Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa
File:                     ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa (raw, json)
Hash identifier:          JeQducJy8XwxHZ2TaH7Pnye/czZF0Mgx31x3E9E1WAg=
Subject key identifier:   1D:B2:DD:8F:14:59:17:D9:41:D1:A3:39:4E:C4:0D:8C:41:7F:53:3F
Certificate issuer:       /CN=e2135eb7-dbed-4351-942d-90483acb1b22
Certificate serial:       010D0C9F4328584E51E9E7BF9856230629FE4E00
Authority key identifier: 2F:4E:F1:A1:A1:22:CC:D4:F6:68:2F:88:E4:78:E3:AE:CF:1D:AB:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     174
IP address blocks:        208.64.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e7:bf:98:56:23:06:29:fe:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2135eb7-dbed-4351-942d-90483acb1b22
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=ad68046a-c17e-43dc-abd9-ad7d3e4b9d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:ec:7b:71:00:7b:ea:4c:01:4b:cb:7e:b5:
                    b5:c6:68:7a:a2:c8:c4:12:20:2f:56:2b:b5:7b:40:
                    0c:0a:ad:42:62:80:a1:82:8a:f3:a6:14:a2:e2:a7:
                    53:29:7a:8c:6f:3c:d2:08:fa:87:9d:b1:a0:6f:d6:
                    70:bd:26:1a:34:33:8f:1b:a8:b7:52:e6:10:30:cf:
                    40:2b:ec:43:a8:11:bd:c5:ee:41:8f:0c:60:ec:a7:
                    9f:4e:4b:ce:61:6a:51:91:be:db:04:19:3c:e3:44:
                    96:28:e5:1e:95:a6:9a:8a:41:51:15:62:61:d8:1d:
                    6c:f8:73:c4:62:24:92:b0:85:27:8c:dc:35:dc:7f:
                    90:23:69:b5:ab:41:52:1b:fe:37:dc:4a:b7:8c:8e:
                    21:df:e9:9a:3c:19:f3:47:6f:61:20:7b:46:9c:a7:
                    3b:74:a6:11:3d:56:a2:6e:a7:40:36:3a:4d:19:cf:
                    e3:6b:4d:8e:ce:1e:6c:0d:16:f2:0f:81:25:a8:ea:
                    c6:7f:b9:6a:36:ac:4b:9d:ef:dd:ad:8d:22:a1:88:
                    4a:66:2c:27:0a:9b:0d:37:ec:9e:fc:82:3b:a2:23:
                    6e:55:89:e5:44:d1:d2:94:fd:e1:4c:8d:56:d9:21:
                    49:77:b0:76:13:50:fe:82:43:5a:d0:82:56:16:49:
                    28:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B2:DD:8F:14:59:17:D9:41:D1:A3:39:4E:C4:0D:8C:41:7F:53:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.crl

            X509v3 Authority Key Identifier:
                keyid:2F:4E:F1:A1:A1:22:CC:D4:F6:68:2F:88:E4:78:E3:AE:CF:1D:AB:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a9:96:8a:5e:6d:80:2a:52:a4:37:50:80:d8:d1:ab:18:7a:
         4e:11:70:6e:41:a0:6f:ed:d2:a1:c8:18:03:1a:dd:50:6a:d8:
         f6:a3:98:1e:59:07:df:34:19:a3:c6:ac:f7:c9:5a:f1:33:cf:
         9d:1b:8e:c5:d5:c4:2f:ec:db:3f:8d:51:5e:48:b4:86:3c:1d:
         ca:ab:47:28:d8:c1:f6:60:9b:a8:89:92:06:de:7d:b6:9e:55:
         79:93:e3:ce:8d:ff:cb:d1:29:a1:0b:d9:d8:54:ef:76:fa:d2:
         f3:93:66:2f:26:d5:5e:63:5b:76:08:61:75:31:b7:80:4d:1b:
         8e:46:da:43:f5:37:a9:6f:15:31:10:bd:81:c5:68:07:ff:5b:
         34:b7:70:8c:ba:dc:9f:16:c4:09:28:73:87:05:da:0e:d1:04:
         21:86:7d:72:90:0e:03:d4:fc:e6:57:cc:01:f2:37:16:1c:22:
         66:ef:d4:14:82:24:44:c7:63:36:e9:46:e8:9c:37:24:63:7e:
         66:c8:6f:9f:2e:ae:6b:12:a9:a5:e8:3a:e3:14:ff:a8:a4:04:
         be:51:d7:95:03:73:83:08:68:27:05:0e:7e:c4:c0:9b:3d:fc:
         2c:db:bf:3a:c4:a8:e9:b7:cf:e3:77:2a:12:ed:4a:d7:52:e1:
         32:ae:0e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 10:19:06 2026 by rpki-client