Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/201d8786-0ccc-3744-920e-735e09222b86.roa
File:                     201d8786-0ccc-3744-920e-735e09222b86.roa (raw, json)
Hash identifier:          nY1/7OooUFWj2TDQB9KBObB4Qgj9T3T34BNR3LWhfwI=
Subject key identifier:   43:48:81:1E:1B:89:96:A7:D4:A1:F9:8B:62:8B:B6:CE:99:06:03:A1
Certificate issuer:       /CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
Certificate serial:       010D0C9F4328584DF640A9BC9360E06DFA9CAD00
Authority key identifier: DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/201d8786-0ccc-3744-920e-735e09222b86.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     54665
IP address blocks:        192.34.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a9:bc:93:60:e0:6d:fa:9c:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=c8383483-d4cd-4050-8081-e93fbc33c646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0e:f6:7b:83:36:f7:53:6f:bb:69:86:22:d9:
                    6a:88:e2:d6:8b:42:03:70:5a:62:78:93:b3:7b:42:
                    1b:8f:9a:cd:35:61:92:01:5b:63:cd:04:5c:53:b4:
                    b6:e5:a2:1c:ac:a7:49:89:2e:3e:ef:b4:59:e4:49:
                    13:50:c9:7f:d8:eb:4f:f8:ac:20:98:64:8f:fa:33:
                    ce:70:6a:63:a6:a6:ee:24:4f:28:52:35:d1:2e:73:
                    6b:43:fa:29:34:7b:00:0a:fc:dc:90:88:07:64:1b:
                    c0:55:ff:55:8c:7e:46:1d:28:9f:77:56:9f:e7:91:
                    41:bc:8e:7c:29:86:5b:97:c2:6e:89:9d:9e:83:8d:
                    2e:f6:e3:99:22:4d:0f:80:c1:51:f1:04:c5:45:64:
                    6f:ff:22:3b:2f:61:ce:b3:52:b8:16:e2:57:36:5c:
                    e3:e8:8d:1e:6f:f9:39:77:93:8f:1e:b0:23:3c:78:
                    d7:49:b5:b4:d9:ce:fb:95:e3:51:94:50:db:8b:9c:
                    b1:f9:71:7f:7b:a3:ea:12:7d:f5:93:69:9d:48:fb:
                    05:8f:b8:5f:1a:2f:f7:d8:44:a8:07:f7:06:32:75:
                    b7:43:75:d2:4d:ae:3a:02:0d:70:9d:fc:a2:da:f0:
                    6f:02:25:d0:66:fd:47:8e:f7:10:17:78:35:6c:fa:
                    d6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:48:81:1E:1B:89:96:A7:D4:A1:F9:8B:62:8B:B6:CE:99:06:03:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/201d8786-0ccc-3744-920e-735e09222b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl

            X509v3 Authority Key Identifier:
                keyid:DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:39:df:bc:d7:de:24:47:2c:d1:98:31:c3:e0:4b:87:9c:f9:
         d5:4a:a9:ca:fe:08:9b:64:f4:5b:5e:e8:51:05:65:8b:68:da:
         73:18:dd:1c:73:45:3b:b3:e7:2c:15:da:73:ce:7f:86:71:14:
         65:7c:f2:8c:e0:d9:5e:1d:5a:e8:59:34:8c:f0:3e:f9:de:be:
         a3:a7:af:7c:2d:7f:03:09:6d:f8:d3:a8:bc:51:61:a2:7e:c3:
         b0:61:6f:0c:3c:30:ce:27:c9:6c:61:e8:ab:3f:88:55:cf:37:
         ce:d0:99:31:b6:ee:d7:1e:30:fe:a3:e3:82:a1:d4:75:0e:65:
         86:66:22:02:d3:fa:8e:61:16:2f:00:75:bf:b0:a0:af:88:96:
         90:07:7e:88:a4:e9:53:5e:86:cc:6a:6a:e7:77:71:fd:4f:e9:
         b7:93:87:02:69:33:1c:e5:d6:11:ed:69:03:62:24:95:88:43:
         9b:e5:6e:b5:7e:74:0c:4c:e8:22:4b:58:e2:fa:cf:ec:e4:d1:
         d2:57:18:25:f7:df:48:05:e2:dc:c1:09:ea:6e:b7:a9:48:75:
         6f:df:1a:be:2d:63:26:5d:7d:48:0d:3e:48:0a:65:f1:d0:e7:
         38:29:3c:da:8b:13:99:ef:88:88:93:b2:3e:17:6f:ad:51:e6:
         8f:71:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:58:20 2026 by rpki-client