Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa
File:                     d0006625-f457-3068-ab43-dd1b3162c248.roa (raw, json)
Hash identifier:          847CIND6YC+BHFZp+Gp0xDE94oITwtjOL2ENhUk296M=
Subject key identifier:   52:71:0C:3F:2E:AD:C1:1A:2F:6D:2F:0E:DD:E0:94:98:4E:0C:F1:E4
Certificate issuer:       /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial:       010D0C9F4328584E2D9F42421543A4FC1F7F0380
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     20115
IP address blocks:        209.114.4.0/22 maxlen: 24
                          209.114.8.0/21 maxlen: 24
                          209.114.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:42:42:15:43:a4:fc:1f:7f:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=66e7addb-787b-46e0-90d7-afef3b78fc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:ae:f8:6a:72:bd:a8:18:6d:b6:27:44:ad:
                    e5:5b:b6:e7:78:fb:26:4e:7a:d6:31:ab:39:6a:35:
                    78:81:57:15:60:2b:9c:44:88:9a:e1:4c:92:dd:ca:
                    aa:6e:59:d0:38:3e:24:57:29:bf:57:3b:6a:38:f3:
                    31:d9:20:c4:bf:87:5e:63:7d:9e:09:c9:24:23:4b:
                    ef:bc:9c:0d:bd:7c:82:e3:4f:67:4d:54:59:94:70:
                    14:86:42:cc:fa:1b:08:5b:a6:81:d5:94:bd:c5:6c:
                    d9:50:40:cb:eb:41:f8:b7:d8:c7:0f:43:d0:33:74:
                    50:ed:60:21:0a:c1:d5:60:e3:f0:4b:3f:7c:cc:2c:
                    de:07:32:fd:f8:1a:97:75:6c:f0:5f:8e:52:6a:b6:
                    a5:8d:10:80:46:96:a2:63:0f:dc:75:8d:b7:55:5a:
                    d8:87:c4:66:9d:79:f5:d5:7f:c9:29:04:72:d7:04:
                    e8:08:ac:24:a8:d9:64:9c:c0:bf:67:11:99:aa:7f:
                    86:2c:bb:0d:8d:9d:2a:84:9d:53:66:90:18:0a:cb:
                    a6:73:d1:4d:15:06:96:f9:b2:c0:6a:f9:c1:bf:91:
                    c5:a7:be:3a:4b:9e:d7:e6:a5:fb:f5:b6:50:bf:f8:
                    60:f5:b7:b2:6c:ef:ea:73:1e:90:d4:1e:a2:8f:99:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:71:0C:3F:2E:AD:C1:1A:2F:6D:2F:0E:DD:E0:94:98:4E:0C:F1:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl

            X509v3 Authority Key Identifier:
                keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.4.0-209.114.31.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:02:d4:81:82:7a:4c:a5:32:31:9b:de:62:dc:ff:fc:e8:84:
         29:f1:f2:d7:64:0a:dd:e1:25:fb:72:e7:4b:c0:86:02:25:72:
         92:c9:70:6e:21:b1:98:2f:6b:03:54:66:e6:e0:c5:f5:0c:cc:
         ee:5e:c7:d7:a7:22:24:6f:3a:cb:1a:96:28:73:3f:ca:3c:22:
         ab:ff:b5:ad:95:0b:5c:2d:6a:0f:97:41:15:3a:5c:e7:07:5e:
         9b:57:7c:0f:94:dd:17:dd:c1:9d:f9:88:67:02:9c:6e:13:2b:
         4e:f5:6f:6f:8d:8c:8d:0d:91:fc:5d:ae:3b:70:f1:54:b5:43:
         92:66:16:eb:6c:36:8a:fa:5e:34:15:10:68:53:82:ee:a2:18:
         9f:b7:72:d9:05:0b:ea:a5:0b:6b:fe:5e:d8:cd:d5:76:33:6b:
         37:04:99:8f:11:bf:1c:8d:67:3e:02:c8:f9:1a:88:73:c5:62:
         49:5f:46:20:d9:2a:f7:44:c4:2a:76:9a:ed:89:94:56:18:0e:
         1a:89:9c:91:4a:f4:73:1c:ed:7a:34:3d:fa:e5:6d:8e:d6:75:
         97:ff:f6:d2:00:20:b0:ad:fd:39:f8:8c:c5:23:bb:f1:9e:56:
         a0:82:95:1c:d1:51:f7:92:a0:39:c4:4b:74:12:cd:90:e3:c4:
         e0:dc:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:38:41 2026 by rpki-client