Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3cdcefac-d7b6-3e43-a669-8d7b66a7dfd9.roa
File:                     3cdcefac-d7b6-3e43-a669-8d7b66a7dfd9.roa (raw, json)
Hash identifier:          FTCu24DJ5H10AogKA6r9blil38YKo3JNJjSvRUAKXjM=
Subject key identifier:   18:C3:30:42:92:B6:76:1F:49:E0:30:16:1C:E8:6C:B3:6A:BA:26:3D
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E2809BEF09478CC61EF21BA00
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3cdcefac-d7b6-3e43-a669-8d7b66a7dfd9.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     12025
IP address blocks:        204.86.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:be:f0:94:78:cc:61:ef:21:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=fd0b26bd-cc14-4ca2-8fb4-4336e985c97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:39:22:8a:c4:e9:9e:88:f5:c8:19:45:3d:ea:
                    f9:bd:35:10:39:40:67:72:15:7d:5f:20:a6:8e:1f:
                    a3:80:5c:2b:c6:ab:17:fd:ac:1f:1b:c1:14:31:c4:
                    1f:c3:61:9e:93:c0:4d:b2:d0:71:6f:7c:46:26:bf:
                    51:01:ef:6c:f8:28:1b:8e:89:66:e4:93:a5:75:9e:
                    cd:17:ff:f8:69:91:da:14:1d:e5:1f:29:08:7f:cb:
                    f8:d9:96:47:ac:48:5a:6e:5f:9c:d0:d2:1f:42:3b:
                    a3:53:d0:70:5d:21:cf:61:c1:33:78:56:73:4f:9f:
                    db:b2:d4:ee:ce:a1:b4:dc:6f:2c:96:b7:7b:15:c4:
                    e8:da:1e:f3:78:c2:7f:e3:a7:cd:05:fc:37:aa:57:
                    4b:99:6b:21:8f:58:f7:31:7a:cc:4e:97:c1:8e:00:
                    af:c0:e2:9f:21:a7:42:11:dc:41:30:a4:b4:f3:01:
                    13:40:57:ab:70:6d:7c:d7:4f:1d:c4:bb:8a:30:8c:
                    3f:52:3f:03:d4:e3:e9:18:6f:8c:b5:d9:5b:65:30:
                    c8:ce:e9:6f:a0:d9:8b:c1:1c:fa:19:89:cb:40:f9:
                    6d:9f:ec:eb:bf:03:4c:0b:01:6e:f8:54:a6:95:af:
                    e9:2d:c4:ed:45:45:5a:51:38:65:06:5b:c5:ce:62:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C3:30:42:92:B6:76:1F:49:E0:30:16:1C:E8:6C:B3:6A:BA:26:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3cdcefac-d7b6-3e43-a669-8d7b66a7dfd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.86.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:96:8a:dc:9a:ad:d3:83:fc:38:a9:52:dc:c1:2f:98:fa:6a:
         1a:34:4c:d8:93:c7:97:bc:9b:6b:eb:b9:26:49:d7:73:04:f5:
         db:c7:fe:98:13:6d:cc:20:c3:0c:0c:bf:ee:61:36:e2:96:84:
         fc:f7:3b:e9:7e:b3:4d:cc:97:04:e8:a5:1f:21:14:15:3c:fe:
         dc:5e:e2:71:05:9d:d5:b1:92:00:5d:0f:d3:c0:9f:e9:00:dd:
         8c:74:2d:f4:66:b7:f4:5c:9d:eb:dc:b2:73:65:07:21:61:9f:
         90:e4:59:bd:10:0c:06:b8:0a:e6:2e:86:0e:2d:23:20:58:24:
         d3:0a:b7:15:d4:e7:0a:60:03:0c:1a:82:50:85:cf:1f:59:22:
         72:10:39:85:7f:ef:8f:62:72:74:c8:2d:72:f8:f1:05:e5:6f:
         a8:77:e6:bb:93:9e:65:c5:71:94:49:8b:85:fb:4d:ec:e7:3c:
         20:d4:2a:da:eb:f5:0f:07:fb:dc:54:a0:6a:29:ae:cd:9c:e1:
         fe:8d:00:8e:5f:50:e1:d6:50:b4:72:d3:36:ce:40:d8:3c:18:
         6a:64:50:04:ac:ce:61:19:af:4c:2f:0e:57:aa:7a:9f:ed:93:
         1a:cc:e5:51:af:6f:80:97:9a:0b:5c:7e:f0:7a:d9:71:36:83:
         99:80:a9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 23:29:06 2026 by rpki-client