Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa
File:                     86e34e6c-0e06-342b-9c88-f3f080f46e40.roa (raw, json)
Hash identifier:          lwZYigkz5mb/7lWESTqgq0AfpHMzO3dl7RShrMG/byA=
Subject key identifier:   71:FB:0D:08:86:00:0B:98:39:AA:10:DC:4D:65:06:C5:30:37:A7:CC
Certificate issuer:       /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial:       010D0C9F4328584E1FA996C06D8C418DD74D1C00
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     399507
IP address blocks:        91.106.220.0/22 maxlen: 24
                          204.52.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:96:c0:6d:8c:41:8d:d7:4d:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=c48645ac-add9-4716-823d-9e1cefee0a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:02:9b:e9:25:30:3c:02:a6:a1:25:87:ba:
                    21:74:12:cf:e8:ae:35:75:16:fa:e7:52:79:c8:02:
                    08:08:63:76:06:24:ec:9f:82:18:70:22:d7:c5:b8:
                    30:75:c0:73:fa:2c:69:74:37:e4:c1:e2:2f:b9:5d:
                    e4:f2:82:03:47:de:08:a6:1b:68:af:f4:7e:fe:3c:
                    67:b0:e9:7a:17:9e:fd:ce:03:2e:2f:e0:44:86:b8:
                    29:11:da:66:c9:41:8c:67:e7:db:1a:92:b1:83:0e:
                    6a:54:90:83:8b:10:0c:e1:ac:4e:5c:46:3a:25:85:
                    c3:96:ad:4e:10:4f:9a:0f:3c:20:5e:25:3c:50:a9:
                    ba:6d:e0:32:94:b3:3d:66:57:24:d3:9d:c6:91:8b:
                    aa:14:3a:b5:01:17:5e:fb:c6:65:c2:67:f1:ed:9d:
                    2f:dc:97:0e:92:ad:65:d3:1c:52:7f:22:59:c4:60:
                    9e:76:a8:3d:3a:80:24:1d:60:34:eb:57:51:d5:d0:
                    0e:e8:61:e1:02:0e:7d:22:cd:34:bc:97:2d:8a:97:
                    55:42:10:38:a5:13:f7:b6:03:35:a6:12:46:05:7b:
                    3e:a5:f9:7f:28:84:87:14:47:01:9f:f7:06:62:6e:
                    6e:7d:63:9a:3b:31:85:73:e3:97:7b:c9:db:93:24:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FB:0D:08:86:00:0B:98:39:AA:10:DC:4D:65:06:C5:30:37:A7:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl

            X509v3 Authority Key Identifier:
                keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.106.220.0/22
                  204.52.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:26:12:ae:13:49:8e:51:49:1d:b4:b0:77:66:76:fd:1d:
         9f:ba:b1:5d:49:d0:03:38:15:90:4f:c6:2c:f1:9b:74:b1:b5:
         23:ab:9e:41:00:85:c3:b9:9c:91:da:aa:e0:b7:30:ef:aa:3d:
         bf:86:0d:9e:68:c2:39:a7:f2:38:83:2f:62:88:6b:22:4a:16:
         c8:d3:6b:b6:72:b8:ec:a1:58:ab:9d:bb:fd:bf:a4:ea:45:65:
         fc:f7:a5:8e:7d:b1:be:6e:28:62:bd:e5:93:6e:44:3c:10:e0:
         48:ca:49:4d:e5:e4:7e:8f:bd:41:c7:4f:60:eb:97:4c:2e:ac:
         9b:30:03:c0:f5:2a:39:9e:7e:bb:53:64:12:b0:26:9d:af:fa:
         b2:db:8a:ea:d6:a9:46:6b:63:15:5a:e3:27:29:df:14:71:51:
         ec:d4:e6:83:cb:d0:cd:09:53:03:70:76:90:31:84:92:3a:3d:
         32:cb:04:b4:0b:23:c6:71:2f:0b:04:27:88:d6:c2:93:ed:eb:
         d5:cd:67:6d:ad:7d:68:ce:e2:63:12:1e:65:fa:e8:d1:68:33:
         56:ad:e1:1d:62:e8:90:3c:bd:85:c4:8f:d6:d8:4f:ed:2d:6b:
         00:d1:b7:f0:91:3a:39:44:27:67:32:6d:12:49:69:ab:3a:cd:
         14:a6:ab:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:32 2026 by rpki-client