Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa
File:                     aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa (raw, json)
Hash identifier:          ixqQCULs0ZL2VI/X/mNItZaiZ9n3yL8ntAPpOl2BJDc=
Subject key identifier:   AE:E3:81:D9:57:2E:8B:A8:89:56:94:4D:04:80:8F:E5:20:16:09:B4
Certificate issuer:       /CN=73980674-4684-4801-b116-e9e08b4ff9f4
Certificate serial:       010D0C9F4328584E15E46D1764DC688488887800
Authority key identifier: 14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     7018
IP address blocks:        152.37.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6d:17:64:dc:68:84:88:88:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73980674-4684-4801-b116-e9e08b4ff9f4
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=040a4a3c-8acf-4d9b-b698-cf7967b3ffdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:b2:2a:10:94:26:87:63:1a:24:91:07:59:
                    86:48:95:e6:b8:f7:e2:d8:d6:5f:63:06:49:ac:d2:
                    b0:f9:df:bf:ef:8d:79:b6:d0:67:56:51:c1:32:a1:
                    cb:1e:a1:2b:e7:ec:83:06:c7:59:8d:f3:40:9d:49:
                    3d:e3:ee:05:f7:c3:e9:61:fe:74:dd:fb:7a:c4:74:
                    78:31:58:ec:0f:e5:a8:57:37:99:5f:33:72:09:a8:
                    53:02:3b:f9:9c:6e:84:46:35:85:f2:67:ae:89:3a:
                    70:7c:f8:1b:de:f3:a7:8b:86:9b:90:17:7d:23:84:
                    1d:92:9b:9c:18:c1:58:b6:3e:89:2d:86:de:52:de:
                    ce:4c:ef:10:5d:c0:7d:27:46:21:44:55:d5:e3:98:
                    9c:90:7b:f0:68:ba:39:40:03:e9:c7:1e:30:52:9e:
                    32:1a:31:75:d3:0d:9d:f3:2d:42:1e:a4:75:ac:a9:
                    ac:30:38:b1:50:63:04:e7:a6:22:5e:cc:31:a5:a6:
                    78:64:e8:cc:73:06:04:20:d3:02:da:47:a9:12:ac:
                    e4:b0:d0:bb:2e:bd:d0:26:ae:dd:e9:3c:99:b8:32:
                    c8:b4:74:94:5d:8b:2f:49:bf:24:81:74:ed:ba:ac:
                    16:0b:3d:26:c4:b7:14:b0:5c:c8:84:12:41:87:5b:
                    2a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E3:81:D9:57:2E:8B:A8:89:56:94:4D:04:80:8F:E5:20:16:09:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/aa07813c-e54d-39ae-923a-6c45eed1c1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl

            X509v3 Authority Key Identifier:
                keyid:14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.37.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:e9:cd:0a:c7:0c:db:4c:6d:a4:54:2e:ec:2c:9b:34:b0:
         39:ea:3f:59:f9:86:8e:9f:80:6a:24:bf:00:28:03:3d:62:06:
         30:7c:6d:71:e3:f9:00:75:95:9f:a1:f3:95:a3:c4:1f:7a:73:
         88:fe:47:ea:4a:a5:34:ec:c9:53:ff:6c:8c:5d:84:25:ac:31:
         ad:0a:d2:b2:de:ac:0d:75:f6:71:ed:cb:09:d0:79:8a:9a:14:
         42:9b:76:04:2b:fb:a3:57:08:8c:19:a6:93:4a:06:a6:8e:4c:
         4b:f7:c8:f6:86:b6:93:6e:b8:cb:3b:76:20:25:52:a1:44:11:
         3f:6f:4b:7d:51:c9:4e:12:7c:e0:ac:25:ef:a2:ab:cd:23:b3:
         2e:fd:c2:9e:b0:bf:db:83:a1:d3:2f:9c:31:58:33:8d:bc:9c:
         af:54:ff:92:be:33:e5:12:7d:cf:cf:55:aa:fc:3d:bb:81:9b:
         98:3c:f5:a0:1a:43:8e:6c:b3:54:3e:b9:e2:f5:28:c6:aa:b0:
         c7:5a:a5:7e:9d:5b:36:9f:e1:a1:34:74:e0:83:72:27:a5:58:
         b0:0b:d9:c3:4b:ec:04:9c:52:b0:25:76:2e:9c:59:2b:ab:ae:
         10:ec:d2:78:5f:b4:28:dc:38:66:0b:f6:a7:df:0b:d0:26:36:
         85:61:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:28 2026 by rpki-client