Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa
File:                     5fab7624-7ba0-38cc-939d-47dd362b1a68.roa (raw, json)
Hash identifier:          v0/tA6hWzAPI9SUb+i5mEy3p6H+S+u5FNu68oQbBVQY=
Subject key identifier:   53:05:7E:27:2D:91:EA:77:8A:9D:5C:42:9B:6D:00:A3:3A:51:51:52
Certificate issuer:       /CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f
Certificate serial:       010D0C9F4328584E104EF3E8E5B3D1CC56333380
Authority key identifier: 1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     376
IP address blocks:        132.209.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:f3:e8:e5:b3:d1:cc:56:33:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=af595af9-39ac-4b02-a231-ff766ad96865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dd:75:34:71:b6:dd:c8:ff:98:04:88:30:2e:
                    08:2a:27:6c:f6:0f:df:b9:8f:43:a9:4e:48:4e:c6:
                    22:69:9e:fc:0b:2a:34:ca:eb:86:1d:ca:47:6e:50:
                    d0:cb:55:2b:f9:26:5f:9e:57:3e:e8:7d:47:60:16:
                    a3:ae:4e:0b:c5:80:8e:b0:3e:60:d7:f2:8c:cf:e7:
                    26:b5:fd:c2:89:c7:2b:79:e9:15:9e:fc:ca:f5:db:
                    13:50:3c:6b:ab:f4:d2:07:12:c0:98:4b:cf:ac:e9:
                    5b:eb:91:16:05:30:0f:03:6e:ed:a2:57:1d:16:1b:
                    9f:6d:84:ff:e7:0a:8d:9e:7d:bd:bd:be:07:ea:5c:
                    ed:55:e5:aa:1b:33:22:0c:14:39:d4:ce:7e:80:51:
                    06:eb:7c:3a:5b:4e:d8:a2:ec:14:5f:8c:b7:6b:bc:
                    96:40:ff:63:91:ad:0f:6a:aa:09:00:e6:3e:f6:80:
                    d9:8d:00:c9:dd:c7:b6:15:98:cd:eb:75:ea:fd:8d:
                    e2:42:f5:02:88:fd:d7:25:34:fe:d5:89:03:c5:0c:
                    93:88:01:75:cc:47:5f:f2:70:82:1a:e0:0c:ae:f7:
                    3e:e9:6f:e9:79:35:5a:5f:d4:5a:b7:98:b9:e5:aa:
                    05:7c:2e:f8:87:34:9f:e1:cb:f6:a5:7d:d2:da:8a:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:05:7E:27:2D:91:EA:77:8A:9D:5C:42:9B:6D:00:A3:3A:51:51:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl

            X509v3 Authority Key Identifier:
                keyid:1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:7d:89:f2:68:69:90:c5:6e:06:85:48:9d:04:0c:de:68:96:
         37:53:d0:ef:9b:2d:35:41:8c:92:66:14:25:f8:80:93:39:ba:
         7a:6d:29:cf:75:20:2a:3c:7e:47:f9:9d:62:4a:bd:7a:cd:69:
         fd:aa:0d:27:7d:b8:be:8b:6c:8a:70:bc:a9:d3:3c:de:f9:c2:
         7a:3a:c1:04:c3:81:2c:c5:a2:e4:9b:8b:8d:63:90:52:a9:6d:
         49:36:d9:bf:15:c6:36:92:e4:8c:13:8c:83:39:99:31:ee:b6:
         75:12:34:8e:32:4a:42:2a:c0:15:35:67:5e:c4:d9:10:78:0e:
         8d:f9:33:c5:b3:ed:ca:1e:e8:d3:2c:0f:ff:27:89:89:4b:cc:
         01:b6:4e:a9:41:c2:ca:ea:ea:2a:0d:0a:f4:34:b7:12:ed:4e:
         95:b7:7b:85:2a:20:97:8e:ac:51:80:f0:a1:27:85:f6:06:35:
         a5:83:d5:4f:07:55:2c:64:22:48:ed:49:bf:29:fa:cd:dd:b5:
         ec:49:ed:7a:07:3a:28:e2:a6:b0:07:70:7b:e3:0c:1b:db:61:
         15:28:72:a6:43:20:7b:3f:19:06:02:82:ce:78:5e:cc:b6:0a:
         ac:f8:94:06:34:fc:82:11:cc:6e:e3:ae:fa:24:6c:d4:ef:58:
         34:1d:b3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:35 2026 by rpki-client