Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/39647f57-674b-3051-89ee-29b2408dff59.roa
File:                     39647f57-674b-3051-89ee-29b2408dff59.roa (raw, json)
Hash identifier:          ztOVn+2r9L12WTdAfvoW8B68UovEUpaSiPtlaDD4RLE=
Subject key identifier:   B9:58:BA:6E:99:99:F1:63:B4:9F:8F:A9:FD:BD:05:08:07:DC:4F:9F
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E3A2F349798FEBF4D230B0000
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/39647f57-674b-3051-89ee-29b2408dff59.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     6312
IP address blocks:        216.106.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:34:97:98:fe:bf:4d:23:0b:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=2bba5c56-70fc-4b95-a50c-ee6f723a3251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3e:74:9a:1f:b8:8e:73:b3:69:c4:98:ec:19:
                    02:4f:1c:fb:85:e5:72:63:1d:b4:84:97:84:e5:66:
                    32:3d:8d:0d:d8:70:78:d2:02:c1:5c:5a:b1:d3:35:
                    b8:ba:d5:ad:af:cd:cb:f2:4f:95:7d:d6:e5:bb:3f:
                    3c:45:a5:65:0b:5a:9a:b0:c7:4a:23:c2:8f:11:23:
                    8e:02:22:84:5d:8f:32:d7:7d:7e:54:32:83:c4:1c:
                    38:61:30:89:e7:ca:bc:ed:4a:1e:8d:c6:ff:85:bd:
                    12:85:28:36:dd:42:d9:17:dc:c9:83:ba:61:46:45:
                    84:ba:2b:08:1f:c5:1e:99:c4:a7:02:36:9e:6b:79:
                    a4:5a:17:25:b3:3e:d3:df:ba:3e:f6:8e:5b:cd:5d:
                    f8:c3:9b:08:69:a4:d6:00:46:9c:1b:eb:f0:0e:65:
                    4d:75:c8:70:f0:82:0f:f3:8b:99:a2:ef:93:9a:8c:
                    c4:6b:55:73:a5:7a:8d:5d:7c:ac:5b:b8:83:aa:c3:
                    23:3d:54:6e:c1:11:16:5f:79:cd:b8:ca:00:d2:bb:
                    63:a0:2e:3a:64:ae:86:a1:ee:70:12:08:47:ed:68:
                    24:89:dd:75:52:9c:17:a7:4b:ef:cb:d5:d1:71:d5:
                    d1:02:50:7d:39:71:22:20:6f:08:1c:f0:2c:e1:43:
                    af:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:58:BA:6E:99:99:F1:63:B4:9F:8F:A9:FD:BD:05:08:07:DC:4F:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/39647f57-674b-3051-89ee-29b2408dff59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5f:9f:b5:93:f7:a8:27:a4:41:86:ae:af:a2:fa:e4:54:3d:
         98:e3:e0:2d:7a:be:ca:0d:f2:3e:94:c3:9d:3f:09:d1:5f:92:
         c9:e8:71:a6:b8:e5:2f:99:99:f2:9b:ba:ec:00:76:d9:9d:41:
         3e:12:5b:ce:b2:05:5c:c5:cd:b2:f4:8e:bf:11:d6:95:bd:fe:
         aa:61:c5:48:47:4e:60:fe:e5:60:60:5a:ed:94:ed:2a:97:c8:
         5e:19:dd:80:0c:2b:5c:b7:60:92:19:ca:5d:f3:15:be:a8:e9:
         de:80:02:21:a9:a1:39:be:7a:95:8e:e0:33:c5:f6:1f:b5:68:
         7b:f2:b1:d0:c5:fc:eb:27:94:f5:34:87:7a:3f:dd:eb:e2:f9:
         e8:1d:d1:1f:1a:3f:29:5f:98:02:ce:32:77:37:92:5f:a8:0c:
         b2:8f:e0:e4:4c:fb:09:56:82:94:1e:ca:05:03:99:4b:aa:71:
         d3:f8:80:ed:ab:a2:96:fc:8b:7f:52:3a:5b:74:99:2c:36:9f:
         ea:be:69:66:3e:4e:0b:44:21:a5:62:de:c2:94:48:76:ad:a8:
         88:67:02:1b:5a:a6:b1:f6:07:ff:37:0a:bb:18:bd:bc:91:fe:
         54:4b:7e:c1:47:f8:b2:c8:bc:b2:bb:72:00:c9:09:a9:59:ef:
         5a:dd:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:15 2026 by rpki-client