Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/1d41505a-addb-3aa8-ac3c-af6315616f55.roa
File:                     1d41505a-addb-3aa8-ac3c-af6315616f55.roa (raw, json)
Hash identifier:          zrx6+6+O/Jg1F/z9+0m65JB6WEC/6HvTwbFCuRPsjXc=
Subject key identifier:   3F:87:82:30:48:3B:BB:D5:58:9E:A1:5B:C5:44:25:80:D9:AE:C4:18
Certificate issuer:       /CN=db54b165-1bfa-4624-b8bc-680c5d3ac9c2
Certificate serial:       010D0C9F4328584E1FA9A23E63E49BD454DD0E00
Authority key identifier: B3:DC:97:63:79:E1:2F:3F:C9:1E:EB:26:1B:68:74:93:66:66:01:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/1d41505a-addb-3aa8-ac3c-af6315616f55.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     395990
IP address blocks:        168.245.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a2:3e:63:e4:9b:d4:54:dd:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db54b165-1bfa-4624-b8bc-680c5d3ac9c2
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=06fdf8f3-4217-4d3e-badf-014dc8da5a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:f8:83:96:20:92:b9:e3:26:13:b2:d6:f4:
                    9c:ee:b5:11:ab:13:77:df:a0:46:e3:2e:08:63:c5:
                    df:1c:50:09:f6:5f:85:e9:dc:e8:49:f1:1d:3c:7b:
                    0a:85:f7:9e:f4:06:23:af:f8:b7:00:d9:7d:67:69:
                    b0:f7:6d:a5:a1:58:4b:1e:42:aa:a5:b6:4b:56:77:
                    82:e9:27:2e:99:a9:a2:ee:35:b0:19:b5:58:a5:1a:
                    a2:fa:c6:03:83:94:83:5e:56:11:1d:01:aa:ad:5b:
                    c9:23:ac:d5:7a:04:51:7f:ff:db:eb:88:84:76:e6:
                    00:29:d5:4c:ea:f9:e6:7f:b3:4e:67:07:a1:1a:f4:
                    69:b9:53:98:f0:a4:fc:ce:ea:31:b9:30:c0:d9:ff:
                    a3:d9:71:9e:0f:32:a4:0f:ae:3d:8d:fb:b4:9a:b8:
                    d4:33:e1:4e:e3:1f:00:4c:5f:09:61:f7:af:c9:27:
                    0b:28:73:52:b6:03:08:97:5b:00:61:89:5c:40:4c:
                    7b:74:f0:12:cb:3b:ec:fe:87:a2:7c:4a:a8:5b:0e:
                    a0:28:88:f9:e8:85:59:20:20:15:46:dc:11:b7:9d:
                    a1:36:10:ee:70:1f:f0:92:a4:d7:18:63:e8:17:62:
                    1e:c8:c2:db:b3:b1:8a:96:4d:cc:a4:3a:be:f4:ef:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:87:82:30:48:3B:BB:D5:58:9E:A1:5B:C5:44:25:80:D9:AE:C4:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/1d41505a-addb-3aa8-ac3c-af6315616f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.crl

            X509v3 Authority Key Identifier:
                keyid:B3:DC:97:63:79:E1:2F:3F:C9:1E:EB:26:1B:68:74:93:66:66:01:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:21:6a:9f:f1:9f:7a:86:51:03:18:21:ba:80:49:40:a1:
         18:84:44:82:6b:c7:4f:3f:16:00:ec:cf:71:0a:8f:d3:8c:13:
         76:ca:24:e0:2c:9b:db:42:75:07:35:a3:f7:0b:1b:b9:de:62:
         ce:6a:33:72:a0:7e:1d:25:cf:50:68:58:f9:0f:0b:6a:d8:96:
         aa:70:25:7c:b0:fa:f2:8b:45:d6:80:99:fa:00:be:94:35:08:
         fb:f8:da:ab:46:74:2b:3f:4c:bf:42:58:c2:25:66:d7:e0:e1:
         40:f4:c5:da:09:38:a6:34:fb:3d:af:b0:ca:6e:81:e6:e6:4e:
         67:cb:55:72:a3:ff:07:d0:64:21:43:56:87:97:28:20:b8:3f:
         ae:52:6f:53:80:bf:f4:2f:10:5a:8e:ed:dd:4d:2d:52:a2:36:
         42:bd:88:47:09:10:e8:24:56:e4:38:7c:a6:ae:06:aa:ae:7c:
         87:08:c3:6c:41:ba:a9:3a:9b:c6:fd:52:21:d5:d4:fc:35:9f:
         a0:25:23:8b:6e:1f:f0:c6:fe:7e:ab:0a:50:d4:68:61:3d:99:
         20:7a:81:ad:3b:dd:63:59:22:9d:41:c2:b8:96:e3:48:f4:94:
         7c:f3:04:d1:a5:85:fc:ab:e6:7d:fa:a9:3d:40:52:a9:04:98:
         8b:be:7e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:05:13 2026 by rpki-client