Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/1430f3c1-f33e-37b7-bb23-f992b8030c49.roa
File:                     1430f3c1-f33e-37b7-bb23-f992b8030c49.roa (raw, json)
Hash identifier:          qin/+6wPe2O4gUT03mvjd8r0JldfcunzQL8T1YUtKZ4=
Subject key identifier:   DB:35:8B:9E:25:E3:8C:08:C1:98:23:96:30:47:90:B0:67:67:BF:38
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F4328584E0005D6A3039AF7646E490500
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/1430f3c1-f33e-37b7-bb23-f992b8030c49.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     399533
IP address blocks:        208.64.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d6:a3:03:9a:f7:64:6e:49:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=8a1419b6-3b14-483c-bd90-d8157b5a0472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:0c:ef:7c:25:86:02:17:a0:6c:57:3f:68:
                    8f:62:2d:a1:13:f6:31:4f:42:00:3c:05:28:43:83:
                    88:b5:13:07:a8:8f:b3:d9:b8:76:98:9c:7f:44:ae:
                    6e:8c:4f:59:37:18:44:46:e8:d5:4a:de:8b:65:aa:
                    e8:80:59:3d:0f:2b:6f:95:6f:3c:5a:a4:e7:10:27:
                    b9:87:80:a7:87:1b:fe:cb:17:93:c9:0b:b8:c6:94:
                    d1:76:d7:3b:cf:27:aa:14:23:f1:de:2b:96:56:38:
                    cb:39:fc:32:14:ed:d0:09:39:ea:6e:3a:8d:36:4d:
                    cc:4d:d6:20:85:fc:66:e2:b5:22:de:dd:e6:dc:82:
                    18:7d:aa:51:6e:06:51:b5:cc:ab:d3:35:29:f5:4f:
                    65:c2:b4:63:ac:68:56:7e:75:09:03:92:a7:9d:19:
                    99:11:be:0c:45:50:70:2c:da:bd:83:01:fc:c5:b0:
                    eb:c5:6d:be:ef:1a:35:39:f5:65:4c:25:85:e1:0d:
                    e9:2f:21:99:0c:77:19:01:f5:a7:eb:8a:79:20:57:
                    1b:70:4e:49:0a:47:5c:ce:f7:a4:cd:ff:35:a8:df:
                    56:d0:4b:51:e3:79:c2:04:b5:c3:18:c6:4c:e1:85:
                    a9:e8:29:79:88:33:81:81:f9:92:ed:bf:85:67:c2:
                    9b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:35:8B:9E:25:E3:8C:08:C1:98:23:96:30:47:90:B0:67:67:BF:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/1430f3c1-f33e-37b7-bb23-f992b8030c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e8:4f:aa:4b:2f:86:0f:07:ac:f3:e1:51:b2:3a:b1:5c:49:
         22:05:5d:9a:ca:40:28:e2:b0:4d:82:bb:ec:9c:02:82:2a:4e:
         fb:c6:43:c2:8f:ef:5b:5c:af:39:74:3e:9f:6b:3e:79:4a:09:
         1e:1a:52:02:c6:b3:59:54:b4:68:fc:b2:38:44:c4:b3:98:24:
         91:77:a5:19:ae:c8:f9:b0:84:cb:ca:a1:8a:3b:6f:52:f2:4e:
         e2:6d:dc:88:31:0f:06:95:59:bc:53:af:6c:b0:f5:4e:8b:cd:
         3d:68:00:97:60:63:84:5a:d2:34:27:3d:0d:09:2a:2b:b8:0c:
         1b:16:46:a1:7e:15:b1:6a:0d:cf:79:da:78:c2:b6:3a:ab:b4:
         d3:53:40:91:bd:71:8e:6f:b3:57:16:6b:06:4e:a8:95:fa:2c:
         f0:7b:53:ff:23:2f:0e:6d:48:7d:db:05:f9:2d:30:a1:fa:45:
         c1:e9:e8:70:d4:ea:29:87:be:df:5d:a6:b4:e8:6c:e4:c4:86:
         36:02:51:14:71:81:15:b3:98:73:ed:86:75:6c:31:f1:1a:6e:
         ed:c2:ee:a9:0a:0b:06:b6:03:da:76:7b:fb:fd:d2:1c:e1:d6:
         0f:e8:17:55:d2:7f:e9:74:a3:76:0c:4b:de:47:9e:0d:39:74:
         d8:8f:0e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 04:23:25 2026 by rpki-client