Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
File:                     2253824c-087b-31f9-b1ec-ba694703e8de.roa (raw, json)
Hash identifier:          i4pO4eV2tsjOVznyQwzC5ghtHLuYuDb3KyY8O5OYu60=
Subject key identifier:   85:A8:3A:CD:9E:D2:9B:CE:3E:21:45:E6:C4:5B:65:17:84:78:F7:00
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584E31CF12003B9123053CE20C00
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     11650
IP address blocks:        65.255.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:12:00:3b:91:23:05:3c:e2:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=13bf6684-5b82-413e-9645-07fa70c1597e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:39:c2:de:cc:05:0b:fd:0f:e5:d2:a9:42:
                    37:a7:3f:5d:38:8a:a2:ba:57:3b:11:45:c3:b9:9d:
                    1d:c7:e6:6b:59:f6:4b:ef:2b:f3:dc:81:87:4c:20:
                    7c:95:f0:28:64:1c:76:e1:2b:fc:63:a0:0c:b7:8e:
                    c9:17:cc:05:6a:9e:6f:f7:03:d2:04:c6:44:c9:0b:
                    5c:71:6c:e5:83:cc:37:ac:4e:0e:02:89:70:b9:2e:
                    bc:45:ae:6e:8e:ba:c4:e7:0c:aa:2c:fe:2b:e3:36:
                    77:a9:51:44:03:b7:1d:09:14:cd:4f:17:f7:e0:66:
                    39:88:de:80:5b:b7:38:75:4a:46:64:e3:a9:f7:4f:
                    ca:e8:3b:a2:62:f5:43:32:30:b8:52:84:6b:2a:26:
                    d6:5d:1f:40:68:f0:02:5c:67:8c:fc:1d:80:5e:ea:
                    52:8e:a2:0a:fb:f8:f4:f4:65:67:70:0f:0d:5b:cb:
                    f9:c8:94:e7:70:aa:ce:e7:58:8e:62:6c:17:74:ec:
                    c4:73:55:4c:d1:de:03:a4:30:8d:e2:f0:3f:26:c9:
                    85:9f:a6:00:64:d1:1a:9e:45:8d:dc:f1:4e:27:d3:
                    2e:f5:53:24:5b:a2:6d:6e:6d:01:43:80:50:fd:2d:
                    b1:12:b7:be:5a:e1:e3:ec:ff:47:07:8a:26:1f:fa:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A8:3A:CD:9E:D2:9B:CE:3E:21:45:E6:C4:5B:65:17:84:78:F7:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.255.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:93:51:1d:5a:bd:37:68:6f:45:35:89:84:e1:7a:c6:db:19:
         14:d1:91:7f:ae:17:b8:25:fc:98:cc:fc:83:0c:9b:2b:9e:2e:
         43:93:3e:96:4a:27:63:9f:a0:e4:e8:71:2d:cc:5f:67:10:1f:
         45:48:b8:03:8c:b5:22:cb:10:ec:4a:51:2c:5e:03:02:51:a1:
         0b:d7:ad:67:7b:e8:5c:08:5e:5f:8e:1b:42:d9:be:3f:86:73:
         bb:9a:17:ba:ca:c1:bd:c4:47:39:57:6f:bf:9f:bd:e4:ee:d7:
         f1:9d:03:8e:5d:03:da:4c:da:03:35:5c:94:54:a7:78:09:cc:
         57:7b:ec:bc:00:ae:84:55:ca:3c:f9:cf:7d:93:1f:9a:0d:17:
         e0:d3:2f:d3:4d:30:dc:bd:14:ac:a8:51:63:8c:b4:14:be:93:
         b9:e8:27:68:a6:37:06:96:d2:11:10:43:82:70:67:de:92:7f:
         b6:e0:84:3f:f8:b8:09:8a:4f:3a:95:80:7c:5c:4c:72:07:7e:
         99:03:e3:3b:4e:7a:84:ea:ac:e4:b2:45:d2:4f:02:74:bd:7f:
         93:97:90:d8:92:e5:78:4f:fa:03:3f:ff:89:88:43:f3:88:38:
         47:d6:a7:ff:9a:6d:0c:97:f2:1a:bd:da:03:c1:2f:88:b4:19:
         7f:65:81:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:21:11 2026 by rpki-client