Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee257664-72e0-39d7-8e10-e22c63bb1fdd.roa
File:                     ee257664-72e0-39d7-8e10-e22c63bb1fdd.roa (raw, json)
Hash identifier:          CcsomFEf65WSpqZ6UdRqXuWyiu0j9QX5LAPYn0OahwA=
Subject key identifier:   E1:02:50:32:45:DF:87:14:65:00:8F:88:43:D2:92:93:99:67:1E:B9
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584E1FA9A5861E63DB2BD0D25200
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee257664-72e0-39d7-8e10-e22c63bb1fdd.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     1403
IP address blocks:        107.159.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a5:86:1e:63:db:2b:d0:d2:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=6be17dd2-39cf-423e-8a22-1d708b71f55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:21:29:b4:bd:b8:3a:cf:55:2f:20:e3:c2:2d:
                    ea:b1:fc:0c:b3:64:8d:b7:b5:b8:40:d7:a1:c9:02:
                    e2:4b:31:73:f8:00:78:82:3a:ac:5b:d7:0f:47:50:
                    a1:25:b4:fc:b1:67:b1:c5:af:f2:31:71:05:42:8e:
                    82:b8:db:0e:ff:94:73:42:4c:4a:5e:86:b7:c1:ae:
                    55:75:3b:ff:a3:e5:be:1a:a4:cc:da:65:c5:90:26:
                    18:84:e4:ee:d3:38:22:45:7f:ee:2a:03:33:31:08:
                    ea:11:98:1d:df:d2:14:6e:10:70:44:c4:32:55:68:
                    8a:bd:fc:a2:a4:53:82:d6:c6:1c:25:56:89:a5:c8:
                    3d:a1:6d:a5:be:fd:78:b6:d6:b4:5f:b3:1a:7a:6f:
                    b1:c3:00:1d:d3:78:95:e4:26:0d:82:b1:2f:3b:00:
                    45:4e:34:48:18:45:78:fd:92:99:4f:63:04:58:51:
                    4f:a5:f8:6f:e5:1a:65:ad:9d:08:63:bc:05:05:09:
                    b8:cd:15:94:3d:f9:74:c6:a2:5a:4c:af:11:36:f4:
                    62:43:b4:c9:72:8f:13:bf:ab:30:0d:14:9d:61:24:
                    ad:aa:c8:8a:8b:0e:a3:72:05:8c:41:f7:8c:d4:c6:
                    f4:d6:df:d9:a6:e7:18:83:c7:71:3b:b6:64:98:d9:
                    fa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:02:50:32:45:DF:87:14:65:00:8F:88:43:D2:92:93:99:67:1E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee257664-72e0-39d7-8e10-e22c63bb1fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.159.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:c3:43:2f:f1:c9:22:a2:71:dd:7c:8b:90:9e:55:cb:58:36:
         24:0d:04:5a:4f:a5:7b:30:e2:2d:8e:f9:39:6b:e4:ef:6d:99:
         03:f2:8b:9e:1d:8e:ab:22:2d:9c:18:89:a2:7b:03:27:3a:e7:
         00:f6:89:06:14:c8:0b:a3:e9:ee:6f:03:d1:e5:54:89:0b:f9:
         bf:f5:d8:c9:68:65:ea:f1:10:39:10:e5:83:c6:99:6a:51:44:
         de:98:4f:73:19:86:96:84:8d:8e:54:9c:cb:ce:b2:08:00:5c:
         a4:3f:39:e7:cf:f3:c8:a2:bd:1c:cd:46:31:e8:67:d3:3e:4d:
         fb:94:81:c9:ca:aa:da:32:a0:ba:f7:36:8f:59:80:4c:fe:73:
         f9:00:85:29:e3:a5:37:dd:c0:48:b0:51:f2:ff:da:a2:50:89:
         c2:81:65:07:40:fa:c4:08:40:db:52:73:5a:55:bf:e0:af:e6:
         f2:ea:50:fe:c3:85:26:06:0a:eb:9b:1d:5f:b5:e9:0c:e4:4b:
         90:bc:c8:d4:09:cf:e0:af:ab:3b:3d:6e:fb:26:fb:4e:f9:06:
         42:42:e0:3b:c9:3d:1f:c2:19:19:96:67:c4:81:93:22:ba:86:
         56:f5:7e:d0:82:69:f2:fa:fc:16:aa:8e:a2:5b:5b:62:3f:9e:
         75:99:fe:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:58:22 2026 by rpki-client