Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/930cac12-3e16-3d53-81df-1e764a61df53.roa
File:                     930cac12-3e16-3d53-81df-1e764a61df53.roa (raw, json)
Hash identifier:          ymdUFqV+M4JEs26HIhgyZkofOhaJDJIqP7CXTun6RHU=
Subject key identifier:   C5:C4:59:3D:4E:A7:48:83:70:A8:52:87:C2:20:0A:9C:74:6A:0A:B1
Certificate issuer:       /CN=84facd9b-9eda-4887-bc69-899a3c3aec64
Certificate serial:       010D0C9F4328584E1749867E8B37FDF2F6843480
Authority key identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/930cac12-3e16-3d53-81df-1e764a61df53.roa
Signing time:             Sun 07 Jun 2026 09:00:13 +0000
ROA not before:           Sun 07 Jun 2026 09:00:13 +0000
ROA not after:            Sat 05 Sep 2026 09:00:13 +0000
asID:                     63183
IP address blocks:        142.249.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:17:49:86:7e:8b:37:fd:f2:f6:84:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84facd9b-9eda-4887-bc69-899a3c3aec64
        Validity
            Not Before: Jun  7 09:00:13 2026 GMT
            Not After : Sep  5 09:00:13 2026 GMT
        Subject: CN=a3e039ab-7f7d-4a64-a20a-3a08fd7d7249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:5e:e2:eb:3b:db:ac:b0:55:ba:96:03:a4:
                    98:7b:60:b6:45:00:80:2d:ff:67:df:59:7d:0c:dc:
                    e5:fc:27:7d:f4:2d:2b:d9:58:08:08:d6:05:d0:db:
                    78:ab:80:62:f4:a6:fa:78:66:c7:4d:d4:23:1a:13:
                    61:49:84:cf:7f:21:d4:19:22:68:c0:0d:80:75:a5:
                    25:75:11:0c:aa:84:e3:d1:4d:ef:a4:ea:51:be:b8:
                    66:ce:1a:e6:18:c1:99:8d:cd:e5:d9:e3:7d:66:56:
                    a3:f8:6a:6c:f7:eb:0c:8f:3d:a7:7b:a9:75:3d:80:
                    a9:e9:67:e7:d5:de:89:c1:79:90:4d:20:db:5c:e0:
                    31:09:55:ce:df:1f:4e:04:36:28:4b:36:fc:df:c3:
                    fd:86:f1:29:a5:4f:22:16:c1:a3:68:17:37:d3:60:
                    da:db:70:73:4f:7b:96:bb:8f:6d:9e:e0:80:0d:bf:
                    3f:fe:02:ff:93:2e:c3:3b:fa:12:c3:ba:b0:ea:3a:
                    d8:07:23:9c:bd:c8:87:87:a0:5a:7a:53:28:55:ef:
                    e5:4e:f1:00:c7:2e:b9:11:75:0e:c2:6e:07:66:ab:
                    45:32:02:a3:4e:33:06:a4:d1:77:78:81:a6:77:b2:
                    1d:67:2c:3e:e1:14:7e:44:39:c3:c9:f1:9d:cc:3d:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C4:59:3D:4E:A7:48:83:70:A8:52:87:C2:20:0A:9C:74:6A:0A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/930cac12-3e16-3d53-81df-1e764a61df53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl

            X509v3 Authority Key Identifier:
                keyid:C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:89:ac:46:41:8a:c1:94:9c:01:73:7f:e1:02:54:f9:ac:cd:
         9c:19:3b:57:22:70:c4:bb:ea:21:e1:36:35:1b:69:1e:cb:53:
         c6:76:17:39:2a:f6:ec:7e:da:f6:e9:b7:c1:3f:a3:be:58:3b:
         e7:9a:ab:8f:36:89:0c:5b:dc:b8:9b:fd:c4:75:6b:e7:a5:bd:
         cc:7f:9a:8a:eb:f2:61:ec:0c:a0:10:7f:e3:d8:e2:e6:cf:7b:
         f3:31:cf:dc:43:18:66:3e:00:21:37:4d:5b:29:1d:55:17:b9:
         b5:a9:f9:7d:e8:3d:81:c6:27:87:41:c9:9c:d7:44:9a:33:7d:
         4f:87:2e:99:21:cf:cd:bc:69:85:ec:29:8d:ff:85:0c:74:a3:
         f7:f2:ad:a5:0f:51:3b:8d:d2:22:fb:e7:94:9f:82:ce:16:d1:
         81:ab:7d:0c:56:df:92:d3:e7:20:b9:c8:9b:52:e8:72:61:9c:
         ac:b7:e5:d2:66:f5:10:b5:ba:94:08:f0:52:84:07:c3:7e:78:
         e1:e0:00:2c:22:00:c4:90:51:05:75:0d:30:47:61:94:ca:9b:
         a0:95:15:66:1b:de:98:5d:9f:61:c3:f2:8a:af:f6:14:8c:19:
         e9:99:5d:9c:c7:b9:82:b0:a6:28:3d:6b:c6:9c:1c:71:1f:85:
         bd:b5:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:38 2026 by rpki-client