Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/9853c903-f2c7-39ec-a317-f8c992870b21.roa
File:                     9853c903-f2c7-39ec-a317-f8c992870b21.roa (raw, json)
Hash identifier:          NSwCxHCPHUWUHPHwmVKadQ1XF9ZwUsHLuIYVDz9drzA=
Subject key identifier:   B5:5F:45:D6:B5:E0:B1:39:2D:95:00:81:2E:0F:E2:B7:F3:D3:D7:B3
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584E104ED6744735247977E86F40
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/9853c903-f2c7-39ec-a317-f8c992870b21.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     19165
IP address blocks:        136.28.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:d6:74:47:35:24:79:77:e8:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=58951d0f-793b-45bf-89a0-a5ac5779a29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:c0:aa:f3:52:2d:af:3c:fb:f6:06:24:62:
                    5e:90:bd:c6:c4:6f:8d:b7:a4:8f:9e:19:5e:53:18:
                    9c:3a:3f:cb:8b:35:89:04:4b:88:15:8a:d6:36:d8:
                    50:ab:27:5b:d6:6c:e8:47:6b:b7:6d:6f:e9:e7:e3:
                    42:aa:87:d8:7a:61:bf:9c:81:15:ee:45:59:45:36:
                    9c:c2:d4:2d:71:72:93:ef:85:48:c5:20:f1:57:8e:
                    9d:23:1f:0c:a6:30:86:a2:99:8e:de:71:4a:cb:24:
                    e8:c7:99:03:a2:ae:05:3c:44:ca:73:d5:6c:6e:ba:
                    af:c9:f8:f5:41:65:5c:75:35:36:47:80:49:18:92:
                    3c:54:fd:56:36:b5:da:3b:b0:06:2b:50:51:d3:8b:
                    a9:b6:6d:bb:4a:5e:39:eb:79:e4:81:11:c7:98:63:
                    98:2b:75:52:25:03:f3:9f:61:a2:a7:11:0f:75:3b:
                    1f:7a:e9:d2:c1:49:9d:4e:8c:1e:4d:ad:89:45:27:
                    7b:7d:e9:d9:71:9e:95:e9:95:d5:0c:2b:07:74:8e:
                    8a:ba:fe:08:9c:c7:ee:9c:6a:98:f2:a1:6b:b4:1f:
                    22:b4:fc:2e:ec:50:7a:7c:47:84:03:d7:a3:e6:ce:
                    74:30:31:49:84:09:ee:72:ea:94:30:78:84:85:bb:
                    6a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5F:45:D6:B5:E0:B1:39:2D:95:00:81:2E:0F:E2:B7:F3:D3:D7:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/9853c903-f2c7-39ec-a317-f8c992870b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.28.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:8f:54:a5:45:48:cb:6c:9c:2c:d9:56:0c:72:34:89:43:ae:
         13:03:82:e3:9a:58:e6:d4:54:8b:68:2c:e6:e9:d4:c2:9b:b8:
         41:96:7b:65:a6:e6:66:96:95:71:27:35:38:4b:74:88:3e:04:
         1c:a3:51:0d:34:c5:ec:2c:ab:ac:55:84:42:3e:59:1a:5c:4b:
         45:39:11:4e:96:fe:9b:69:6f:02:e1:2d:e0:03:c5:15:80:73:
         dd:bd:3d:23:8d:7c:ec:e5:6b:94:64:7e:a4:30:79:26:5d:48:
         22:06:c3:e0:c3:73:1d:fa:c7:8c:eb:3a:db:89:74:02:a8:51:
         11:c1:d7:71:55:2a:d3:e3:dd:ab:94:94:2e:17:85:60:e8:8f:
         d4:28:d8:13:7a:dd:de:42:02:6b:31:f3:41:10:ac:ea:6e:94:
         31:d1:59:fd:93:ea:fa:6a:27:66:47:eb:a7:86:e8:b4:14:75:
         51:56:a3:68:21:6e:47:d2:01:62:23:4f:41:c3:1d:4c:50:03:
         55:d4:b3:e9:05:c9:c6:04:7b:60:40:dc:d7:af:90:d4:90:f2:
         cb:8f:57:9c:bb:e1:99:d7:04:82:ac:ba:0c:46:19:73:07:0f:
         0d:3f:ec:0c:19:68:a3:6f:36:59:f7:6a:23:d1:fe:4b:85:8e:
         06:31:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:48:35 2026 by rpki-client