Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa
File:                     b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa (raw, json)
Hash identifier:          NRMqhAE5HHKCjbAPE1Pb0lDMpt0vtK6+/Zyqi2Tzygk=
Subject key identifier:   D8:8A:71:69:89:9C:3F:79:EE:65:C9:45:64:AB:2E:16:E7:69:DD:D8
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F4328584E1FA99DE0063A54D8449D1570
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     53334
IP address blocks:        216.59.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:9d:e0:06:3a:54:d8:44:9d:15:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=33595b89-e180-4a8d-af8c-690c1e359071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:ee:94:9c:60:aa:a3:42:24:f7:4e:51:ae:
                    83:8f:7b:32:4f:c3:92:1c:c4:f1:69:87:15:29:83:
                    fb:a9:0c:8f:d9:33:1c:49:70:0d:97:fe:b9:f7:0b:
                    58:94:8c:ed:5f:fd:df:af:9c:b6:fc:06:25:58:8b:
                    1b:2d:38:66:00:94:e1:af:81:be:d2:fe:5b:a1:55:
                    6c:79:79:7d:7c:b6:3f:27:d6:2c:ff:52:e7:17:65:
                    de:95:10:7a:28:e6:71:90:82:70:97:ec:52:4f:6e:
                    06:6a:7a:7b:1c:71:f3:8d:63:e6:b4:1d:1d:19:1e:
                    fd:a3:bf:80:2e:a4:06:04:5e:1b:ec:32:1a:12:4e:
                    2b:86:9c:66:39:d6:57:e8:1c:87:1a:de:ee:51:91:
                    d0:c2:0b:3b:05:3a:5b:37:6d:49:e4:f0:42:1e:f5:
                    5d:ad:1a:ad:62:ef:cf:3f:18:68:8b:08:c1:67:71:
                    3d:bd:d6:b3:53:d1:72:9f:3e:53:aa:8e:53:84:ab:
                    ab:0d:78:15:28:8b:94:0f:71:96:c4:b9:ec:a7:40:
                    10:42:ca:82:6f:ec:29:aa:6f:fc:b2:80:dc:ec:f5:
                    d1:42:97:ae:6e:2f:30:c1:25:2a:ca:5b:fc:34:58:
                    78:04:8f:fb:d8:ef:91:2a:bc:ff:3a:36:a7:32:49:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8A:71:69:89:9C:3F:79:EE:65:C9:45:64:AB:2E:16:E7:69:DD:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:3b:96:45:03:0b:9b:40:a5:d2:02:05:42:e7:41:d3:bc:6a:
         f7:34:7d:44:de:11:1a:57:ba:29:9a:76:be:47:4f:62:6a:41:
         cf:d6:4d:9e:b3:96:86:29:b0:c5:80:bd:68:57:e8:5a:a4:bc:
         9d:58:81:12:67:65:77:47:62:a6:65:d9:ce:5c:63:19:10:e5:
         9c:5f:8e:4d:d7:f1:14:d6:d8:46:67:6f:13:42:ec:ad:2c:e7:
         ad:2a:73:20:f3:f7:e9:2b:76:bd:7a:bc:b7:d0:35:37:9d:57:
         05:cd:4f:4f:50:fc:c0:82:6f:98:4e:83:f3:fc:c4:37:77:e5:
         5c:f7:09:a2:9d:46:30:e5:13:e0:30:2d:98:ff:82:d5:0c:6f:
         6a:2a:60:a1:ca:e0:c4:1e:51:76:db:fd:07:3b:84:c9:74:85:
         08:1b:03:98:71:82:4c:e9:37:93:26:62:51:49:57:ee:e0:07:
         0a:34:2d:12:9d:51:a3:55:94:66:c1:00:b7:24:da:06:1c:7c:
         18:08:6a:c6:58:05:82:fd:ce:e5:6c:0b:2a:69:aa:b8:06:07:
         a5:f1:c4:c8:ef:e2:7b:63:7c:d1:4e:7a:de:4c:bc:d1:d7:cf:
         15:b1:93:02:00:74:b7:a7:5f:6c:12:d7:fe:63:8f:82:01:54:
         ac:fa:b7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:08 2026 by rpki-client