Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87c612ef-b957-323e-a378-35bff79a6e24.roa
File:                     87c612ef-b957-323e-a378-35bff79a6e24.roa (raw, json)
Hash identifier:          wzAMuYAXo761Q3rR31c+uRHXeMdOq3TdXL/uSxz3eQg=
Subject key identifier:   B2:D4:CC:83:5F:B0:93:33:1C:D4:C5:DA:17:2E:C7:C8:9E:AB:CE:6A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DDE85BE072C8ADA82913BFA20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87c612ef-b957-323e-a378-35bff79a6e24.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     63949
IP address blocks:        170.187.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:be:07:2c:8a:da:82:91:3b:fa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=7ab2664c-b077-434a-8dfd-1896ac1ee70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f9:cf:77:fe:c6:84:e7:32:ca:55:0f:c7:4b:
                    6a:87:84:7c:66:95:8f:d2:c1:56:f7:9e:c9:ce:60:
                    2f:e8:1a:59:fe:17:a4:da:d7:c1:ac:dc:2c:7d:0e:
                    03:4d:d4:83:c7:7b:c9:8b:e3:bc:de:7c:58:58:38:
                    34:d9:93:c7:60:e8:4b:8d:90:bf:cb:94:3c:dd:69:
                    e6:93:7b:2a:db:a7:f6:6d:ae:96:bf:3e:88:c6:3c:
                    9d:0b:47:5b:75:87:70:e2:7b:9a:b3:4f:1e:cf:d4:
                    aa:dc:bd:57:a4:26:de:f0:b2:fd:27:e5:7c:03:74:
                    55:79:74:2b:0c:23:dc:f6:92:df:82:d9:fa:a2:df:
                    22:51:c1:8d:f2:e8:88:f5:36:9b:f4:83:3c:70:bf:
                    b3:e6:8e:3d:9e:2e:b5:7f:b8:b2:af:ef:99:3a:8e:
                    5b:f9:8c:fe:eb:1f:b8:cf:32:4c:4a:2b:98:7a:9b:
                    c3:dc:da:5d:a0:37:da:63:94:67:a0:89:94:31:45:
                    82:67:76:ca:0c:b8:2f:c0:7a:b7:07:6b:d4:6c:80:
                    56:11:92:cf:84:f8:d7:6d:16:5c:ff:8d:41:ac:c6:
                    41:1c:af:b6:a0:4b:17:05:38:08:31:03:cc:59:87:
                    5b:1c:1b:2a:77:0c:e0:63:08:44:fc:ab:4d:45:7b:
                    61:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D4:CC:83:5F:B0:93:33:1C:D4:C5:DA:17:2E:C7:C8:9E:AB:CE:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87c612ef-b957-323e-a378-35bff79a6e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.187.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:04:1a:35:30:06:df:bb:df:1f:aa:d4:64:0c:f4:7b:26:e8:
         5c:03:9f:b9:20:52:da:d3:68:83:54:74:a6:0a:ff:37:48:96:
         31:e0:a3:e6:65:50:32:cc:44:18:9d:85:58:68:a7:b7:5b:7c:
         bf:fd:a9:d5:fd:c4:06:61:6f:c4:8d:b7:2d:16:95:b2:e9:18:
         88:0e:54:2f:a3:f2:d9:e8:45:a3:fa:32:26:46:ac:10:14:62:
         cc:e8:cf:ae:c9:5d:a4:8b:1d:80:cc:5d:95:4e:37:77:43:44:
         35:0a:42:f1:55:a9:2f:ba:dd:5b:81:a2:15:1f:58:86:c7:07:
         e1:de:4d:64:cb:5f:a6:05:c8:ea:66:76:5c:f3:84:9b:ca:48:
         4b:63:49:e8:35:86:1e:17:2d:e1:64:41:a2:85:66:ec:c9:16:
         39:98:8b:cf:fb:8d:d4:1f:b1:ce:56:f5:f8:84:a5:af:bc:fc:
         ab:f1:1d:e5:a8:8f:22:4a:d3:25:e6:b4:3e:e0:8d:8d:35:76:
         28:9c:d2:92:a2:4c:96:3d:47:dd:bc:ba:c6:55:8f:13:a0:b5:
         a2:a2:74:6f:7c:ce:f4:4f:5d:7f:49:6b:b9:a6:96:67:c3:2b:
         63:97:00:d5:b1:72:89:50:36:7d:b3:ad:d5:6f:3a:a4:ae:a9:
         59:d0:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:06 2026 by rpki-client