:85:f1:88:26:a4:38:37:74:ae:2f:b7:e7:
         fc:d0:b3:1a:5e:21:10:85:5a:95:88:45:ba:e2:e7:67:28:d3:
         1f:9d:82:54:ed:50:10:35:bb:e6:5e:46:c2:2a:17:4d:a8:63:
         f3:23:b8:cf:d1:56:89:22:aa:a5:b8:6f:08:42:45:fd:27:8b:
         67:fc:9b:da:c4:5a:9f:e8:ee:75:a2:ee:9d:e0:dd:dc:6c:76:
         88:66:77:68:66:82:4a:82:c0:af:67:60:5f:3f:f6:0a:3f:7a:
         3e:cc:2a:b2:f5:30:77:81:cc:c1:3f:ee:d4:7c:4a:c7:78:2a:
         13:34:79:25:1f:4b:dd:28:8d:93:1c:6d:ad:f9:a7:0e:35:82:
         4d:f4:1e:ba:bd:7d:8f:78:d5:86:81:10:67:05:1a:40:e0:b1:
         99:fd:7d:b7:26:09:ec:b1:b3:01:c6:10:8f:72:cb:3e:33:f3:
         36:81:40:d6:62:65:b1:fa:91:05:2a:b6:c8:20:3a:2c:65:b1:
         52:f2:ad:18:70:b7:71:96:e9:b9:9f:64:d4:f4:2f:e2:76:84:
         51:55:81:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 23:07:20 2026 by rpki-client