Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/6a0554af-7437-369a-b4d4-9a1915634372.roa
File:                     6a0554af-7437-369a-b4d4-9a1915634372.roa (raw, json)
Hash identifier:          w+g6dKBHZNh9T4lo0lBjkNSE9CLQ1rgkzlSNYJfiYpM=
Subject key identifier:   EA:A8:44:D3:BA:80:CE:ED:20:2A:06:AF:9B:A0:2F:4E:FC:ED:98:27
Certificate issuer:       /CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48
Certificate serial:       010D0C9F4328584E1FA99D38057B7F9CF7CF3E80
Authority key identifier: A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/6a0554af-7437-369a-b4d4-9a1915634372.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     2552
IP address blocks:        65.254.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:9d:38:05:7b:7f:9c:f7:cf:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=eee14c8f-c7e0-4acc-886a-69945923373f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:e9:b7:c1:8d:6f:e5:6d:fa:3c:bd:85:2d:
                    aa:d1:e5:70:5e:05:0b:33:a1:9a:cf:07:20:46:10:
                    22:81:b1:e5:0c:97:34:a7:7a:5b:16:67:26:d3:65:
                    69:bf:d4:0a:2f:99:33:a7:1d:bf:20:ad:15:96:1c:
                    a0:47:e4:20:13:0b:3a:32:d8:b5:d6:48:9d:8c:ed:
                    ee:80:c7:a8:bb:1d:bd:27:22:ac:7e:7c:15:62:54:
                    40:dd:7c:19:00:20:d5:d1:89:4a:42:50:11:12:7d:
                    ce:ac:d3:d6:5b:8c:03:e0:8d:1e:c6:51:54:95:60:
                    ea:37:a6:6c:0d:cb:83:92:8a:d3:02:e7:e3:b2:25:
                    e9:2c:09:e9:47:97:d1:ee:2f:e0:48:29:2b:29:bd:
                    48:16:b0:72:19:1f:53:1a:65:24:44:5e:46:9a:0d:
                    ab:f4:9d:32:3a:b5:30:c8:ed:ef:b9:b0:ab:25:9d:
                    5c:65:d1:04:54:78:99:22:9f:84:86:e4:30:e7:c9:
                    8d:81:7c:04:b3:e0:62:c7:f5:c1:f4:dd:73:61:ff:
                    3c:ff:0b:d3:04:18:2a:ce:fe:17:87:43:0f:7c:1d:
                    f1:02:28:87:c4:de:e7:88:61:60:56:01:aa:bc:35:
                    f0:e2:7c:3b:1c:a2:fe:05:1d:af:a5:8e:b7:4c:26:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A8:44:D3:BA:80:CE:ED:20:2A:06:AF:9B:A0:2F:4E:FC:ED:98:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/6a0554af-7437-369a-b4d4-9a1915634372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.crl

            X509v3 Authority Key Identifier:
                keyid:A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:36:27:26:c0:62:1d:d5:c9:4c:b2:fd:f1:a5:36:48:00:16:
         b4:b0:0c:43:29:dd:7b:89:25:58:11:f1:8f:ef:d2:b0:01:47:
         8c:4a:d5:9f:6c:98:44:da:26:58:7d:8c:fb:a7:b8:04:2a:1d:
         22:d8:50:4c:fd:43:4b:4f:80:a9:3d:c3:3f:d3:9a:5e:e2:7d:
         51:bd:21:bf:e1:9d:ee:e5:e5:6c:3e:37:fa:9b:53:dd:b0:6d:
         7b:66:e4:fe:8f:e5:8f:a3:33:9b:d2:c6:f1:69:74:0c:06:63:
         d4:b3:7b:02:bb:bd:03:d1:1e:3f:1c:cc:bc:ab:b4:a2:2b:50:
         9c:bf:a6:49:6b:e5:ae:53:bb:31:97:bf:30:6f:6f:7d:68:98:
         cd:c0:8c:79:e2:6a:da:54:ff:6b:21:46:ed:44:7b:ad:bb:e6:
         ce:06:9c:11:46:b2:03:c0:d5:2d:f5:66:6b:65:a9:33:3c:83:
         7b:3c:27:38:46:97:e4:27:93:a4:06:05:fc:05:6f:e8:9c:9e:
         79:7f:22:92:fc:9e:32:44:55:cb:94:b0:67:ce:bc:27:46:bd:
         6d:0a:a3:d9:fb:ff:1b:c7:dd:3f:95:09:4a:fe:af:bd:95:95:
         86:37:91:5d:f0:ef:c8:f3:a4:86:49:bc:46:50:e7:e2:bb:72:
         e2:e9:99:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:23:59 2026 by rpki-client