Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/5364c7d8-d88a-387a-887a-c1f60e3aec56.roa
File:                     5364c7d8-d88a-387a-887a-c1f60e3aec56.roa (raw, json)
Hash identifier:          TOdkmf+o9q7LCjUjaxjOUiEJcX1yRVVkv+Ud8Omjzzg=
Subject key identifier:   32:0F:8B:34:65:11:52:34:81:EA:66:DE:F6:96:B8:52:F2:56:F9:41
Certificate issuer:       /CN=ea97c31c-83d2-4e24-a4f4-9d69b3ffa183
Certificate serial:       010D0C9F4328584E3E5F3179AE86A9EB684B7D40
Authority key identifier: 1F:79:08:FC:0E:CC:B5:0D:93:FF:2B:78:65:57:D1:06:B6:2E:85:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/5364c7d8-d88a-387a-887a-c1f60e3aec56.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     19184
IP address blocks:        137.28.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:31:79:ae:86:a9:eb:68:4b:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea97c31c-83d2-4e24-a4f4-9d69b3ffa183
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=166fa1b0-7625-4dc7-8841-3a820ecf621f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9f:76:1a:82:31:b9:62:13:62:c3:2f:06:0a:
                    b8:2c:e8:09:b2:e1:d3:6f:43:ba:8b:99:d0:74:e1:
                    a8:b3:f6:03:d0:b4:01:62:63:13:66:61:c0:1d:75:
                    4e:c2:18:23:c3:69:63:74:e4:8d:97:72:b9:22:e0:
                    59:d2:4f:3b:8f:d6:f8:76:54:e1:db:67:8e:cd:0d:
                    1e:f4:f4:e7:67:40:d2:f5:11:6d:00:d8:be:67:c7:
                    9d:09:cf:de:5a:23:b5:08:f4:2f:b7:8e:ff:43:bb:
                    f5:dd:f1:2d:72:33:36:e0:38:b7:71:44:85:5b:7d:
                    92:ce:ba:c1:11:84:0a:2b:41:30:c7:18:dc:9d:ed:
                    87:b5:4d:7e:8f:f4:f3:66:f0:b7:45:4f:ec:5c:c9:
                    57:9b:58:65:ac:2b:d2:01:dd:e7:68:27:7b:3d:c1:
                    73:1f:fe:44:30:90:2b:d7:11:bd:2a:be:14:40:3e:
                    80:30:52:fc:5d:38:2b:0b:50:83:0d:0f:78:5f:96:
                    0e:1a:3a:9e:95:a1:6b:76:31:8c:e8:54:cf:5f:e4:
                    c9:0d:1f:7b:69:d6:71:6f:b4:c0:02:a0:73:c6:39:
                    a9:45:f6:7d:a0:21:83:f9:fb:c4:43:37:41:7e:d1:
                    ce:11:34:f7:77:df:32:52:7d:ed:ca:59:3c:af:f5:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0F:8B:34:65:11:52:34:81:EA:66:DE:F6:96:B8:52:F2:56:F9:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/5364c7d8-d88a-387a-887a-c1f60e3aec56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.crl

            X509v3 Authority Key Identifier:
                keyid:1F:79:08:FC:0E:CC:B5:0D:93:FF:2B:78:65:57:D1:06:B6:2E:85:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d3:af:2a:25:43:83:df:40:d1:c8:13:73:68:68:3f:2b:11:
         d9:1e:c9:67:ee:31:1c:6e:fb:00:8b:07:65:57:36:29:ca:ee:
         b6:f4:f5:75:7f:90:a1:07:fb:74:13:65:bf:da:81:55:cb:4a:
         ee:e4:5c:a1:ba:65:e8:f5:97:1f:72:97:1f:fc:03:a6:5e:9a:
         1a:b0:85:18:a2:bf:23:12:4c:c9:6c:cc:8e:4d:b9:1e:34:3e:
         56:7c:30:b0:86:8e:85:5c:c1:19:ed:88:25:2a:0d:3d:cf:a5:
         3f:57:9c:c3:d9:93:21:e0:30:c4:40:04:11:3d:58:b3:76:f6:
         7f:55:55:bd:9a:c1:6c:e9:4e:13:da:1b:df:98:68:36:40:ba:
         2f:11:61:d7:3e:6a:a5:9c:a0:81:65:8b:61:54:f4:3c:65:8f:
         8b:d2:37:91:c6:43:25:c7:f1:f3:77:0d:d2:3a:a0:38:9a:7f:
         fc:a6:6d:ce:a7:db:2c:cc:a1:a3:c8:e5:02:22:c6:e3:f3:16:
         0a:87:68:79:81:1b:1e:7b:50:cf:53:a2:30:49:d0:5b:78:9b:
         9d:9f:ec:7e:2a:fc:1a:43:42:f1:d0:60:75:33:7a:22:99:1d:
         fe:b5:02:a5:cc:ff:fa:19:aa:e9:1e:3e:63:71:ca:04:b5:54:
         c4:f9:21:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 05:41:00 2026 by rpki-client