Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/a9240f31-54b4-373e-9a62-3ebd7223baae.roa
File:                     a9240f31-54b4-373e-9a62-3ebd7223baae.roa (raw, json)
Hash identifier:          QqKOUQNpld16xuu/EOcvr4MrQ81zv05InxQFKyPHOG4=
Subject key identifier:   76:CA:8C:09:95:0E:46:33:77:0F:D0:66:56:84:4A:45:24:0D:5F:F3
Certificate issuer:       /CN=9997fd34-06bd-4758-a8a8-358043eb8cfd
Certificate serial:       010D0C9F4328584E360177FBD0B8AF0B9A838E00
Authority key identifier: 5C:A6:4A:51:2E:14:13:0A:BB:00:66:BC:21:A0:A3:83:B7:FC:EA:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/a9240f31-54b4-373e-9a62-3ebd7223baae.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     54606
IP address blocks:        132.212.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:77:fb:d0:b8:af:0b:9a:83:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9997fd34-06bd-4758-a8a8-358043eb8cfd
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=46a66182-bb57-48c3-934a-ace7be9efb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:b8:39:2c:dd:ce:ff:4d:6e:36:b8:5e:fa:
                    0f:63:5c:d2:26:18:85:36:57:43:5d:ac:c6:01:f5:
                    f5:36:00:5a:1c:75:05:64:97:32:aa:7d:9b:ca:84:
                    27:67:51:cc:37:75:c6:a7:87:97:1b:cf:5c:44:6b:
                    e4:86:06:aa:5f:81:59:00:37:6b:cc:37:cb:53:19:
                    63:4c:7b:d6:22:d6:35:76:0f:cc:b1:10:7b:12:75:
                    c6:9b:96:a1:10:ea:3b:68:ce:6b:d9:e9:52:5e:52:
                    55:41:f8:1a:93:45:8b:83:11:69:28:60:de:6f:3a:
                    82:2e:79:6a:85:0d:6d:78:22:4f:12:83:af:cf:c4:
                    dd:95:de:9d:1c:cf:6f:90:da:49:f8:9a:31:8a:13:
                    8f:e2:a8:6e:e8:69:ad:af:62:e3:6d:7f:4d:9c:a4:
                    cb:e5:a4:68:b5:ea:d8:41:f8:fb:e2:31:32:57:09:
                    56:64:81:61:12:48:24:20:4d:2a:db:e0:cd:a8:52:
                    e6:e5:47:64:fc:a8:7d:c5:ed:ad:cd:94:35:98:1e:
                    40:86:32:e2:84:2f:c4:e9:96:f3:cd:4a:15:d3:2b:
                    24:0e:06:16:e3:7a:59:c3:be:f1:d9:2b:3e:e0:fb:
                    99:cf:bc:9f:23:1d:2f:a3:aa:8a:d8:d2:c4:44:6a:
                    6f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CA:8C:09:95:0E:46:33:77:0F:D0:66:56:84:4A:45:24:0D:5F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/a9240f31-54b4-373e-9a62-3ebd7223baae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.crl

            X509v3 Authority Key Identifier:
                keyid:5C:A6:4A:51:2E:14:13:0A:BB:00:66:BC:21:A0:A3:83:B7:FC:EA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f9:33:f8:95:9d:f9:1a:64:55:10:84:e7:2c:4c:52:d0:12:
         f7:80:37:ec:fd:d1:0b:2f:ce:ab:f5:9a:3f:58:45:c2:41:1b:
         cf:9a:77:50:99:55:55:e5:77:a4:96:98:e7:67:77:ce:00:27:
         61:40:1c:9e:d7:b0:7b:07:20:78:5e:4f:e2:90:0d:b5:dd:ae:
         53:b8:6e:3a:d2:9d:55:27:1b:10:4c:8f:46:9b:e6:bd:0c:53:
         c9:28:77:4c:6a:db:7e:ad:84:e9:1e:90:36:35:1e:0f:68:1e:
         c7:ea:54:c5:c7:e9:65:2d:a6:5d:c7:e7:bc:97:7c:34:c5:21:
         5c:82:fc:e0:cf:30:6b:73:67:c3:da:b0:4a:fc:b2:79:72:bc:
         82:69:43:4d:84:37:23:18:91:1d:99:19:2a:30:6a:e3:0a:2f:
         b9:17:df:75:29:2a:e7:ae:3e:ca:4d:ff:41:77:42:e6:df:c8:
         e9:ad:e3:da:ec:8b:08:6e:31:f6:75:40:08:91:ca:20:5e:3a:
         69:b1:92:dd:be:bd:b9:1d:87:7c:ba:33:7d:ef:0b:52:21:2e:
         3a:eb:a4:48:cc:d1:71:8b:97:83:2a:36:4f:80:53:5f:b0:d4:
         c0:c6:04:a0:86:27:08:95:23:3b:74:93:13:42:07:9f:92:26:
         28:da:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 01:15:34 2026 by rpki-client