Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/574f9159-a2bd-35d6-8b7f-bc7d5c68bab4.roa
File:                     574f9159-a2bd-35d6-8b7f-bc7d5c68bab4.roa (raw, json)
Hash identifier:          /wnFUqaiBRoaYQH4aJGdKyvXfQUCu8I3SHn6aMfUOzs=
Subject key identifier:   C7:EE:88:30:6F:49:CC:1D:78:CC:C6:F6:E2:ED:6B:37:73:AD:00:96
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DEB15FEEE480F105DF4FA2600
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/574f9159-a2bd-35d6-8b7f-bc7d5c68bab4.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     6079
IP address blocks:        207.145.16.0/20 maxlen: 24
                          207.145.112.0/20 maxlen: 24
                          207.145.128.0/20 maxlen: 24
                          207.145.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:fe:ee:48:0f:10:5d:f4:fa:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=fed2f3c6-3a6d-4a3a-9351-48d348fece0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:dd:e6:a1:1a:fe:b0:c5:34:66:a0:0d:31:
                    cc:56:55:08:06:97:ec:1b:fc:99:81:f0:dd:c1:1b:
                    16:cb:77:80:8a:41:b9:83:4f:d0:cb:2c:98:95:4f:
                    88:75:cf:b5:c8:dd:44:fc:97:69:c4:d3:d6:6e:a9:
                    38:7a:6d:8f:c5:0c:e1:f8:3f:41:e6:c6:0c:ce:04:
                    96:27:7e:c8:d5:ab:b3:3d:50:6a:42:9a:00:ce:a2:
                    7b:7d:cb:18:f5:55:ff:60:2f:b6:86:8b:99:dc:b7:
                    8a:8d:b2:04:22:b6:58:6b:81:0a:e1:90:59:84:4d:
                    e0:c5:fe:6b:90:b8:fe:54:01:6b:9a:50:56:6e:3b:
                    91:f5:df:e2:83:35:e4:c0:18:8c:b2:52:ec:06:7d:
                    76:a5:1c:d5:b5:7b:6b:42:91:4f:88:ee:63:4f:fd:
                    a7:cc:2e:fd:78:b3:28:d7:c6:3c:80:06:2d:88:50:
                    f2:30:3a:51:e1:7a:7f:78:9b:3c:83:2b:fa:0a:1d:
                    f1:35:e7:f9:0f:a6:35:df:cd:c1:ee:eb:5e:10:b9:
                    59:e3:52:d5:7e:f6:11:b8:78:2c:0a:3d:9e:ac:01:
                    56:ed:37:fe:21:83:a1:7e:12:94:4f:fe:75:53:6c:
                    03:60:25:5f:8b:1d:27:5c:45:62:f7:72:3f:d3:a6:
                    bc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EE:88:30:6F:49:CC:1D:78:CC:C6:F6:E2:ED:6B:37:73:AD:00:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/574f9159-a2bd-35d6-8b7f-bc7d5c68bab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.145.16.0/20
                  207.145.112.0-207.145.143.255
                  207.145.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bd:d1:5b:36:de:67:7c:4d:d6:db:19:77:5d:1e:ee:e4:1a:
         3c:38:5b:34:34:9d:33:87:a3:6a:b7:c3:8c:8d:7a:6c:89:de:
         6f:d2:ce:7b:74:6c:88:4b:f8:6f:54:f3:8c:12:02:37:e1:59:
         43:5c:46:24:f7:82:be:8d:a2:f8:fd:88:ac:2b:97:32:19:05:
         75:40:15:d7:b7:9e:2a:23:a2:62:6e:45:48:df:85:88:29:6f:
         4f:4c:e9:ec:67:72:41:d1:21:7d:98:d3:55:2e:52:02:9f:3e:
         3f:ec:fe:f5:18:5f:cb:2b:96:30:ab:90:a6:52:47:a4:51:1e:
         17:31:a5:79:46:46:32:3e:bb:c9:52:58:8c:b0:93:71:d5:38:
         63:3f:a1:e6:2e:8b:ad:b0:cf:a2:5d:13:de:b2:60:92:50:24:
         ba:69:d8:22:86:e3:31:c3:dc:70:e6:35:f1:64:17:03:21:ff:
         89:57:5d:7e:82:be:47:44:1c:99:c2:30:dd:93:8c:1b:8a:05:
         54:fd:be:0e:fa:8f:96:90:17:f9:7e:9d:b3:bc:55:0f:9c:a2:
         eb:a1:e9:09:fb:12:89:ed:f8:6b:6b:a8:63:d4:da:4b:94:d2:
         40:dd:1e:f8:b4:ce:a1:6d:86:51:36:42:ea:d7:16:8e:89:73:
         8a:78:8e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:10:49 2026 by rpki-client