Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/3d359667-78f9-3d87-b525-31bf659ba3c5.roa
File:                     3d359667-78f9-3d87-b525-31bf659ba3c5.roa (raw, json)
Hash identifier:          Jjg6GHJE1a49Y4Fns4d3ofDK0fsgk4pryNRQEVhGYCs=
Subject key identifier:   90:BB:A4:A2:DF:8A:B9:CE:F6:DA:13:A0:42:45:5B:F5:78:04:3D:6F
Certificate issuer:       /CN=ae6238c6-9389-4fbe-a6aa-24095966ea40
Certificate serial:       010D0C9F4328584E210EFBD76626A1B1D693D300
Authority key identifier: 22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/3d359667-78f9-3d87-b525-31bf659ba3c5.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     31868
IP address blocks:        216.129.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:fb:d7:66:26:a1:b1:d6:93:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6238c6-9389-4fbe-a6aa-24095966ea40
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=ce8d3ea8-e0d9-4a62-bcd0-6e6a506576fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:d9:4e:06:07:c7:c7:4d:dd:fb:b8:60:84:
                    26:41:7e:14:b0:05:34:d9:20:04:4f:2a:ad:5a:ac:
                    97:37:cb:23:ce:63:48:c3:f6:f7:33:c9:6b:10:39:
                    a0:73:87:39:49:e6:f6:25:11:fc:11:27:72:25:2c:
                    bf:99:0d:4e:c1:08:40:19:e1:de:5a:0b:4d:8c:29:
                    50:4b:96:35:28:8a:d7:61:ea:a3:0f:19:3b:c0:9e:
                    4d:4d:1c:aa:b5:08:40:f7:ab:e4:e5:c2:c7:df:88:
                    9f:95:0c:40:bd:3f:3e:7b:8e:4f:4d:ac:e4:e1:ef:
                    86:2d:38:f3:ac:d4:64:91:39:62:b7:ad:75:2a:a4:
                    f6:9a:49:88:3e:9f:9f:34:d4:37:35:42:d9:67:e4:
                    af:9c:00:b7:4e:2d:b6:9f:7f:fb:02:44:be:33:49:
                    3e:26:fa:d8:f2:46:0e:b1:7c:fa:56:a4:b0:6d:c1:
                    4b:85:7d:c9:ae:98:bd:4a:d1:c9:5c:03:10:aa:e3:
                    0d:4a:e6:29:2c:cb:b5:3d:23:f9:f6:8c:8d:83:2c:
                    5e:23:1d:2f:85:63:af:0d:0f:7f:0c:02:37:84:1d:
                    22:23:5d:de:65:83:f9:5d:b4:b6:ab:0e:5f:67:8c:
                    60:85:38:c4:2f:e1:31:01:b1:fc:1e:9f:c9:9d:ab:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BB:A4:A2:DF:8A:B9:CE:F6:DA:13:A0:42:45:5B:F5:78:04:3D:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/3d359667-78f9-3d87-b525-31bf659ba3c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.crl

            X509v3 Authority Key Identifier:
                keyid:22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d2:10:5d:0e:3f:45:65:ba:61:7a:f2:79:22:4e:8d:21:b4:
         65:f2:6b:23:73:1c:32:a3:a5:33:53:67:c1:a2:0c:c0:a9:dd:
         01:6d:28:01:d4:08:65:5b:61:81:b2:54:e0:fa:72:b8:0c:58:
         09:dc:cb:67:38:c9:e4:b9:5b:7b:5e:53:f9:f3:00:0b:65:4d:
         53:d7:56:db:af:2b:0b:d0:6a:f9:a2:dd:29:8d:f8:f3:2e:ac:
         03:a6:54:91:6a:9e:55:5a:a8:2c:31:20:84:0d:65:74:90:24:
         00:03:b0:91:45:4b:cd:74:8f:7d:01:f3:a6:d3:72:ed:54:d9:
         16:b3:5a:55:76:09:4d:f5:1a:12:2b:51:c9:84:52:68:b1:a9:
         ed:78:d6:1e:70:67:e6:a7:1b:3f:e4:80:dc:43:15:72:69:ed:
         f7:42:34:bd:4f:95:02:17:00:c3:74:f2:88:4d:2b:f0:06:0d:
         72:79:8d:51:6b:09:f0:a2:ed:64:fe:fa:d1:c5:88:81:dd:74:
         b9:ac:73:77:07:17:2c:a2:58:04:b7:59:35:04:db:38:ac:7b:
         f3:84:23:0c:fe:5a:ad:ae:10:b3:f1:68:94:12:db:9f:6d:f4:
         1c:5d:99:d2:23:de:f6:0d:54:79:e5:8a:2b:89:93:f3:25:7c:
         cd:1e:c6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:51 2026 by rpki-client