Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/0421951d-b4a7-3a9f-9a3c-2378e875e6e9.roa
File:                     0421951d-b4a7-3a9f-9a3c-2378e875e6e9.roa (raw, json)
Hash identifier:          MTmXFQKaEO2PUYFTFZPqZ3I6xA36BaAibjHAp2AqWrA=
Subject key identifier:   2F:FD:E0:40:69:D3:D2:A0:45:FB:9F:0B:A2:14:31:AC:14:96:89:49
Certificate issuer:       /CN=4a1bda30-5045-4ded-bf47-7fd03a594092
Certificate serial:       010D0C9F4328584DFA707E91576C16DC2A06ECB0
Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/0421951d-b4a7-3a9f-9a3c-2378e875e6e9.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     174
IP address blocks:        209.166.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:7e:91:57:6c:16:dc:2a:06:ec:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=6e7bb09a-aef8-4f0a-b31d-d07b26dbb4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8f:2b:cf:99:e1:d7:1c:75:40:c9:3a:f5:f2:
                    f5:87:b3:7b:45:a9:23:0f:12:42:b4:35:49:40:c2:
                    43:08:21:e9:d2:cb:e2:e2:27:2a:23:b7:ba:67:2a:
                    c9:9d:c1:7d:d3:82:8f:cf:01:42:66:74:37:c1:95:
                    90:49:b5:77:29:26:a1:19:0b:52:17:00:28:fa:c0:
                    ac:a9:b2:e6:61:1d:bd:3c:56:94:85:f1:98:95:f6:
                    1b:90:a6:3f:3a:b4:24:1e:64:e9:74:70:3b:83:e7:
                    8a:24:c3:6e:2e:52:61:09:7a:05:9d:7a:79:be:22:
                    d0:5d:cb:c7:0c:eb:10:5a:76:3b:ff:68:aa:8c:85:
                    42:00:c4:2a:34:77:12:39:a7:96:cd:3e:37:eb:67:
                    1a:4f:5c:22:9e:be:0c:5b:a6:19:5d:41:e1:87:16:
                    65:a4:dd:37:9d:9b:98:56:d9:e6:18:8c:35:07:d6:
                    65:7b:4f:4b:d9:ef:7d:b2:70:47:74:58:96:03:6e:
                    f6:b2:b1:ef:c4:bd:f6:80:16:40:42:fa:72:3c:8b:
                    b0:6c:3b:31:a8:01:84:3b:73:a8:99:8f:b4:5c:e9:
                    16:d7:42:e9:9e:a2:01:1b:50:95:ca:e2:21:7b:6b:
                    29:05:88:c1:f4:3d:e2:f8:d5:91:d6:15:65:c8:4f:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FD:E0:40:69:D3:D2:A0:45:FB:9F:0B:A2:14:31:AC:14:96:89:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/0421951d-b4a7-3a9f-9a3c-2378e875e6e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl

            X509v3 Authority Key Identifier:
                keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.166.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:17:91:b8:cd:66:9f:2e:a6:cc:49:7c:56:9e:26:d9:fb:
         e2:ea:5a:71:ef:a9:f5:06:f8:dc:8c:20:67:9f:0a:3e:57:68:
         80:67:f6:a6:18:4b:22:de:12:db:7c:f4:78:8d:39:67:1c:11:
         d3:d8:f0:5c:25:d8:99:d0:db:37:a0:57:2d:e1:81:2f:b3:bd:
         07:8a:e9:1b:03:22:58:d3:15:83:b2:48:c4:e9:d9:de:a0:61:
         d0:07:b4:6b:99:08:a7:53:e6:76:ea:67:28:2d:a4:ae:90:4f:
         14:e3:87:12:89:9b:eb:79:c0:f6:b0:87:2e:f9:30:8a:59:b4:
         c0:b3:63:2a:fe:d0:76:3e:8b:4e:83:55:ea:e4:b7:c9:9d:5a:
         47:0e:6a:e9:25:91:11:18:2d:9b:99:e0:90:a5:1f:d3:13:9b:
         7d:08:48:32:c5:cc:f8:75:32:cf:19:28:06:57:d6:ef:11:99:
         1e:8f:5d:42:62:89:ea:3e:92:fc:9d:79:64:88:d9:8b:c5:80:
         d0:8f:a6:ab:23:f7:aa:b1:3b:9e:0d:92:9a:72:78:3d:d9:ed:
         46:14:c7:d5:ad:3b:0e:50:ec:1e:3e:f8:ea:87:81:11:13:69:
         bb:b1:e0:86:4a:b1:fd:9c:2a:24:07:f0:bc:a3:e8:69:eb:d5:
         3d:57:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:07:23 2026 by rpki-client