Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e3eede35-0264-35cb-9484-7390f60bd12c.roa
File:                     e3eede35-0264-35cb-9484-7390f60bd12c.roa (raw, json)
Hash identifier:          ZpYPEgAyQ8UrBEOxPatuSPcL4ZM5WY3qmj3FJmdNi8Y=
Subject key identifier:   89:90:17:A6:2E:6F:C5:F7:C4:73:21:9F:FE:F3:D5:51:EB:D9:99:FE
Certificate issuer:       /CN=e37d8dd2-7394-4cf9-b015-70c1c857a941
Certificate serial:       010D0C9F4328584E376486B5C13C89ACB29AC470
Authority key identifier: AA:20:98:D4:35:EB:A8:E6:DA:CC:C2:D9:63:E3:DF:74:B1:BE:E5:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e3eede35-0264-35cb-9484-7390f60bd12c.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     91
IP address blocks:        129.5.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e37d8dd2-7394-4cf9-b015-70c1c857a941.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e37d8dd2-7394-4cf9-b015-70c1c857a941.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:86:b5:c1:3c:89:ac:b2:9a:c4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37d8dd2-7394-4cf9-b015-70c1c857a941
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=4dbf4620-5282-4bfb-9974-c9ffeb9dbdcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:34:3f:fd:49:dc:da:8d:87:1c:ed:36:02:
                    53:1c:e6:84:fb:51:56:bc:3a:a2:97:38:cf:90:bd:
                    62:43:b0:bd:dd:66:02:fb:15:30:ee:23:20:18:8d:
                    a5:64:87:4a:68:d8:b1:40:f4:31:14:02:e2:73:55:
                    36:c2:42:16:1c:6f:59:95:fa:1f:4a:9b:d0:f9:94:
                    0d:70:be:72:54:79:14:e9:9f:8b:5e:97:54:54:99:
                    5f:ed:4c:79:8c:43:21:e4:48:f4:da:bd:b7:29:76:
                    a0:a1:73:41:e1:00:2d:a1:11:a2:c3:e5:72:41:53:
                    1d:ce:f8:d8:9d:54:e7:c7:97:60:c7:f4:e9:12:67:
                    9a:cf:33:b2:04:3b:0e:76:dd:94:03:65:a8:a0:90:
                    6e:31:c8:39:3b:40:f1:75:da:97:c9:90:51:f4:32:
                    65:a8:33:6e:d1:af:41:f6:9c:50:8d:76:21:dc:f7:
                    07:d6:16:54:9b:58:37:c1:3c:0d:d7:67:2b:a4:34:
                    fc:91:12:48:68:5d:8b:b1:ca:c5:9f:4c:5e:c2:b6:
                    d4:24:5f:05:3d:d5:d2:49:fc:46:89:96:f4:45:68:
                    e9:ee:3d:96:c2:aa:1f:a9:35:24:7c:dc:a8:3a:1d:
                    ff:72:e1:4b:15:28:de:b7:34:9b:5c:5b:a1:d3:06:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:90:17:A6:2E:6F:C5:F7:C4:73:21:9F:FE:F3:D5:51:EB:D9:99:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e3eede35-0264-35cb-9484-7390f60bd12c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e37d8dd2-7394-4cf9-b015-70c1c857a941.crl

            X509v3 Authority Key Identifier:
                keyid:AA:20:98:D4:35:EB:A8:E6:DA:CC:C2:D9:63:E3:DF:74:B1:BE:E5:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.5.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a6:0f:a6:ac:03:1d:b4:56:02:ee:2c:56:01:35:66:c4:3a:
         d8:6e:24:62:dd:26:6d:4f:53:b4:49:a1:57:11:5a:71:48:47:
         57:fe:cb:06:0b:45:9c:d5:ee:ce:6c:55:f2:cb:ab:37:d0:0b:
         5f:98:5d:90:b0:f5:20:d9:27:04:f3:64:98:76:e4:b4:72:bf:
         0c:e0:f7:5e:05:96:ce:73:5a:ba:99:69:8f:d2:67:18:50:28:
         d9:63:c9:e5:d7:7f:4f:20:e0:38:22:5e:d8:76:ac:f8:00:0e:
         b4:f0:e2:c5:20:5e:a9:47:57:ae:2b:4f:05:6c:bc:b2:8b:87:
         e0:7f:50:9a:5c:af:f6:c1:2c:21:02:44:2c:47:52:7c:36:ae:
         f4:51:4b:32:58:14:f1:6d:11:54:4a:b3:99:99:eb:8a:e4:21:
         5d:d3:9c:f2:8a:93:8d:8a:d9:6d:41:dd:34:89:10:86:61:86:
         3e:28:79:50:49:ba:09:9b:17:45:9b:f9:7c:6c:9e:71:0a:96:
         a6:3b:ec:04:f0:62:5a:a9:90:36:69:08:0d:db:d1:83:8c:69:
         0b:e7:3f:51:2b:db:4a:a5:ec:7e:a4:0b:11:4c:13:0d:aa:82:
         40:ca:fd:45:4b:ff:14:f8:53:4b:86:64:0f:8d:01:00:74:32:
         77:f2:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 06:10:34 2026 by rpki-client