Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/06573bb1-1af4-36af-a59e-a95c42e3ede3.roa
File:                     06573bb1-1af4-36af-a59e-a95c42e3ede3.roa (raw, json)
Hash identifier:          B8qUNB1t/UauNfNSMgJqazrXDNEG0fGdvPIYDiKA2FU=
Subject key identifier:   30:3F:88:EB:AF:96:35:D5:7F:31:EE:8F:07:6D:7D:20:94:88:E0:6E
Certificate issuer:       /CN=530ba529-ac94-44aa-8a24-334da5fccb1e
Certificate serial:       010D0C9F4328584E1A1441146BE5B5081D916DC0
Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/06573bb1-1af4-36af-a59e-a95c42e3ede3.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     46173
IP address blocks:        204.10.137.0/24 maxlen: 24
                          204.10.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:41:14:6b:e5:b5:08:1d:91:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=a13bdc43-c9fa-4c16-b8e4-b35191260f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:15:9d:8f:41:69:11:3e:71:0a:7f:d1:80:
                    b3:bb:2f:fc:de:5d:1d:2e:f1:38:47:18:44:a5:94:
                    15:65:e9:45:6d:a1:08:aa:6f:c8:fe:60:d7:93:da:
                    96:fb:a8:ae:fe:a3:c5:b7:7b:57:49:83:9c:73:9d:
                    cf:48:fa:73:20:ac:9b:d8:00:f3:6a:bf:6a:36:48:
                    fc:75:da:75:5a:88:eb:f1:e2:87:d2:c6:16:a8:34:
                    e3:14:43:c4:17:9e:78:eb:03:ee:57:03:a5:7a:81:
                    73:f6:25:6c:23:cb:4b:00:6d:6f:ce:37:2c:60:8a:
                    35:d9:44:5e:21:23:45:89:f5:a5:2b:7d:9f:78:7f:
                    d3:20:f3:af:21:1c:73:bb:7a:99:6d:42:89:09:8f:
                    0b:8e:fe:4b:8b:99:ca:56:f3:2a:7f:49:bb:91:0a:
                    5f:3c:a3:97:cb:43:40:c0:2f:a6:d1:0d:34:28:46:
                    aa:53:04:dd:eb:d9:d2:26:f9:fe:28:ef:98:d8:3b:
                    78:53:c6:34:f6:fa:51:6f:54:f0:6e:08:88:56:43:
                    77:86:08:7f:fa:bf:38:bf:d3:03:b4:72:7f:87:75:
                    0d:40:76:ac:86:c5:15:68:30:3c:f3:10:b8:0f:0d:
                    a3:a0:c7:0c:6f:bb:3f:c1:42:38:ad:3b:c4:cf:82:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3F:88:EB:AF:96:35:D5:7F:31:EE:8F:07:6D:7D:20:94:88:E0:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/06573bb1-1af4-36af-a59e-a95c42e3ede3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl

            X509v3 Authority Key Identifier:
                keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.137.0-204.10.138.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:80:97:94:82:61:86:93:85:aa:6f:f4:ad:c3:cc:25:e8:4b:
         32:2a:c2:3d:6a:8c:8e:26:37:ea:a3:95:dd:50:32:2e:d7:e3:
         63:f6:76:2a:bc:98:c0:e3:ee:72:9d:08:58:e8:4a:36:25:1c:
         75:01:07:f5:2c:1f:fe:d9:7c:77:eb:a9:8f:be:b6:c3:a4:ea:
         5a:aa:cd:62:c3:d1:4e:b3:5b:7f:16:40:26:84:41:10:62:34:
         4f:7c:82:8d:5a:14:81:5e:8e:c6:2a:f8:62:07:52:54:77:44:
         55:0f:57:26:a1:5c:2c:35:24:cb:0f:aa:1a:80:96:af:b1:7d:
         57:4f:34:27:e8:05:bf:13:d6:a8:4b:ab:b6:54:58:9a:2d:f1:
         cd:9d:f8:18:2c:a9:c8:ed:ee:f1:15:e9:7f:fb:3d:4c:75:b2:
         7d:6a:fe:f8:53:62:93:05:91:27:96:72:7d:b2:36:e2:b4:a9:
         64:b4:ec:97:f6:06:f8:bc:f2:5b:92:ff:87:ee:17:3e:0c:9d:
         76:90:fd:79:3d:10:45:f4:db:c8:41:6b:22:b3:d0:cb:65:6e:
         13:d6:ba:c8:c5:e7:75:a0:96:bf:1f:79:44:c9:d0:6a:ea:38:
         ab:92:21:e5:bc:c2:d7:4b:36:49:36:ba:7e:a6:e6:8f:cd:cc:
         24:bd:8d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:30:37 2026 by rpki-client