Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/6a7c1fcd-5997-353b-aa88-da1a2d616872.roa
File:                     6a7c1fcd-5997-353b-aa88-da1a2d616872.roa (raw, json)
Hash identifier:          fOiXoZVXbNPSkyiljkcjpDnBQmYNvsR+8/W8RkHLJVQ=
Subject key identifier:   BC:58:D1:3B:8C:15:4F:10:6F:E3:C7:AA:18:F5:EB:AC:B6:68:29:36
Certificate issuer:       /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11
Certificate serial:       010D0C9F4328584E059C84EC8AE765CCC4D64800
Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/6a7c1fcd-5997-353b-aa88-da1a2d616872.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     3737
IP address blocks:        23.172.16.0/24 maxlen: 32
                          68.70.0.0/19 maxlen: 32
                          72.28.0.0/18 maxlen: 32
                          199.96.176.0/21 maxlen: 32
                          199.192.136.0/22 maxlen: 32
                          199.241.168.0/22 maxlen: 32
                          2607:3e00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:84:ec:8a:e7:65:cc:c4:d6:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=b378cdb0-47ff-4e13-aec6-6967061d802e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:92:b2:44:f9:56:30:21:3f:b3:34:55:1e:
                    2b:b3:f3:f3:1d:b1:76:ce:c9:2f:d5:41:d7:bd:84:
                    18:c5:96:66:9f:2e:2b:83:66:9f:cb:e0:44:24:31:
                    67:39:05:12:c4:d4:a1:e0:37:85:87:60:46:b1:ad:
                    72:fa:0c:6c:7d:6e:06:3d:7d:a3:38:49:c8:c9:b2:
                    6a:82:d4:5b:b6:25:9c:f6:8a:b1:ce:d2:5c:42:24:
                    16:b3:57:83:e5:d6:ae:08:e7:4f:9b:92:ec:d7:ac:
                    9d:c6:5b:a1:6b:05:c9:93:11:a5:7a:da:64:d1:71:
                    7e:df:d6:b8:8d:21:9b:fd:e7:f8:c0:1b:7d:13:31:
                    90:ac:64:ea:df:8f:6d:fa:57:90:d2:49:ad:a8:bd:
                    f7:df:13:20:ae:1f:b5:79:e2:f0:03:ad:a9:20:4d:
                    42:f4:87:bf:2d:c5:ce:3d:7a:cd:54:07:56:5d:13:
                    f5:a0:ef:12:f3:06:a1:ab:2a:b5:21:6d:d2:9d:68:
                    2d:02:6c:bd:71:c6:da:6f:e6:86:ad:13:1c:0e:0a:
                    a9:97:ee:50:64:c8:d5:41:a6:68:fe:d7:9e:ed:74:
                    17:93:f1:ff:7a:74:46:e8:55:dc:e2:3d:b4:08:88:
                    2d:ac:c3:2d:b2:40:13:6a:55:28:31:3d:bd:e9:55:
                    9f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:58:D1:3B:8C:15:4F:10:6F:E3:C7:AA:18:F5:EB:AC:B6:68:29:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/6a7c1fcd-5997-353b-aa88-da1a2d616872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.16.0/24
                  68.70.0.0/19
                  72.28.0.0/18
                  199.96.176.0/21
                  199.192.136.0/22
                  199.241.168.0/22
                IPv6:
                  2607:3e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:4a:88:94:1f:9a:e1:de:27:36:ca:3e:0b:af:8b:79:f5:47:
         16:83:ab:0e:7c:e8:3a:fc:24:bf:9f:bb:1a:10:a1:c6:ce:b5:
         81:e4:2a:f6:8d:42:fb:31:db:a1:5d:bc:97:2d:17:68:4e:11:
         f2:7c:00:99:d2:a0:8e:43:df:52:d6:83:fd:21:39:77:c3:ca:
         a2:de:00:2f:82:95:3b:57:dc:12:d4:5b:25:91:b7:87:55:71:
         8b:a4:9e:bd:1b:c6:74:b6:42:da:fd:ff:b3:8b:66:ae:17:c0:
         bf:8d:02:b6:24:c3:1c:e9:a9:9f:19:e2:5a:7e:d5:3b:b7:e3:
         56:7a:15:5b:4c:19:1d:86:1d:f9:2f:3e:a1:08:13:dd:3d:b9:
         5b:a2:8b:b1:cc:19:52:c8:13:49:90:ca:a1:17:93:68:83:84:
         e5:41:99:c1:56:6a:c5:d2:a0:c7:cc:3a:21:db:d1:16:da:09:
         48:0b:8e:1e:d6:42:fe:e5:d6:c1:97:ad:38:f8:46:c9:6f:0f:
         88:c5:d4:21:92:f0:f8:75:e0:51:61:98:81:5f:9c:d0:6f:03:
         35:00:46:de:ab:38:47:a5:04:43:8b:c2:3b:9b:26:ca:f4:cc:
         3c:f6:2b:7b:67:9e:df:e7:05:34:d4:3e:81:25:30:b4:19:29:
         e3:f2:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:07:05 2026 by rpki-client