Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/04980fed-5bfa-3171-ab1a-17818adcc64e.roa
File:                     04980fed-5bfa-3171-ab1a-17818adcc64e.roa (raw, json)
Hash identifier:          e5Az8vbtdYL3msb1U6WISAvwqaMO86fpv3ofYZVK8oE=
Subject key identifier:   31:DE:54:AA:CA:AA:F2:05:46:F9:7E:8B:5B:0F:AA:64:28:05:C1:98
Certificate issuer:       /CN=cb73ddb9-215c-471d-8f60-61fdc9b87885
Certificate serial:       010D0C9F4328584DE2B5E8E3EC331BAE3B9995C0
Authority key identifier: 0B:73:A6:AA:8D:EB:EB:F5:ED:E7:CF:1B:7E:24:8C:70:F6:A2:74:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/04980fed-5bfa-3171-ab1a-17818adcc64e.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     40907
IP address blocks:        67.199.244.0/23 maxlen: 24
                          2620:134:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/cb73ddb9-215c-471d-8f60-61fdc9b87885.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/cb73ddb9-215c-471d-8f60-61fdc9b87885.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:e8:e3:ec:33:1b:ae:3b:99:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb73ddb9-215c-471d-8f60-61fdc9b87885
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=587725d5-5332-4498-a7b1-57fbe392585f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f2:76:af:83:5a:82:75:8a:8d:39:0d:db:35:
                    0f:c2:5b:90:7d:cb:f8:05:28:ab:9b:72:54:3f:a2:
                    77:61:0d:17:48:46:59:c5:58:8a:96:77:81:21:fc:
                    e7:b7:b1:3e:e5:2d:6e:85:ac:eb:e7:43:91:62:8d:
                    b7:dd:99:28:b3:6c:bc:72:43:f8:a9:8d:f9:b8:af:
                    df:ae:d7:f8:8c:a3:00:66:f4:94:8a:f7:7f:79:e2:
                    27:b6:52:e1:d4:00:fa:e6:ce:65:c1:b0:61:dd:b7:
                    d2:3c:76:6b:ed:3d:00:b5:fa:28:85:7f:2a:5c:20:
                    06:09:39:b5:df:ce:12:df:d6:93:f3:14:36:16:9d:
                    92:67:e8:6e:19:7a:65:a8:94:1c:64:ed:7e:86:f1:
                    5c:b8:4b:f2:24:ac:7b:73:88:90:b2:9a:c9:aa:33:
                    91:37:e4:11:c6:31:a0:23:5c:0e:11:24:4a:87:d8:
                    6a:97:ab:89:88:d4:37:2f:1e:a3:d1:d8:4d:13:6f:
                    f9:ca:3f:b5:6f:38:33:ac:dd:9e:6c:81:0a:6d:2e:
                    91:c9:21:1f:ac:ad:b7:d7:00:e2:f5:86:da:ee:9a:
                    3d:d8:68:d4:ef:14:a5:d2:21:78:e2:66:33:c1:b9:
                    34:9c:ef:3d:fb:e7:64:b5:80:48:83:5c:cb:35:e2:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DE:54:AA:CA:AA:F2:05:46:F9:7E:8B:5B:0F:AA:64:28:05:C1:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/04980fed-5bfa-3171-ab1a-17818adcc64e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/cb73ddb9-215c-471d-8f60-61fdc9b87885.crl

            X509v3 Authority Key Identifier:
                keyid:0B:73:A6:AA:8D:EB:EB:F5:ED:E7:CF:1B:7E:24:8C:70:F6:A2:74:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.244.0/23
                IPv6:
                  2620:134:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cd:3e:e0:aa:b9:a0:32:fd:3e:a0:ff:38:17:83:ba:53:78:
         6c:ea:73:d8:ef:09:da:dc:90:76:88:70:26:af:00:24:e5:d5:
         b9:61:4d:fb:0a:f3:b6:6d:96:ba:05:52:93:97:ec:e2:8e:70:
         23:78:99:b4:2b:68:eb:3a:75:21:7e:e1:a2:8b:bd:8a:18:90:
         87:6d:22:66:47:6c:bf:7a:6c:94:0f:91:bd:7b:f5:c3:c6:42:
         e5:66:62:85:85:27:fd:3e:55:24:75:4e:57:93:38:bb:ba:ea:
         32:c3:59:c0:c3:00:74:ef:6e:97:c9:74:d4:c8:2f:66:3f:6f:
         fb:ea:bc:14:a9:02:65:94:63:eb:04:b9:62:6a:5f:f0:c6:a8:
         9f:dd:93:68:06:e1:45:48:c8:4d:ff:bb:69:ff:21:f9:d7:3f:
         c5:97:a7:5d:b1:e4:06:4b:ca:f2:32:f1:b7:c4:f6:98:47:ae:
         15:a6:71:85:0a:1e:8c:ce:75:f3:ad:51:0d:25:21:20:79:05:
         7a:b2:a4:09:71:23:92:6e:7c:39:62:94:74:d6:19:5f:4a:52:
         33:89:ad:44:16:f9:b9:ac:d5:56:95:9e:dc:a9:02:4c:eb:f5:
         9b:f4:73:f3:89:bd:d9:61:c1:37:87:30:ed:30:3a:af:f7:17:
         7c:3d:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:17:48 2026 by rpki-client