Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/da48e2b0-51a1-3344-a379-970483f014db.roa
File:                     da48e2b0-51a1-3344-a379-970483f014db.roa (raw, json)
Hash identifier:          KWKlj/jHFpq2pg1BkG7Fnf3j+SSNt1kRVk/fhTpIuQg=
Subject key identifier:   E1:08:9A:F9:9D:E5:82:4C:2C:7D:61:8A:FC:57:65:CA:79:9D:2C:E1
Certificate issuer:       /CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2
Certificate serial:       010D0C9F4328584E1E4456A434798BD579049B00
Authority key identifier: 52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/da48e2b0-51a1-3344-a379-970483f014db.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     6528
IP address blocks:        67.213.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:56:a4:34:79:8b:d5:79:04:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=6802a120-706a-4620-9a50-b0b3585046e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:c2:12:c2:84:4a:78:1a:a1:38:3b:e8:44:
                    2f:dc:2e:86:72:30:64:7c:c7:5b:6d:02:df:b9:62:
                    0e:e4:39:28:d7:cf:25:62:a8:55:f7:b4:97:e4:0f:
                    d9:25:93:62:31:6a:b8:9c:85:00:c6:5d:47:90:d7:
                    0a:1b:ef:26:a3:33:93:76:ee:e2:97:df:a9:4f:24:
                    ef:28:13:d9:b4:c2:13:81:27:1b:6a:76:25:bf:60:
                    39:ba:0d:0b:40:12:83:d4:84:d4:b5:2c:fc:64:1c:
                    e4:f7:8b:26:ab:e9:65:cf:29:83:75:64:7f:6e:16:
                    86:10:31:b5:01:cb:2a:b6:b8:9c:4e:63:aa:92:19:
                    62:b3:e5:f1:f2:01:4b:4c:b6:3f:87:91:a4:74:2c:
                    ef:c5:11:80:95:74:ec:05:cd:6a:12:ea:0c:84:02:
                    e4:20:43:21:6c:45:25:6f:32:10:db:40:e9:3a:62:
                    cf:07:90:e6:e9:ec:9d:3b:85:de:05:70:a9:75:25:
                    e6:a9:f0:db:88:1b:dd:7d:84:6e:b5:41:94:d1:76:
                    45:d2:bb:a5:7f:a6:b4:61:fd:4e:ad:d1:9f:5d:e6:
                    0d:7c:a1:98:b3:8b:cc:29:9f:60:4d:0f:62:16:b0:
                    e3:d3:b5:74:49:e3:03:de:2a:0d:d5:da:b5:8a:e4:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:08:9A:F9:9D:E5:82:4C:2C:7D:61:8A:FC:57:65:CA:79:9D:2C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/da48e2b0-51a1-3344-a379-970483f014db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl

            X509v3 Authority Key Identifier:
                keyid:52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c0:d2:e2:05:c1:48:c5:b1:08:a8:af:a4:b5:ef:87:0c:e7:
         43:73:0e:74:e0:fd:05:92:b8:46:cf:3a:0b:ca:4c:c7:e5:d1:
         e4:3c:43:31:ca:fa:9c:39:ae:a8:53:b3:08:0a:18:ee:8d:96:
         da:8f:d8:7f:de:56:e2:75:18:a5:16:c0:df:4e:11:3d:e5:73:
         47:03:a2:c1:24:bc:74:01:e6:d2:eb:c1:94:47:76:29:a2:a2:
         1f:c7:c8:54:51:b4:bd:eb:fc:bb:ac:3f:d5:90:6d:99:2d:5f:
         b5:b9:3f:fc:27:f4:fc:93:f2:d5:bf:25:f6:38:46:60:a7:28:
         fe:d2:ac:3a:b6:12:06:db:8e:ee:e3:97:65:04:4a:78:c1:66:
         7c:9e:9f:b3:24:03:04:9c:0d:a4:9b:83:a4:15:7b:8f:38:f0:
         6c:01:75:6f:c6:e8:8f:ef:80:19:51:f2:e0:84:36:b7:00:91:
         c7:81:ba:64:11:bb:5b:e3:53:24:4b:20:cb:35:25:e2:6f:94:
         41:fc:db:07:79:3f:70:68:11:57:74:b0:c3:a2:9c:ca:30:ad:
         08:af:3a:e6:4e:b4:0e:92:07:2e:23:0b:66:eb:8a:e5:41:70:
         6c:a0:34:51:58:4b:cd:16:75:7e:2a:32:c7:6a:20:22:a7:4d:
         ad:ed:2a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:47 2026 by rpki-client