Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa
File:                     fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa (raw, json)
Hash identifier:          SdIAGMFLpeNcYwfXR6Ard+JC0+uDp8YOfoFLGrdo3e4=
Subject key identifier:   51:ED:02:5A:4B:12:B1:DE:44:2C:B0:39:90:98:61:B9:79:42:9D:B4
Certificate issuer:       /CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd
Certificate serial:       010D0C9F4328584E0C1ED1146019C02F72379980
Authority key identifier: 52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     22611
IP address blocks:        209.163.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d1:14:60:19:c0:2f:72:37:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=531cbfa4-3a08-4f9e-bf38-1f301be08296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:84:af:7f:3b:16:fe:f6:af:2b:44:25:66:bb:
                    9d:b2:59:2e:b4:b5:4d:af:21:ec:92:c9:22:59:bb:
                    db:83:af:eb:e5:b6:b4:1f:f7:14:cb:ca:f6:d1:3d:
                    21:bf:38:d3:2a:c6:07:84:ef:d2:94:3e:99:c1:4e:
                    dc:7e:cf:ec:a9:d9:e1:14:a7:1d:3d:86:a6:cd:38:
                    64:0c:3a:62:b0:41:3f:31:9c:b5:f1:d8:2b:94:fc:
                    18:74:1a:58:00:88:da:3f:d2:dd:bb:16:66:ae:40:
                    7d:af:ec:f3:f3:b9:06:df:0d:a2:7e:78:0a:96:cb:
                    8d:43:c3:5d:70:68:f5:44:5b:81:6d:d8:f2:3a:57:
                    df:84:9d:4b:2b:76:6e:a7:ff:23:45:07:ed:7d:1f:
                    68:40:6b:88:6f:be:29:f6:1c:51:0f:30:5d:66:65:
                    5f:27:ba:9c:f9:c7:98:df:d0:37:71:5d:86:10:76:
                    fb:c0:84:30:ed:07:54:74:b4:b1:4a:f7:72:d1:a9:
                    6d:85:6c:f1:3c:9c:b0:8a:72:6a:8f:3c:a6:fd:0c:
                    01:1a:e2:6d:b2:e2:0c:3c:60:4d:fc:f8:fe:9c:73:
                    3e:53:f8:89:50:4c:98:0b:fb:42:d2:49:dc:06:1d:
                    83:53:4d:bc:18:f6:9c:19:44:da:5d:93:eb:f3:14:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:ED:02:5A:4B:12:B1:DE:44:2C:B0:39:90:98:61:B9:79:42:9D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/fb4a00c9-7f8b-3a5b-8362-3da4105e6390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl

            X509v3 Authority Key Identifier:
                keyid:52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d1:a0:a8:0b:d6:ea:22:b0:8c:89:f0:3a:27:67:02:bb:05:
         d3:96:73:3a:21:3c:ae:53:b1:0f:a9:50:c7:38:72:5a:ca:d7:
         0c:d4:ab:a2:0f:c8:37:a9:5d:8d:35:e6:71:39:3f:ce:2e:27:
         19:4d:1e:fd:1f:04:46:e6:c9:22:57:2f:94:86:67:8d:1d:5b:
         93:fd:f6:11:54:15:2b:bf:08:13:83:e6:ad:64:1b:39:cf:ba:
         19:00:a4:19:00:60:d3:54:e4:40:cc:19:27:06:94:68:4e:40:
         9b:cb:28:be:df:93:90:c8:0a:23:32:a7:25:ff:b9:57:b0:8b:
         0e:bf:21:fe:86:a3:a9:6f:33:a8:85:97:c8:9e:8c:66:03:4b:
         9d:20:7f:46:fe:ce:a4:58:58:b2:df:71:56:36:fa:11:1b:4e:
         e0:26:99:44:5e:29:f1:4e:cc:c1:a8:0d:5e:17:d4:88:a6:a7:
         d7:03:27:67:6c:7f:1b:43:63:f3:63:f2:fb:e3:a9:4e:5c:00:
         78:bd:3d:6f:21:73:e4:55:e3:bd:2d:01:65:b8:22:26:07:90:
         e8:43:72:ba:0d:e4:20:53:4a:b6:d8:57:a5:ab:40:76:c6:6e:
         c4:5f:4d:d5:bc:ca:6c:a1:cb:65:82:0d:e5:75:ee:cd:ee:45:
         27:02:d8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:30:28 2026 by rpki-client