Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa
File:                     ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa (raw, json)
Hash identifier:          Nadai6Al819tDIgYsv/XQgzB2bODZ9vuYGK65tEymcQ=
Subject key identifier:   4D:59:02:01:F2:22:33:75:FE:29:5D:C7:67:A0:F0:82:98:7A:6E:36
Certificate issuer:       /CN=7da3df33-ad97-4a08-81e8-054f28d035ed
Certificate serial:       010D0C9F4328584DD35B030C5CA9B1E088452880
Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     13660
IP address blocks:        199.253.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:03:0c:5c:a9:b1:e0:88:45:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=de4043a6-a9cc-48ab-a5bf-8edda5ee4c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:01:70:83:41:13:8c:f2:e9:c9:a1:78:0a:88:
                    8b:72:ee:17:3f:37:ba:97:c2:79:73:64:ed:a4:f7:
                    11:a0:c7:ca:58:d5:a3:93:97:cb:ec:8d:7e:3a:c5:
                    45:5f:a4:41:24:d1:ba:7c:8e:48:4e:df:9c:73:15:
                    30:84:f1:af:51:ab:ed:33:a7:69:db:84:85:a1:3d:
                    a4:b6:b5:a0:91:50:2c:ef:40:ac:d7:46:0d:49:e9:
                    60:d0:d6:bc:53:a2:10:43:04:e6:3d:f9:0b:5f:4b:
                    ee:68:6b:62:39:47:89:41:67:60:d7:f0:3e:ad:da:
                    c4:8c:0f:fb:f1:1c:b1:0f:4b:41:f5:9d:96:3e:6d:
                    e3:04:e2:b5:85:0d:85:10:99:92:7f:37:c0:55:ca:
                    dd:e0:e3:6f:98:6b:08:0d:94:11:7f:00:f7:d8:34:
                    33:4b:5b:52:df:ca:66:59:a2:65:4f:a9:13:96:54:
                    24:bd:0d:00:c4:85:a6:36:aa:62:75:1d:94:bb:58:
                    56:b9:77:16:81:69:f2:58:1e:85:a2:e6:be:a5:b1:
                    6a:99:76:69:99:2f:55:f6:1a:a0:40:7f:77:25:56:
                    2e:6d:bf:28:0b:32:92:bf:9c:26:89:a6:7e:20:22:
                    ad:0f:ea:a0:a1:c6:b4:84:ea:cd:35:34:ab:1e:cc:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:59:02:01:F2:22:33:75:FE:29:5D:C7:67:A0:F0:82:98:7A:6E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl

            X509v3 Authority Key Identifier:
                keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.253.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:e4:32:46:7d:0a:36:af:62:eb:c4:0d:33:74:93:90:65:14:
         34:8e:40:6e:fc:b7:83:dd:31:25:99:f8:37:7b:a9:39:dd:ec:
         ae:c6:f1:d8:c1:47:ba:e9:99:85:18:d8:82:25:bb:2a:30:59:
         48:53:b7:95:bd:76:5a:b7:4c:59:32:56:e1:d8:bc:5e:de:1a:
         98:64:d4:36:33:7e:72:28:68:25:07:cb:ae:0a:89:61:c9:00:
         66:3b:cc:7c:7b:22:36:54:81:63:c6:56:2c:fc:4b:73:fd:02:
         6d:89:6e:69:97:68:1e:17:32:63:b1:bb:c5:5a:ec:b9:ae:ff:
         7b:75:ce:e3:4e:bb:4c:d4:bc:86:c6:c0:cf:af:62:e9:78:28:
         08:a4:8e:6f:55:92:77:9a:f0:11:21:31:fa:71:8d:8f:8a:99:
         65:df:cd:2b:cf:13:7e:85:45:9a:92:65:11:1b:bf:69:c7:10:
         76:6b:90:ac:46:f8:54:06:a0:7a:f2:a8:42:39:90:9b:50:e9:
         8e:c7:77:9e:ff:98:57:31:fd:3c:7e:a6:87:cd:f4:96:6c:31:
         3d:10:7e:4c:83:63:17:0f:a7:44:b4:85:ec:1a:d6:04:67:e9:
         98:13:2b:ec:e0:0f:d7:ac:48:cf:2c:f0:be:1b:53:1f:d5:62:
         84:0d:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:13:34 2026 by rpki-client