Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa
File:                     c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa (raw, json)
Hash identifier:          V01DHTppShEoUE2VFgOLRjsb93GNKFsKteinaz91zMo=
Subject key identifier:   D5:FC:13:A5:88:9A:21:B2:D8:42:43:93:69:9A:93:64:8D:2D:27:B1
Certificate issuer:       /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial:       010D0C9F4328584E2AD4544F88BD4B645E587320
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        136.228.0.0/19 maxlen: 32
                          139.60.200.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:54:4f:88:bd:4b:64:5e:58:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=f781580a-a096-449e-984c-383dc5d0ea07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:76:ca:9a:e6:d1:bd:db:c3:bf:55:27:14:
                    89:2d:2f:34:bc:46:8f:ab:2c:ef:76:73:74:1e:a2:
                    1d:f8:3d:7d:ef:e9:e4:d6:48:c9:e3:d8:0c:47:6f:
                    f9:f0:3c:15:b2:2e:b9:fe:86:e8:37:f6:69:98:65:
                    63:e4:d6:03:e4:7b:2e:53:75:09:d5:ea:4f:73:1a:
                    02:69:97:cd:96:fa:4e:29:84:b7:e8:e2:5b:d2:38:
                    bc:61:31:5a:16:6d:61:84:27:f0:a5:3f:c8:a2:1d:
                    9c:60:66:bc:57:f6:fd:9d:09:90:3f:c0:38:bc:f0:
                    22:bd:ae:31:a8:69:40:ca:23:80:69:b6:cc:34:e4:
                    f9:01:a0:07:b8:ae:75:5b:b1:05:e3:ad:66:bb:1f:
                    01:f9:e1:c2:8d:ac:c6:68:c1:d4:da:32:d1:cc:c5:
                    c6:6a:bd:ac:3f:97:ce:96:49:ef:70:9c:2f:5f:d7:
                    8f:f4:a7:87:29:4c:76:5f:36:75:3e:7a:4b:af:b6:
                    e7:c6:94:a4:53:aa:48:15:35:75:66:6e:5d:d2:f1:
                    30:f5:20:99:12:75:7a:1f:4b:6d:83:28:ad:6b:2a:
                    be:fc:90:a9:c5:bb:86:c1:b5:1e:6e:54:8e:17:4b:
                    8f:3a:29:34:c4:2f:33:98:3a:46:cc:73:3f:9a:32:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FC:13:A5:88:9A:21:B2:D8:42:43:93:69:9A:93:64:8D:2D:27:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.0.0/19
                  139.60.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:14:4b:ac:32:95:5f:8a:c2:00:55:91:94:b3:80:fe:62:b3:
         68:c4:80:3e:2d:e3:4b:b5:98:5f:0c:53:ed:f4:5c:6c:28:85:
         89:e3:17:a7:20:92:c9:96:30:ca:82:1b:45:23:37:7c:f8:46:
         b2:ca:73:1a:18:94:6d:29:83:6d:07:09:1f:64:af:89:6a:04:
         73:26:74:ec:82:8d:df:bb:e9:f5:10:ac:ca:a2:ed:be:8b:05:
         5a:67:2e:14:bc:16:1a:c9:f7:01:ab:47:d9:ee:5b:13:da:2e:
         d0:d6:2a:b2:0a:63:69:5c:8f:b0:22:30:ca:f8:38:d5:89:1a:
         0f:ac:de:c6:6e:12:60:f0:bd:a1:4e:70:97:35:8c:40:c3:0b:
         01:67:de:63:77:eb:95:9e:b0:5b:6d:65:6a:15:fc:a6:ab:4b:
         62:4e:3d:84:9c:28:dc:18:3e:d0:6a:bb:d0:9a:68:93:01:98:
         9a:06:e6:05:57:02:c9:2c:eb:22:7a:27:ab:11:22:62:2d:be:
         82:ba:4e:a8:ec:d0:ad:83:cf:48:41:25:5c:e5:cb:4c:78:52:
         ce:04:a8:0a:bb:ea:9b:35:07:d3:47:b3:27:b0:92:72:35:23:
         fe:a2:90:9a:f1:c3:bd:14:cf:ad:b7:7f:eb:14:41:40:3b:2f:
         ca:75:32:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 02:45:46 2026 by rpki-client