Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/6b06a5a7-85b6-3366-91d2-8bfd534ba41a.roa
File:                     6b06a5a7-85b6-3366-91d2-8bfd534ba41a.roa (raw, json)
Hash identifier:          bSkqMNml7mWLKr4LJ0sLgBKR7pc6t7FS3KVn+JJV1Ug=
Subject key identifier:   35:6A:1E:31:89:CF:97:7A:CE:3B:22:54:1D:DB:78:BC:13:26:30:C4
Certificate issuer:       /CN=b514c912-bbf6-47b8-8e4e-a80d0cb98a3e
Certificate serial:       010D0C9F4328584D60E50856DEC47F9EFB457000
Authority key identifier: 0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/6b06a5a7-85b6-3366-91d2-8bfd534ba41a.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     1074
IP address blocks:        141.195.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:08:56:de:c4:7f:9e:fb:45:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b514c912-bbf6-47b8-8e4e-a80d0cb98a3e
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=3ee24016-2ca0-4137-83c4-b986ce969496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a2:dd:eb:84:60:4d:3d:68:90:23:53:53:00:
                    d7:e7:c8:51:c9:59:7c:68:a2:38:fc:ea:d8:5d:05:
                    ee:7a:17:20:0d:3a:b4:2e:b8:a1:8a:e7:f0:2b:7f:
                    7b:e2:d1:9f:1a:70:b4:9a:6d:0a:b8:91:ff:bb:89:
                    0b:24:f5:42:e4:a6:fd:e2:5b:4b:6b:43:bc:d5:83:
                    38:94:d1:c7:ac:48:76:ae:a4:7a:40:15:85:7e:5d:
                    03:3d:de:ab:56:27:0f:79:33:77:e2:6d:eb:3d:c6:
                    02:6c:f9:e2:aa:77:75:03:0d:ef:58:f4:75:74:66:
                    2d:07:a9:48:0a:04:6a:ba:29:94:b0:04:23:d4:fa:
                    96:9d:72:9c:aa:93:29:e3:ba:41:8a:c4:c0:05:f1:
                    2b:36:6a:2e:fd:45:4a:ca:f8:11:06:fd:39:b1:4a:
                    f4:08:87:1e:88:67:41:99:2f:01:83:5e:8d:4e:e5:
                    b1:b6:db:1c:cc:23:70:5b:ae:f9:ba:da:5c:93:29:
                    06:d9:92:6d:7b:e1:56:45:9f:e0:e5:f8:bb:f5:da:
                    35:98:b4:b5:4d:d3:9d:f2:21:44:b1:07:6f:f8:56:
                    ae:cf:ee:d7:96:39:9b:84:6e:50:2d:0f:43:de:68:
                    f9:c3:d6:c9:5b:13:75:33:17:ba:6e:1f:6d:72:6b:
                    a7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6A:1E:31:89:CF:97:7A:CE:3B:22:54:1D:DB:78:BC:13:26:30:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/6b06a5a7-85b6-3366-91d2-8bfd534ba41a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.crl

            X509v3 Authority Key Identifier:
                keyid:0C:15:04:7B:B1:EF:02:B7:18:43:DD:46:2A:45:A7:DD:A3:0D:8E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b514c912-bbf6-47b8-8e4e-a80d0cb98a3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:05:2d:b4:09:21:c8:ac:3a:2a:f6:fd:40:d1:4b:ed:1d:
         e8:94:2d:ac:2c:fa:f0:a2:73:8e:10:6a:fc:10:f8:e6:b4:c9:
         8b:a2:bd:18:92:7f:ad:e9:7a:a8:ef:69:fd:87:ad:fd:9e:4e:
         94:5c:8a:82:90:9a:54:dd:91:78:ac:5c:1c:c6:25:48:71:7a:
         5b:a2:be:24:17:36:3b:db:28:56:df:dc:ae:7b:58:88:47:5a:
         43:c4:07:7b:ec:70:96:19:f0:f8:f2:65:6a:43:30:55:48:79:
         fb:f8:1e:03:93:55:c1:04:0f:f3:e2:b3:59:96:7b:35:52:54:
         61:f1:53:5b:4b:e1:96:c4:d2:34:f0:fd:e4:fd:32:fd:82:58:
         53:81:2e:48:13:bc:06:98:8a:d5:34:e8:a5:bb:f6:43:0b:7f:
         3e:88:be:c9:b7:09:0a:e4:28:be:92:5e:5f:38:27:47:bf:b3:
         11:62:3e:43:aa:12:19:3b:ce:be:72:8c:d8:2e:66:33:64:47:
         61:b0:70:b8:9e:5b:9d:7d:97:26:ee:38:b4:23:03:bd:cd:f5:
         23:fe:76:11:88:9e:ba:37:48:22:c2:0d:9a:c7:13:11:a0:6c:
         7d:4b:9a:a6:58:cf:aa:ce:c7:69:ba:4f:35:28:3f:26:16:a8:
         cd:78:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:27:36 2026 by rpki-client