Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/dcd0bfe6-2537-38b4-a9a4-2dc550f3dab8.roa
File:                     dcd0bfe6-2537-38b4-a9a4-2dc550f3dab8.roa (raw, json)
Hash identifier:          4/y+/Gjz1VjstWgl+hW+YpBWMoC0uHJAhSHLDIlLpvs=
Subject key identifier:   A7:D7:4C:CC:B0:14:DA:DD:CC:CA:13:F1:75:0D:2D:F5:1D:C0:8A:46
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584DF640A89383CE965FE03D0B80
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/dcd0bfe6-2537-38b4-a9a4-2dc550f3dab8.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     198949
IP address blocks:        66.187.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a8:93:83:ce:96:5f:e0:3d:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=d3afbdbf-59be-4e7d-89e7-fd41f629b6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:62:57:20:8f:de:e8:36:a8:4b:ed:cf:5e:
                    3a:24:08:0e:42:7f:b6:47:09:aa:67:7e:37:45:81:
                    34:e5:ea:7c:a6:a9:f9:56:d4:79:f5:80:28:14:14:
                    8d:99:72:82:e9:0b:00:43:7f:bf:6d:5e:6e:8c:64:
                    5a:0c:cb:24:45:bd:9a:6d:e2:71:48:c8:bb:47:d1:
                    1a:48:c1:17:8a:37:c3:59:6d:89:ad:ad:2f:eb:d7:
                    27:a7:52:e8:57:41:85:59:05:53:62:76:fe:ea:03:
                    9c:f0:d0:6f:da:ec:76:aa:37:96:6d:cc:ed:43:0f:
                    fe:d8:51:15:44:14:ab:92:a1:46:8c:f1:d3:07:c8:
                    a3:89:1e:ca:7d:3f:d0:9a:ce:01:37:21:8f:cd:38:
                    04:5c:2b:27:c0:ae:b3:f0:8b:51:3d:0c:79:e5:5a:
                    5e:d4:00:58:0b:d8:04:7d:e1:eb:c1:72:bd:bf:f1:
                    5b:d1:8b:46:bb:28:b0:1a:1c:f5:64:e1:da:b8:71:
                    20:5a:f6:eb:b3:33:c2:0a:5e:ba:3f:b0:d1:23:89:
                    5f:7a:0b:a6:39:4c:4d:0f:9e:3b:c6:b1:af:ac:99:
                    f8:16:bc:52:18:68:30:49:40:83:eb:c9:b9:f0:1f:
                    ed:b8:f9:9b:00:a6:e5:2c:8e:56:dd:87:1c:2a:45:
                    51:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D7:4C:CC:B0:14:DA:DD:CC:CA:13:F1:75:0D:2D:F5:1D:C0:8A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/dcd0bfe6-2537-38b4-a9a4-2dc550f3dab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:9b:e6:0e:a9:ce:6a:49:74:3f:63:c0:15:37:6c:df:0f:a4:
         9a:8c:e5:b7:6c:dc:4c:1e:00:6a:c3:0d:c8:a4:83:d6:4e:a6:
         37:25:eb:24:a4:87:d7:53:9b:ce:ef:61:b7:ed:46:35:30:fa:
         f1:27:46:0e:37:36:8c:d0:8f:f2:66:06:5b:06:f9:25:47:96:
         9f:7a:4c:3e:56:8c:3e:6a:0d:c6:22:e7:94:d1:f1:85:c2:35:
         5c:be:33:72:76:08:d1:2d:7a:d8:76:ce:24:01:ba:b3:a3:2b:
         03:5a:d6:5c:a4:46:b3:c4:a6:f6:fc:cf:b6:05:87:18:1d:4c:
         eb:3a:db:85:57:cb:ab:75:06:1b:8c:27:81:2c:86:b9:78:ce:
         5b:0d:51:f2:c5:b2:be:8e:3a:d6:3a:4b:26:71:a4:e6:36:b1:
         77:55:78:68:f6:58:f8:21:eb:9d:15:ad:0f:de:a1:8f:85:ac:
         fc:7f:0e:5f:b1:5b:67:32:b1:21:ca:a8:48:73:54:73:7d:0f:
         e3:24:12:df:fd:1f:0a:a4:2b:15:73:7a:dc:00:36:bf:3a:ea:
         94:29:ca:51:cf:a7:3c:c9:40:da:87:ec:41:c5:54:d0:b0:89:
         ac:d3:c7:b9:15:00:d2:61:ea:59:85:ef:71:fc:6a:91:77:03:
         1e:1b:d6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:12 2026 by rpki-client