Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/e29fdbab-728b-37f3-b45b-55800fd076b4.roa
File:                     e29fdbab-728b-37f3-b45b-55800fd076b4.roa (raw, json)
Hash identifier:          afzjZyZ59jGfzhMSxMfxh7vQq/VAMDyyC4gLPSIEMJQ=
Subject key identifier:   9D:5B:95:04:B5:6B:6C:50:3F:40:7C:D2:03:40:6D:72:72:D1:A6:86
Certificate issuer:       /CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32
Certificate serial:       010D0C9F4328584E09CB3A24A1F889273CB9ED00
Authority key identifier: AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/e29fdbab-728b-37f3-b45b-55800fd076b4.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     63050
IP address blocks:        192.245.140.0/24 maxlen: 32
                          198.147.156.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:3a:24:a1:f8:89:27:3c:b9:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=f1cac63c-4c18-4082-afe6-429de787f289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:14:d2:0e:6d:a7:86:0b:58:0b:b2:40:36:
                    5c:1e:77:d2:3b:44:a2:b1:32:60:d6:9d:93:91:8d:
                    68:ec:df:b1:45:47:d5:cf:cb:17:44:51:73:f1:fb:
                    36:17:fe:49:d6:aa:6f:98:54:8d:44:71:4a:5e:3a:
                    a6:9c:fd:6e:3f:38:f8:e2:6a:6b:93:70:a8:ce:96:
                    cc:43:6e:df:8f:1e:40:c2:f4:60:58:99:b0:7b:cd:
                    79:f9:cc:85:4e:2f:55:29:7d:2c:b1:90:c5:19:d4:
                    6e:7f:24:70:19:b1:04:8a:a0:15:a2:e9:ec:da:b0:
                    47:f3:96:b9:c0:bf:16:23:b8:04:16:68:ac:eb:37:
                    69:c2:fa:1d:ac:a1:27:12:ca:89:73:c7:f5:76:08:
                    d5:0e:65:ab:f3:f5:b8:03:3d:02:0e:83:22:cc:ad:
                    cf:bc:12:0a:d5:0d:41:6b:bb:34:40:43:88:5d:65:
                    01:df:38:f2:02:33:fd:75:28:6c:44:74:ef:8c:c7:
                    de:85:6b:d0:8b:4e:fc:98:e8:2c:dd:14:c2:50:a2:
                    c5:97:7c:28:0a:f2:d1:df:39:f2:8f:6a:71:54:c7:
                    55:20:27:36:ec:21:7f:9b:14:c1:5c:e6:6e:d8:b5:
                    78:e9:be:95:0a:4a:3f:72:35:fe:f2:28:71:5e:ae:
                    be:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5B:95:04:B5:6B:6C:50:3F:40:7C:D2:03:40:6D:72:72:D1:A6:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/e29fdbab-728b-37f3-b45b-55800fd076b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl

            X509v3 Authority Key Identifier:
                keyid:AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.140.0/24
                  198.147.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:48:2c:50:f3:ff:52:85:76:6d:d7:07:f5:0d:77:05:08:36:
         3e:d9:4e:69:c2:c7:54:88:51:1b:6e:4d:75:d0:52:78:e3:46:
         ee:0e:62:88:e4:a5:fe:39:8a:ff:9e:24:79:29:79:3a:47:76:
         96:95:e1:fd:46:82:76:a5:63:d2:a3:e6:ec:75:ba:b2:fe:23:
         0a:2b:fe:ae:4c:c4:d0:0d:37:58:19:ec:27:08:cc:ce:dd:ba:
         c9:8d:42:ea:40:f2:48:d2:ce:fb:d5:a2:83:30:62:7e:fe:f2:
         86:bc:02:d2:11:d1:ff:c5:96:98:80:4d:f7:c6:11:2c:c4:cf:
         71:47:e5:b5:9e:4c:ae:e2:47:ef:ca:ab:90:8a:a5:f9:52:b1:
         5a:e9:b4:5c:e2:d4:8d:2e:10:b9:09:c8:7a:ff:da:4a:3f:4b:
         82:d1:0e:9c:c6:04:72:f7:60:cb:b2:35:68:08:1b:c9:4f:53:
         3c:7c:15:49:2c:05:a8:fc:0d:c6:fc:fd:2d:49:8b:15:38:26:
         23:e5:7e:e1:27:cb:86:cf:10:8c:74:9e:81:e1:e0:63:43:d6:
         e7:03:f6:6c:5d:94:af:49:d8:68:aa:fc:9c:0b:41:d3:75:dd:
         3c:04:2c:a6:73:37:7a:df:50:7a:0d:f5:c2:91:96:f4:ff:b7:
         21:2c:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:50 2026 by rpki-client