Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/e27d0061-9d30-38aa-b201-f3054472799d.roa
File:                     e27d0061-9d30-38aa-b201-f3054472799d.roa (raw, json)
Hash identifier:          Ui7yGsMyXuf9vW6ZmEHwR/vQSt/BheRRrsadN1Z0i1s=
Subject key identifier:   CC:6F:02:10:07:2B:72:FE:34:9C:58:E0:21:99:DB:C7:31:EA:F6:5C
Certificate issuer:       /CN=c052e455-8070-4e1b-8bd1-ae10e41d72a4
Certificate serial:       010D0C9F4328584E296EFBFB4D19776C40BE3E00
Authority key identifier: CF:EC:30:A7:22:2D:1D:89:05:A5:D4:D0:86:CB:D2:3E:BA:BA:99:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/e27d0061-9d30-38aa-b201-f3054472799d.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     32881
IP address blocks:        65.75.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/c052e455-8070-4e1b-8bd1-ae10e41d72a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/c052e455-8070-4e1b-8bd1-ae10e41d72a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6e:fb:fb:4d:19:77:6c:40:be:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c052e455-8070-4e1b-8bd1-ae10e41d72a4
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=493456a8-6cbc-4737-971d-e672ffe52b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:41:e7:cd:15:11:a4:c9:2d:c1:0d:64:f8:34:
                    af:ff:03:1f:be:31:f9:76:e0:f7:fb:0c:81:9a:fb:
                    53:37:8c:85:9c:28:22:ec:62:7c:47:52:c3:92:89:
                    98:e3:1f:d4:ec:02:e9:d0:b9:05:0a:c2:79:db:37:
                    21:8d:46:91:01:6f:13:af:73:b0:b1:df:bb:0d:9e:
                    ce:6d:74:43:5c:50:85:6a:96:a7:75:b3:a7:c2:de:
                    d6:91:c3:bb:17:76:8c:60:f6:2a:94:78:91:09:e3:
                    5e:3e:c2:0b:0b:ef:4b:79:0f:a5:73:77:15:e7:c4:
                    af:8d:36:05:f7:b6:d9:57:ae:d7:44:11:de:bc:a3:
                    cd:2a:95:9d:21:ca:47:f8:74:0b:fa:0b:d1:fd:e1:
                    9a:81:80:27:fe:77:31:7c:2a:f7:a0:e4:38:0a:b7:
                    a3:d9:95:3d:cd:97:2b:cf:6c:f8:02:6e:c8:7c:4f:
                    a5:1d:c0:94:df:18:90:e8:ed:58:d9:f2:b1:ee:00:
                    43:87:5c:27:fb:99:33:ac:73:92:dc:89:07:07:bb:
                    a6:6f:5b:ee:18:b0:6a:31:32:36:b1:33:96:c0:cd:
                    29:93:7b:d4:3e:f3:90:7f:6e:6f:b0:18:6a:18:53:
                    81:3c:6e:a8:6f:b6:b4:bb:ab:6e:a6:ce:c6:33:8a:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6F:02:10:07:2B:72:FE:34:9C:58:E0:21:99:DB:C7:31:EA:F6:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/e27d0061-9d30-38aa-b201-f3054472799d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4/c052e455-8070-4e1b-8bd1-ae10e41d72a4.crl

            X509v3 Authority Key Identifier:
                keyid:CF:EC:30:A7:22:2D:1D:89:05:A5:D4:D0:86:CB:D2:3E:BA:BA:99:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c052e455-8070-4e1b-8bd1-ae10e41d72a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:49:5e:5b:57:b2:b6:df:7d:9d:58:50:d0:2c:ea:ee:00:e3:
         16:16:12:40:d6:47:93:42:45:3e:6e:d2:3e:ed:ad:b7:63:03:
         10:20:1b:6a:52:5e:f0:be:64:0f:e9:aa:c8:ab:78:df:99:c5:
         49:f1:00:25:aa:12:c2:65:3d:b1:5d:dd:1b:5c:ec:a4:2e:ac:
         0f:91:6e:be:ea:81:12:3a:1e:79:77:2f:ed:d8:c0:7d:80:97:
         2f:44:8f:20:9c:12:1b:11:b9:97:6b:4f:71:02:76:dc:4c:2a:
         2e:12:63:61:d3:0d:ea:1f:6b:75:d2:80:b3:86:b6:99:bb:92:
         92:0f:16:27:f7:a5:ba:18:5a:74:b6:aa:c2:8b:be:8e:0f:86:
         91:9b:07:01:d0:fd:34:f4:8f:20:3a:37:b8:c0:33:95:06:61:
         91:d4:c6:ad:c7:48:88:ae:c0:1d:2a:5b:53:18:46:69:21:ce:
         7a:28:34:30:04:97:87:c1:43:45:a9:cd:1a:9d:a6:8f:5b:43:
         d4:e5:a1:78:42:e4:09:c6:72:01:0f:9f:83:3a:01:63:74:a2:
         39:e6:9e:d4:6e:6f:7c:8f:b4:91:e5:bb:b1:31:2a:cb:4e:6b:
         9e:54:3a:8f:3f:3f:f1:d8:b2:98:5c:64:9e:b3:c2:a5:86:30:
         c5:3b:35:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 00:16:09 2026 by rpki-client