Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa
File:                     6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa (raw, json)
Hash identifier:          yheYoj845vyP8IT1+fe/y+2DzpfJAOGX3ORkg6kUHZQ=
Subject key identifier:   29:88:A8:CE:DA:99:85:DD:DF:0C:4C:A2:3A:89:E6:68:15:01:1B:2D
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584E0C1EDBB5294896F3FFF59D00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     11090
IP address blocks:        216.137.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:db:b5:29:48:96:f3:ff:f5:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=028fe4f2-7e99-431c-9d2d-f83c4ba06bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:65:76:8c:63:22:aa:13:13:db:5b:23:f7:
                    c5:68:3a:da:6f:09:20:b0:92:c1:2b:b5:a7:96:5e:
                    d8:6e:37:c0:4c:ed:14:97:26:5c:8e:2a:92:f1:c1:
                    75:2c:37:bc:5d:3a:b1:5a:08:09:bc:8a:00:9b:ec:
                    dd:ec:18:3d:cf:cf:2b:05:35:12:d0:32:ad:3c:c7:
                    69:53:27:9f:c0:08:c9:7c:c8:48:ac:ac:2b:67:43:
                    f2:28:1d:c5:23:17:18:e5:26:5a:23:d1:69:7a:d0:
                    a3:15:90:b7:4d:54:7b:85:53:07:d3:50:3e:db:ab:
                    db:b6:f0:00:1a:08:40:24:71:0c:b3:b6:6d:61:a9:
                    f5:b7:86:f1:45:3b:e9:8d:7c:18:44:84:32:2f:fb:
                    6c:eb:fc:c3:ce:84:32:92:93:62:ac:75:23:84:8c:
                    d5:03:d1:32:0c:85:16:64:dd:c1:bc:a2:cf:de:ab:
                    3e:55:3e:81:39:73:ea:95:21:5d:ee:99:5e:0c:e3:
                    73:59:38:ef:d1:25:57:0b:7a:f4:38:54:c4:24:a6:
                    78:68:b5:5f:b6:45:73:61:03:fd:99:19:38:0f:7e:
                    8f:4b:c6:14:c6:b3:3c:1b:81:dd:10:f4:07:d6:55:
                    7f:14:5a:a6:fc:24:90:ee:52:54:fc:0f:cc:f5:9e:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:A8:CE:DA:99:85:DD:DF:0C:4C:A2:3A:89:E6:68:15:01:1B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e8:1c:ce:62:dc:19:d0:b9:6b:ab:a7:45:01:7c:8f:0b:c1:
         4c:16:bb:9e:6a:9b:f0:53:9e:89:a5:56:3b:87:21:1f:a5:12:
         a7:8a:f3:72:26:b4:97:03:d7:fc:62:e3:43:97:5e:b5:17:a5:
         38:63:fd:f5:c1:7e:b5:dd:a7:6b:07:91:ef:b8:4f:0e:67:d4:
         58:13:bf:67:b0:db:f7:f5:a4:e7:d1:c2:ac:f2:ce:e8:30:85:
         e7:5b:f5:71:3e:c3:b8:3b:ed:6b:82:08:22:aa:f6:72:23:ad:
         b4:c8:a4:15:90:cd:a1:82:eb:37:89:23:6f:71:70:a6:63:09:
         20:1a:63:40:45:2c:6b:b6:32:15:01:ca:83:2a:2b:fb:9a:43:
         c7:f6:f0:79:7a:29:10:bf:87:5c:90:ec:c0:6a:aa:30:77:9a:
         63:0c:e0:bc:fd:d5:24:43:50:71:01:64:d3:ea:c1:ed:66:eb:
         ca:a7:6a:3f:52:5f:39:56:9f:e0:c5:19:d4:4f:40:51:94:62:
         4d:ef:15:8a:aa:4b:bf:40:0c:48:61:5d:9f:b9:9a:2e:12:6e:
         6f:5f:91:51:67:7d:d9:f9:8d:37:6d:ee:03:06:21:ce:34:a6:
         ff:1e:5e:90:04:59:0b:c5:0a:54:a9:77:9d:15:29:52:89:6d:
         4b:12:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:19:03 2026 by rpki-client