Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/8e6918c4-1c91-315f-8d61-3e2b1841aa7f.roa
File:                     8e6918c4-1c91-315f-8d61-3e2b1841aa7f.roa (raw, json)
Hash identifier:          J2Z32r1gKeuynHqoVBf8CLz8D/wqylQC097f7efk9Sg=
Subject key identifier:   80:F2:98:8B:B2:36:9D:EC:A8:39:46:B4:10:CB:A3:4D:DC:F3:1D:69
Certificate issuer:       /CN=6de2cf1a-17f5-41d7-8356-6e88905671e0
Certificate serial:       010D0C9F4328584DF4B7EF31E11CB959451E7780
Authority key identifier: CE:33:74:CA:DC:4D:AC:93:BA:3D:80:D3:75:C9:7F:11:FF:AD:B5:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/8e6918c4-1c91-315f-8d61-3e2b1841aa7f.roa
Signing time:             Mon 25 May 2026 23:49:25 +0000
ROA not before:           Mon 25 May 2026 23:49:25 +0000
ROA not after:            Sun 23 Aug 2026 23:49:25 +0000
asID:                     399955
IP address blocks:        199.30.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/6de2cf1a-17f5-41d7-8356-6e88905671e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/6de2cf1a-17f5-41d7-8356-6e88905671e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:b7:ef:31:e1:1c:b9:59:45:1e:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de2cf1a-17f5-41d7-8356-6e88905671e0
        Validity
            Not Before: May 25 23:49:25 2026 GMT
            Not After : Aug 23 23:49:25 2026 GMT
        Subject: CN=1af9a6c0-7c10-4dc1-a072-68403081802e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:36:22:58:73:0d:32:2b:79:3f:23:01:90:
                    f1:70:67:79:c4:17:a9:6b:68:2e:1a:17:0c:53:50:
                    1b:77:5e:c5:f8:76:c5:63:66:d7:2f:1c:a6:23:bf:
                    47:43:fb:6d:00:57:f0:b7:89:b0:4b:2b:b2:81:72:
                    47:2b:6b:b2:0b:2b:1f:e2:59:b7:07:fc:b5:b5:47:
                    98:38:55:15:db:d2:0d:bd:a6:48:af:9a:85:27:53:
                    d8:8f:7f:42:f8:3d:47:0e:22:5f:a0:58:40:11:81:
                    19:a9:65:69:cd:f7:34:5b:d3:06:c8:a2:1a:bd:2f:
                    60:e9:16:d6:51:dd:61:f7:05:77:80:24:98:cc:d7:
                    5b:56:ef:39:5d:3f:21:bf:a0:ae:3c:5b:70:97:d6:
                    d4:18:00:94:7c:fa:3a:1b:2e:9e:44:df:8a:89:45:
                    8d:4e:cd:43:9a:42:05:52:d7:8b:e4:8d:da:59:49:
                    42:02:20:d8:f6:b9:ab:38:fa:18:e4:e8:6c:ad:42:
                    c7:6c:72:17:3a:c5:d9:e9:03:6c:2d:0b:bb:83:9f:
                    73:bc:92:49:e1:45:d9:d9:61:2f:a6:27:88:a2:d8:
                    69:01:58:01:06:04:4e:5e:fd:b4:a9:08:11:be:08:
                    af:76:ea:1c:80:d2:27:5d:a6:d8:26:7b:53:35:37:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F2:98:8B:B2:36:9D:EC:A8:39:46:B4:10:CB:A3:4D:DC:F3:1D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/8e6918c4-1c91-315f-8d61-3e2b1841aa7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/6de2cf1a-17f5-41d7-8356-6e88905671e0.crl

            X509v3 Authority Key Identifier:
                keyid:CE:33:74:CA:DC:4D:AC:93:BA:3D:80:D3:75:C9:7F:11:FF:AD:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:3c:8d:b3:24:93:c3:4b:16:2a:1a:7c:31:60:9b:14:9a:77:
         32:10:e3:52:94:34:21:ed:32:f8:dd:65:7e:99:1f:53:41:fc:
         f8:80:e2:20:d3:52:a4:84:ce:0d:06:a8:cd:22:fd:1c:c8:b1:
         26:18:31:6f:68:1b:32:68:8f:bd:b0:93:74:3b:4f:f9:46:29:
         46:10:a5:84:65:60:1d:fe:1f:77:c0:a2:76:66:d3:03:15:3c:
         8b:af:e9:ff:98:42:dc:84:09:54:64:38:01:d5:b1:e1:5a:88:
         1e:2d:be:57:ca:f6:cc:15:75:04:df:11:66:37:d9:55:42:23:
         d6:9f:42:64:b3:a8:8c:03:97:5d:20:18:34:46:5d:04:44:2c:
         42:b7:69:46:73:d3:53:c4:5e:dc:03:1a:ab:81:46:5e:32:49:
         a4:c7:86:a8:22:31:40:86:f7:95:d8:1b:60:eb:a4:31:ca:eb:
         6b:e5:24:02:6b:8d:79:fd:5f:95:b9:0c:7c:ec:4f:d7:c6:33:
         52:d2:82:2c:ce:f7:b6:19:6f:3c:ee:66:9a:52:f6:dc:23:7e:
         2d:50:d8:91:5c:2d:c7:ed:3a:00:c5:86:95:46:01:a7:a6:8c:
         27:ff:f6:90:93:24:4e:70:53:e1:ea:f9:82:3e:4d:72:e8:d1:
         46:41:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:57:09 2026 by rpki-client