Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa
File:                     d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (raw, json)
Hash identifier:          kopdhNfkZFKJnFvK+8r7IuUIAbVCpgzgQ9KExx7zmr0=
Subject key identifier:   5B:F0:F5:45:92:0D:6C:1F:F6:C1:86:7B:23:51:5A:F4:7A:EB:D0:EC
Certificate issuer:       /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04
Certificate serial:       010D0C9F4328584E35FF1E6DE45C01BFB3921880
Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     32391
IP address blocks:        204.57.128.0/18 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1e:6d:e4:5c:01:bf:b3:92:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=442c4356-3c38-40ca-9612-72b0e7608517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:ce:d2:e9:77:84:89:5c:7b:0e:e0:20:29:
                    e1:e6:b8:90:75:7a:3f:cd:18:b2:32:f9:22:31:ef:
                    d3:17:3a:6f:fc:c8:cf:5c:fc:3a:14:6a:24:c4:54:
                    75:f9:49:33:78:48:aa:65:33:a6:ab:90:bd:d4:21:
                    0d:1c:b8:cd:3c:ad:a2:61:80:81:a3:77:66:ce:f4:
                    98:74:44:b4:60:57:44:f2:ae:da:0c:77:c1:29:37:
                    c5:10:4e:0b:a3:62:08:05:9f:30:9b:e5:63:fb:f1:
                    64:12:66:74:31:d3:5a:69:82:f5:14:5c:76:92:9d:
                    11:3b:00:c0:27:27:c7:81:43:6d:e2:78:4d:87:c6:
                    98:ec:b2:50:a5:70:72:4a:da:84:32:8d:8f:68:ab:
                    05:14:76:60:b4:7d:c0:db:11:be:01:08:40:f2:76:
                    24:39:b2:53:d2:9a:04:02:19:47:3d:eb:39:f1:20:
                    12:c9:90:dc:79:ee:b8:c9:27:db:23:7b:5d:c0:47:
                    60:35:16:a8:7b:09:e3:a0:d7:e1:6d:5b:dc:e7:19:
                    cc:6e:16:04:a6:b0:7d:e3:19:57:fc:45:a5:97:16:
                    98:d2:53:23:ca:6d:ed:7e:fc:a6:67:4a:f4:1b:78:
                    05:e6:a1:28:37:4f:07:cf:97:7b:dc:c8:95:a9:99:
                    2a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F0:F5:45:92:0D:6C:1F:F6:C1:86:7B:23:51:5A:F4:7A:EB:D0:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl

            X509v3 Authority Key Identifier:
                keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.57.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:64:49:c3:20:8e:4a:0a:49:d5:d5:7d:ea:47:ce:10:f2:b4:
         14:99:58:00:58:04:89:72:6e:95:f6:84:57:50:0e:a4:89:9d:
         04:be:4b:00:26:9c:f3:cf:45:48:3e:5c:18:95:a2:c2:c1:71:
         80:d7:7a:45:f5:9b:b9:62:6d:9a:db:d5:78:be:b0:31:2c:87:
         27:99:75:a5:7f:26:9c:e9:c6:8e:4e:6e:5f:f0:d8:02:2d:1b:
         d1:34:87:ee:53:6f:4d:51:e2:81:da:39:56:33:a7:a3:0a:d9:
         2d:ce:fd:09:a6:30:4b:b1:fa:7d:f4:1b:27:2a:87:43:5a:6f:
         b1:55:f4:5e:74:7a:16:c0:4a:fe:a3:32:9c:28:19:ab:2b:30:
         a5:92:90:f9:81:2d:c4:da:4a:85:dc:ca:ba:1a:65:24:39:d6:
         a0:52:b0:5e:66:39:eb:73:61:e0:25:3b:74:ac:57:fb:5b:69:
         c3:22:8b:f5:22:a7:97:f7:1c:30:df:d5:ab:dd:5e:7e:db:60:
         25:22:b2:2d:fa:03:cc:74:ff:8a:9e:af:d7:9d:aa:25:ec:8f:
         69:ab:4d:f0:a6:fd:aa:39:07:df:cc:c5:96:4e:9a:c9:9d:86:
         68:6f:cf:84:f9:1e:a8:02:61:05:0e:89:c0:ee:c0:06:66:a9:
         f5:d4:b6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 01:13:10 2026 by rpki-client