Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/5051351e-2e52-3d41-a589-919b3151337c.roa
File:                     5051351e-2e52-3d41-a589-919b3151337c.roa (raw, json)
Hash identifier:          il6Dy9BXe2ZZv+ZT/A+SD/DVWvd/UrOh0vGbi4C6TQQ=
Subject key identifier:   B3:A9:97:DE:59:18:17:A3:BA:41:3D:B0:07:1E:7E:93:D5:CA:AD:77
Certificate issuer:       /CN=1d255e93-b2f2-458d-ad07-ca05486ed239
Certificate serial:       010D0C9F4328584E1FA9A02868932B0DE4DD0818
Authority key identifier: 41:38:BF:DF:1B:CB:F8:04:2F:0B:CB:F3:B2:78:CE:51:03:39:C1:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/5051351e-2e52-3d41-a589-919b3151337c.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     63196
IP address blocks:        104.193.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/1d255e93-b2f2-458d-ad07-ca05486ed239.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/1d255e93-b2f2-458d-ad07-ca05486ed239.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a0:28:68:93:2b:0d:e4:dd:08:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d255e93-b2f2-458d-ad07-ca05486ed239
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=20a1074d-c915-4f3f-aa7d-0c57614cdc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:d4:b4:83:f6:24:8b:2f:9c:b3:ca:43:9e:
                    74:0a:34:77:8c:78:22:83:33:ea:6e:4d:98:93:77:
                    60:d3:0a:f1:43:e6:53:a2:64:21:09:53:6b:9d:d2:
                    a2:68:9a:93:c9:7c:03:65:46:02:fc:51:47:8b:b1:
                    a3:c2:72:a9:a7:65:90:3e:4f:e7:98:33:db:9c:2e:
                    9d:77:6a:ff:00:e6:33:66:e5:4b:d9:54:49:99:19:
                    ba:da:74:79:48:c4:93:09:bb:77:e2:89:f3:7c:65:
                    86:2b:f1:0c:26:6f:83:50:ae:91:d6:c0:fb:28:6c:
                    5d:cf:e8:c1:6a:0b:c9:40:77:97:75:cb:14:53:3a:
                    99:30:cb:21:38:2e:ee:8e:72:65:fe:1f:0a:25:f9:
                    47:d2:01:7e:22:f9:94:fb:50:66:8b:0d:ff:30:88:
                    58:ba:0d:52:21:3e:eb:6a:a9:70:63:a4:69:52:44:
                    f8:54:72:e0:9e:c7:e1:13:4b:59:ef:cd:d7:5f:24:
                    af:31:6d:47:fc:24:6b:36:6f:43:b7:1a:d6:49:d0:
                    09:d4:c4:0b:89:56:2d:ca:1b:f0:c5:8e:cc:d0:5c:
                    56:b3:23:01:df:f5:48:ec:9b:cb:ad:78:ca:68:70:
                    1e:43:fa:07:8c:c5:c0:5e:d4:86:dc:94:35:71:54:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A9:97:DE:59:18:17:A3:BA:41:3D:B0:07:1E:7E:93:D5:CA:AD:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/5051351e-2e52-3d41-a589-919b3151337c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/1d255e93-b2f2-458d-ad07-ca05486ed239.crl

            X509v3 Authority Key Identifier:
                keyid:41:38:BF:DF:1B:CB:F8:04:2F:0B:CB:F3:B2:78:CE:51:03:39:C1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:9f:45:c2:dc:83:23:6f:65:e9:c2:35:a0:29:e1:ba:00:
         bd:8b:04:d4:a6:86:17:c0:6d:f9:0a:a2:57:73:4e:3d:b2:04:
         9a:29:a9:a5:fd:2e:77:16:96:aa:a6:d9:c9:52:e8:9b:59:d8:
         fa:34:62:8f:da:4d:d9:20:04:0f:df:5c:fe:01:f5:34:d8:67:
         8d:84:3e:47:97:99:a5:d1:83:d5:e2:3a:d9:74:26:a3:0d:15:
         de:5e:4d:94:b5:01:48:1e:0f:56:42:c1:e8:52:5b:fa:d0:7c:
         30:d1:32:07:5f:53:b1:52:7f:fa:21:02:6e:6c:a5:c7:9e:d6:
         17:6b:de:fa:f5:39:3f:c1:69:1d:de:fb:8a:de:d5:03:6c:5f:
         3c:64:cb:b3:a8:36:b8:51:61:0a:75:2a:58:0b:aa:fd:f3:fc:
         c1:65:99:34:4b:4c:a5:9a:53:68:b3:0a:fc:ab:f0:12:97:50:
         13:ad:6c:8e:09:72:43:9f:70:73:00:8c:a6:15:58:68:cf:9b:
         df:24:0b:ef:f4:bf:13:9c:44:a6:5b:a3:b2:10:c0:3e:e9:7f:
         d3:b7:84:60:72:16:70:bf:78:38:b8:a4:86:26:40:9f:0d:f9:
         be:5f:a3:17:72:65:ee:26:a9:26:48:fa:76:6e:c7:03:2f:27:
         09:46:be:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:39:44 2026 by rpki-client