Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc1eab37-4c0c-3320-bfe1-98bfbc7cb32b.roa
File:                     cc1eab37-4c0c-3320-bfe1-98bfbc7cb32b.roa (raw, json)
Hash identifier:          htzroPfLxL/axyqmpM03YSg5qt+Ceb29s7vzKAY9O18=
Subject key identifier:   6C:01:11:97:59:CC:79:F2:13:A1:21:71:C7:C6:1A:73:E9:55:58:70
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E1FA9AE320B6D6253B73B0B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc1eab37-4c0c-3320-bfe1-98bfbc7cb32b.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     396615
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:ae:32:0b:6d:62:53:b7:3b:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=da8f8dc0-9b57-4989-8409-20ca4b7f9ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:55:da:24:89:35:fc:21:b4:d5:6d:aa:be:
                    7d:0a:e5:d4:4c:1a:c9:d8:7d:95:26:88:0e:b5:90:
                    88:89:10:92:ed:eb:b6:0f:4c:56:68:20:cf:93:e6:
                    5b:28:dd:d5:f7:af:3a:09:17:23:c6:86:18:8f:e4:
                    ae:2c:86:c9:01:65:36:16:c3:1f:8a:16:a6:47:11:
                    42:34:9f:4c:ec:6a:8e:98:70:f2:16:a5:67:d0:36:
                    83:50:30:ff:16:9b:ae:ff:2f:49:94:76:af:30:04:
                    5a:08:06:2a:86:b6:f1:92:95:e2:35:0b:e6:27:77:
                    01:62:97:fe:10:65:19:9d:e9:85:c8:a9:b9:0b:ee:
                    b4:f1:c9:37:00:fd:65:36:07:78:5f:17:ec:f9:a3:
                    7d:7b:d4:e5:38:d8:07:1a:ea:a5:a7:77:e5:bf:1b:
                    19:b7:9e:de:64:22:26:35:0e:2f:9f:4a:03:76:b0:
                    c4:12:8a:41:c8:3b:15:59:fc:64:72:63:b5:68:f8:
                    26:70:21:fe:7f:79:a9:ec:b3:1a:7b:4d:33:ca:4a:
                    39:d6:3b:73:d9:2b:04:9e:63:ad:90:07:0d:6a:c4:
                    c8:e7:fb:e1:09:4a:b3:31:72:68:51:7d:83:e2:4f:
                    9b:1a:15:06:08:38:b0:a8:a1:60:b2:50:e8:dd:f9:
                    3e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:01:11:97:59:CC:79:F2:13:A1:21:71:C7:C6:1A:73:E9:55:58:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc1eab37-4c0c-3320-bfe1-98bfbc7cb32b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e0:eb:77:cb:a8:78:92:36:c5:be:37:bb:44:11:25:3f:18:
         3f:83:4a:71:a8:ad:d0:59:76:08:65:f5:f7:30:e8:d8:db:0e:
         ec:6c:d0:d7:b7:8b:af:f9:5a:e3:34:82:94:9c:4d:f5:37:38:
         87:8f:64:00:98:2f:2e:a0:ae:22:49:71:10:98:ae:ac:90:ff:
         c3:d4:2f:d2:98:6b:8e:43:a8:b6:9e:02:64:67:2d:3b:40:45:
         eb:46:cf:76:12:72:4f:25:ec:91:7c:a6:ec:ad:4d:bd:27:e1:
         80:bb:c6:11:ec:e7:9d:95:22:b9:96:84:84:df:87:53:90:29:
         3e:cc:09:75:4b:fb:c6:8a:4a:a2:b7:92:10:51:3c:d2:6e:cc:
         76:29:9e:20:e6:0f:cd:eb:44:52:c4:13:ef:6c:d8:d2:ee:00:
         08:f1:3c:0a:db:b1:2c:23:69:dd:c4:be:c5:cf:ff:9c:8f:82:
         bb:45:ad:3d:71:a0:3a:cb:6c:3a:a6:d6:1f:92:fb:7b:07:d4:
         a7:04:21:37:9a:78:de:67:82:cf:08:56:73:7b:d7:41:3e:7e:
         83:41:cc:2c:35:65:65:cb:e6:b5:16:2d:0b:53:7c:65:8f:5c:
         7f:d3:35:b8:47:4d:bd:ac:15:d5:32:b1:43:80:b4:c8:13:91:
         d6:7e:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:23:07 2026 by rpki-client