Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/39922f13-2115-3dbe-8314-6791921eb6b5.roa
File:                     39922f13-2115-3dbe-8314-6791921eb6b5.roa (raw, json)
Hash identifier:          IvT6JEBy+c0M0nVVd+ZirPs4XQvgbK0EQ/qHcFyuhwY=
Subject key identifier:   96:77:2E:B4:1D:16:75:FB:65:AB:EC:63:34:49:26:F1:E2:80:06:BF
Certificate issuer:       /CN=c052e455-8070-4e1b-8bd1-ae10e41d72a4
Certificate serial:       010D0C9F4328584E296EFA64349D58DC8DB77100
Authority key identifier: CF:EC:30:A7:22:2D:1D:89:05:A5:D4:D0:86:CB:D2:3E:BA:BA:99:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/39922f13-2115-3dbe-8314-6791921eb6b5.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     6939
IP address blocks:        65.75.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/c052e455-8070-4e1b-8bd1-ae10e41d72a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/c052e455-8070-4e1b-8bd1-ae10e41d72a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6e:fa:64:34:9d:58:dc:8d:b7:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c052e455-8070-4e1b-8bd1-ae10e41d72a4
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=9b8ee9b1-8237-4846-9cb7-335f84cc1cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:b8:89:7a:0c:b8:83:d2:43:13:5a:bb:23:
                    5a:bc:3a:64:1d:58:c4:b7:49:16:ac:9f:68:8c:bc:
                    a9:81:84:f4:24:46:13:7d:8c:79:95:0c:a7:52:86:
                    06:a0:bd:fc:e6:8c:53:79:d5:05:58:9f:b2:eb:3b:
                    67:db:c9:eb:61:17:ea:4a:54:a6:86:ba:57:4e:9c:
                    8c:a9:b1:22:72:ea:c3:cb:f7:65:d4:a4:bd:ff:95:
                    90:64:f6:00:ec:32:86:62:60:f2:02:f9:ac:36:2d:
                    06:db:c7:f9:70:44:af:cc:7f:8f:c9:e0:fc:ad:c3:
                    9f:6d:16:3d:78:ff:06:9a:e4:1a:91:1c:6d:2c:4d:
                    7d:c8:2b:d8:47:d8:67:5c:72:fe:4f:8d:37:63:df:
                    d9:35:84:06:61:18:12:ac:e8:6b:9b:38:f2:f5:7f:
                    3f:b6:b9:f9:0c:40:f8:86:f2:ab:20:e7:d5:08:b7:
                    3f:cc:f1:b1:fc:8a:f9:6e:b2:de:1f:2c:e8:c5:ab:
                    ca:88:0b:b4:86:ef:e1:58:04:36:c9:a3:d5:84:31:
                    58:c9:44:10:55:83:47:9d:5b:de:50:8d:cb:5f:99:
                    8b:b7:f0:e9:10:1b:8f:0f:95:8c:52:78:ca:29:f9:
                    65:f1:7b:c1:18:34:4a:13:c2:5e:d2:a5:4a:4f:03:
                    31:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:77:2E:B4:1D:16:75:FB:65:AB:EC:63:34:49:26:F1:E2:80:06:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/39922f13-2115-3dbe-8314-6791921eb6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/c052e455-8070-4e1b-8bd1-ae10e41d72a4.crl

            X509v3 Authority Key Identifier:
                keyid:CF:EC:30:A7:22:2D:1D:89:05:A5:D4:D0:86:CB:D2:3E:BA:BA:99:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e6:5f:75:73:25:f9:89:73:8c:37:9f:b2:86:54:93:28:af:
         18:19:a4:5c:b8:73:75:1e:dc:2c:05:76:f6:da:41:66:72:e0:
         0d:b3:d2:d0:c4:14:d0:c1:31:7e:6a:9b:a7:4b:b8:a8:74:99:
         50:52:eb:3b:bb:43:d8:22:af:e9:8b:91:13:93:04:ce:49:5b:
         48:73:33:61:81:18:6c:32:96:d1:3e:3b:18:57:db:6e:70:59:
         31:64:36:fa:58:f5:80:6b:19:f9:a0:6c:da:7b:bc:17:a8:3d:
         38:07:24:d1:04:0b:41:37:0a:a0:44:34:2e:1e:e8:9f:cb:e0:
         09:cb:f0:c5:37:12:da:8d:4b:c4:84:39:a6:31:6b:86:b1:97:
         8e:17:78:23:cc:8c:ce:19:8f:ba:30:18:0b:65:b9:49:48:76:
         42:32:2b:13:8a:aa:a2:4e:13:e5:f6:65:cf:c3:8c:cf:1e:32:
         a7:88:73:be:56:9b:cd:6b:27:bf:41:c4:e7:5e:39:09:a9:bf:
         1d:81:7f:f8:13:34:36:c9:e8:9f:68:de:36:7f:8e:34:8a:2d:
         64:19:1b:f5:6c:41:1a:4b:9e:d9:a3:4f:19:d4:10:93:1f:1c:
         ff:e8:af:dc:3b:bf:b4:10:0b:de:35:1d:61:23:97:d1:08:67:
         38:f8:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 22:09:01 2026 by rpki-client