Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
File:                     1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa (raw, json)
Hash identifier:          Lb4AteVcBfM7kdYk3Py3AopAhHz30Yo084bMMdoVoVs=
Subject key identifier:   72:AA:7A:E5:8B:CB:E7:0D:E6:34:1A:2D:1C:A6:1A:AF:56:39:D9:4C
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584E31CF12192B8682173688B480
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     11650
IP address blocks:        155.94.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:12:19:2b:86:82:17:36:88:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=5966eb50-edd6-4e3f-867f-22ca8d2532d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:30:8a:25:a8:a5:0a:dd:f8:1b:34:64:20:
                    34:fe:b8:b3:f1:34:b9:cb:b5:b9:20:7d:ab:3c:64:
                    22:93:4e:ba:0f:cc:52:25:f0:bf:25:03:77:87:74:
                    e8:63:e6:5e:1c:b9:44:fe:c5:2a:0b:88:33:69:87:
                    56:a7:da:78:96:6d:8e:67:37:7b:34:23:0b:c8:bc:
                    b8:c2:66:bc:25:89:0e:ed:18:77:14:d2:ce:f7:ca:
                    15:d6:8e:39:d6:a2:c1:b7:67:96:91:d8:09:3a:dc:
                    7c:5a:3e:f5:37:57:b4:98:c3:e1:8d:c9:53:5e:08:
                    73:b4:2b:25:1b:5d:84:d8:63:32:16:0c:23:a1:74:
                    cb:ed:eb:38:e9:77:cf:76:05:c2:f6:61:fc:0e:3f:
                    76:8c:a9:2a:2f:13:3f:10:19:2d:70:48:fc:e5:15:
                    d6:2b:2a:7a:82:93:09:a3:e7:9a:2a:0d:ea:e4:11:
                    bd:dc:e6:7e:3f:f2:46:ea:9e:26:01:ca:34:31:c2:
                    1d:f1:8c:3c:d1:ce:c6:f5:0a:ed:84:f0:fd:26:f1:
                    ab:d9:fd:a4:6d:6c:8b:ee:ae:fa:73:69:a7:9e:3d:
                    61:c9:4b:06:e1:e9:4e:a2:33:ae:20:45:a0:40:da:
                    ec:25:09:0e:a4:b9:f2:d7:a5:18:af:96:55:01:c3:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AA:7A:E5:8B:CB:E7:0D:E6:34:1A:2D:1C:A6:1A:AF:56:39:D9:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.94.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fc:f2:39:81:34:90:8d:ab:4f:bc:d0:c5:d9:f0:f3:0b:68:
         41:cd:d9:e1:db:aa:53:3c:54:4b:74:b9:10:02:dd:16:99:e2:
         a4:bb:2b:5e:2e:a9:16:ef:78:30:ed:03:66:c7:02:ce:61:94:
         e3:ca:7f:a6:e1:af:ad:85:70:29:7a:c7:d8:0b:ee:ed:ec:30:
         ce:21:5f:b2:32:53:38:28:7f:31:8c:44:1e:e0:d8:f8:49:82:
         e2:c3:6d:97:33:87:42:bc:e7:99:63:cb:0c:59:e1:77:4d:6f:
         72:a7:8e:0a:5c:95:a4:a6:89:12:1e:05:fe:eb:8e:e1:6c:a9:
         22:d3:ad:c6:8d:5a:2e:3b:88:c1:26:ec:90:b5:15:22:11:8c:
         88:22:53:bc:71:9a:45:1a:d5:3e:8f:f7:a2:44:0d:3a:ac:f9:
         b1:ec:b1:a7:0d:9f:e6:69:87:8c:af:f8:00:89:de:c9:ca:da:
         a2:f8:84:65:f5:00:eb:c7:a2:ce:6e:4d:a6:51:c0:6f:c1:8b:
         3a:b9:c5:6e:11:2a:97:ed:27:82:16:fe:39:5c:bb:27:1f:68:
         d9:da:51:3d:dd:f4:53:96:0b:f6:6b:27:1a:31:e0:b9:61:61:
         b0:d6:29:3a:33:bc:64:f4:00:20:a2:b6:8d:39:4e:84:ed:9f:
         9b:42:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:04:10 2026 by rpki-client