Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1ddb07cf-bcdb-3ab3-80d6-1a6fe9455f7d.roa
File:                     1ddb07cf-bcdb-3ab3-80d6-1a6fe9455f7d.roa (raw, json)
Hash identifier:          4g0eBEFdPocuVmIy9nKriN/Z3uxO7MkcF+bBb0IZqR0=
Subject key identifier:   2E:0B:53:0D:39:D0:2F:C0:FC:A4:13:8D:C8:11:C3:E9:10:3A:8F:74
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584E2809A775C5986BC835C79580
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1ddb07cf-bcdb-3ab3-80d6-1a6fe9455f7d.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     376
IP address blocks:        132.219.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:a7:75:c5:98:6b:c8:35:c7:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=4685f119-3545-4686-9268-f4fda014a408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:7b:3d:7d:be:e6:c5:06:24:a7:7b:67:5a:
                    2b:76:54:dc:8a:28:69:11:08:cc:7c:6f:db:c4:e7:
                    ed:f3:54:a3:fd:79:8d:ff:db:b4:3f:70:0d:ca:2d:
                    66:68:6e:e6:83:ae:a5:b8:6d:2f:1a:09:32:72:2a:
                    ed:18:fe:49:5a:9d:85:8e:c3:16:62:ab:4b:10:25:
                    67:c1:63:fe:6d:21:31:6e:c7:ba:83:dc:4d:83:9b:
                    f6:e4:ed:58:dc:7c:bd:1a:24:17:e8:1a:b2:d0:ae:
                    03:7d:9d:57:1c:34:53:fd:d0:e9:f7:a9:ae:2d:d4:
                    2e:27:c7:4c:af:70:bc:32:e7:c4:e4:89:ec:d9:e4:
                    89:59:83:f2:f1:2a:bd:d5:fb:9b:20:28:47:32:0e:
                    5a:c8:eb:6e:d8:41:e4:3a:33:46:c0:ed:5c:0a:e1:
                    0a:34:1f:ed:a0:2f:53:4e:92:cf:86:9f:32:fe:88:
                    29:b8:b3:75:bf:59:a0:df:0b:32:d1:50:83:1f:06:
                    27:e6:d9:8b:6b:82:9a:56:a5:a4:7f:b8:16:20:6a:
                    c3:23:af:a8:06:d1:3d:67:24:ec:06:ec:ed:b3:08:
                    23:5c:c3:51:59:c0:35:17:d0:e4:3f:14:91:d0:98:
                    06:53:08:45:40:45:92:ac:9f:12:64:69:97:cf:1f:
                    e9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0B:53:0D:39:D0:2F:C0:FC:A4:13:8D:C8:11:C3:E9:10:3A:8F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1ddb07cf-bcdb-3ab3-80d6-1a6fe9455f7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:78:f5:bf:19:13:8f:ca:ad:57:25:75:06:eb:cb:89:20:ea:
         30:ef:39:5a:1a:30:dc:be:42:86:4f:34:6a:89:26:a0:c9:c4:
         ec:9b:34:17:04:58:48:d1:8e:9a:a0:e0:5a:d5:fc:b6:3e:79:
         fc:d4:19:0d:ac:d5:60:27:ef:b4:eb:32:72:7a:b5:04:65:08:
         d5:82:2e:0f:30:3f:ad:e4:1c:74:4d:25:07:f6:3d:c6:dc:1d:
         d4:8d:19:ce:67:93:dc:8c:96:35:9c:9e:43:c8:f5:1b:13:d4:
         66:0c:ca:bf:50:dd:e2:34:fa:06:57:2e:f4:a3:f8:bf:de:20:
         85:19:b8:9e:40:d4:99:e0:fe:0c:36:65:ab:f3:9a:25:76:45:
         3f:f7:26:4c:f3:cc:a3:22:da:0d:93:1f:55:cb:a5:1c:67:7e:
         6d:8e:f1:57:95:f5:a3:fc:5f:6c:cf:2f:db:86:ec:7e:03:72:
         17:41:bd:1b:aa:0f:8f:40:40:bf:81:d9:5b:72:28:d1:1d:22:
         2d:50:7b:fc:e1:7a:0a:97:f8:5f:cc:4a:7a:4c:18:ac:ca:8f:
         40:44:f3:e2:ed:e5:2f:0b:9b:ed:a7:da:f8:c8:8b:5d:83:ea:
         8b:33:06:0a:9d:46:32:a2:40:5c:1e:61:f6:77:ec:3d:2e:fb:
         13:2f:4f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:07:59 2026 by rpki-client