Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/8aab8bbf-1f8a-3cdb-aa8c-94cb9fd0d4e5.roa
File:                     8aab8bbf-1f8a-3cdb-aa8c-94cb9fd0d4e5.roa (raw, json)
Hash identifier:          M1586MfPjv4mt8s4lxj/7qGpmbPjtnp24ScTsga0yok=
Subject key identifier:   C6:0B:8B:15:86:89:BA:CD:86:93:D3:9C:2D:AC:F0:80:10:E2:C8:D9
Certificate issuer:       /CN=3d6e534c-13c8-43aa-8c1b-6ea3c1731696
Certificate serial:       010D0C9F4328584D80FFEDEF585D4F608BAFE100
Authority key identifier: E2:CB:7E:14:50:AC:C8:36:98:CA:31:F9:DA:52:B4:DF:E7:1D:06:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/8aab8bbf-1f8a-3cdb-aa8c-94cb9fd0d4e5.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     399702
IP address blocks:        140.106.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:ed:ef:58:5d:4f:60:8b:af:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d6e534c-13c8-43aa-8c1b-6ea3c1731696
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=c6c7c85d-4577-4953-904a-d25cd7d93192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f7:5e:97:fd:6d:ce:97:4c:63:c6:d0:33:9a:
                    7a:a5:40:95:01:61:57:89:6b:1f:a7:c3:4e:87:96:
                    8e:12:75:83:48:11:07:05:56:6e:d6:49:c9:19:61:
                    32:b4:25:f5:f5:2d:11:90:92:88:dc:17:57:e5:12:
                    44:78:8e:a5:ac:d7:da:76:24:f6:c3:67:5b:9b:ed:
                    e5:58:45:ee:35:a4:82:4a:7f:49:90:a3:6d:6c:01:
                    5f:a5:51:a6:6b:6d:47:44:53:f1:0f:ff:13:d5:1c:
                    a6:08:21:f3:08:d8:37:8d:88:d4:0e:46:d3:08:54:
                    6a:21:88:cb:8f:c9:7d:08:0f:cb:d4:28:7a:28:20:
                    3d:3e:78:ee:93:3a:ab:c8:6f:1c:5e:c5:d9:e1:23:
                    ee:a4:5a:bf:5a:f4:ba:0b:5e:c0:bd:37:b2:37:8f:
                    1b:fb:44:e4:45:e0:c0:8b:e4:96:6b:41:f0:7a:66:
                    e1:24:df:63:bf:ee:a9:83:81:9b:49:1c:28:27:ab:
                    cb:e9:31:c1:53:4c:7b:5b:18:33:28:df:2c:ae:5e:
                    10:74:46:7d:79:14:3a:65:dd:95:66:74:4c:78:13:
                    0f:10:96:df:37:bf:69:1f:cb:40:c0:dc:29:38:f4:
                    b0:80:68:ed:08:70:03:fa:50:54:5c:d0:64:b2:45:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0B:8B:15:86:89:BA:CD:86:93:D3:9C:2D:AC:F0:80:10:E2:C8:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/8aab8bbf-1f8a-3cdb-aa8c-94cb9fd0d4e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.crl

            X509v3 Authority Key Identifier:
                keyid:E2:CB:7E:14:50:AC:C8:36:98:CA:31:F9:DA:52:B4:DF:E7:1D:06:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d6e534c-13c8-43aa-8c1b-6ea3c1731696.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.106.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e7:21:57:6a:e0:d1:a7:df:b8:e1:73:4b:8f:71:91:ce:25:
         11:74:7f:81:3b:9b:3e:b3:db:af:2e:27:0d:c9:18:cc:4f:69:
         25:3d:0d:b0:78:3b:38:55:6c:8a:15:b6:81:a3:3c:91:e6:81:
         5c:cc:50:b3:3c:58:02:3f:f9:7a:37:32:72:6f:3e:85:7e:41:
         c8:2f:f7:b1:40:db:f6:a0:d4:98:5f:63:d0:46:da:bc:25:07:
         22:4c:21:91:2c:39:dc:cd:15:98:92:77:53:67:64:7a:1c:91:
         d6:b3:0d:26:06:4b:d1:1c:a5:8e:c8:7c:38:60:3c:a8:dc:6b:
         c2:8d:85:e1:65:cd:b9:2c:e2:89:94:5d:42:15:7c:49:93:82:
         4d:b3:7a:45:b8:27:10:b1:e0:40:ca:c1:54:1e:66:53:83:35:
         7e:ba:4a:68:ed:fa:1e:cd:2c:03:6f:10:5f:8b:da:08:86:fa:
         63:c3:e3:9f:ee:5d:61:7d:45:33:98:8a:77:ce:ec:c9:97:95:
         17:77:03:cc:f9:37:5f:c7:99:ce:0a:aa:10:4c:42:45:bd:9c:
         ee:b4:bc:d2:79:ae:84:5e:d2:ab:89:ad:b9:48:74:ee:05:29:
         35:61:dd:57:24:a4:c5:fc:38:25:44:2b:ca:dc:89:79:53:24:
         13:e7:09:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:32:56 2026 by rpki-client