Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa
File:                     fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa (raw, json)
Hash identifier:          4DN8sg4QP1xOFf9dhNCzDq7PTLoESgNx61ZoKWSJKpU=
Subject key identifier:   79:7D:31:07:56:DA:5C:C8:E2:EF:45:DA:01:B4:2A:17:39:C2:55:EF
Certificate issuer:       /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial:       010D0C9F4328584E0A700C048EB295C12AC53380
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     14618
IP address blocks:        159.172.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:0c:04:8e:b2:95:c1:2a:c5:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=b9795c7c-0dc4-4460-8770-555b5d12d49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:a6:d0:bd:24:e3:6c:a3:06:4b:43:2e:44:
                    67:ec:3b:59:11:9f:78:bf:f8:ac:04:f6:b5:00:2c:
                    96:4d:a7:cc:b8:f2:1f:5a:0f:d5:30:79:c4:34:38:
                    45:74:2b:02:c7:ea:33:9c:97:20:3a:b9:c3:c5:ef:
                    6a:70:e8:f1:55:9b:4d:e2:c7:b4:62:52:5c:50:29:
                    bf:f2:23:f5:d5:2b:48:1e:d5:e0:00:f0:bb:78:f6:
                    0d:92:0f:f6:6f:06:88:d7:03:66:b8:8d:09:24:b4:
                    cf:1e:12:31:26:43:6b:6e:2d:7b:a6:1a:88:e6:15:
                    7b:dd:38:72:1b:9c:d0:5e:92:a5:92:fe:e9:a8:ff:
                    77:16:3b:0b:e3:97:8e:04:38:5f:00:08:e2:b1:35:
                    7e:42:3b:65:98:4e:a9:b1:03:77:6d:33:aa:cf:f1:
                    cf:05:39:c8:17:d8:f7:aa:6c:1c:d9:ac:f7:eb:17:
                    58:0a:75:10:d7:20:aa:c0:b2:bb:86:0a:1c:db:ae:
                    f5:d9:87:6a:3a:84:96:de:0f:9d:7a:fe:3d:db:d5:
                    cf:3d:bb:47:01:3d:13:3e:0e:2b:ca:f8:8a:eb:52:
                    42:f7:b2:c7:53:78:f0:10:42:34:5a:2e:ad:0b:16:
                    92:d9:c3:bf:26:42:68:76:17:53:b2:75:63:12:58:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7D:31:07:56:DA:5C:C8:E2:EF:45:DA:01:B4:2A:17:39:C2:55:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl

            X509v3 Authority Key Identifier:
                keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.172.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:50:17:08:d1:f1:28:a7:f7:15:70:13:dc:2c:08:f1:f8:98:
         f2:49:de:0d:ac:31:27:44:d0:45:0e:0f:1d:9b:a3:cd:80:a2:
         4b:01:f4:e3:70:e6:da:05:f0:43:92:e0:11:9b:5f:8d:46:61:
         35:e1:c4:07:f5:8d:ca:04:88:b3:bd:0f:19:c7:cf:9e:d6:a0:
         d3:96:e8:29:71:85:fa:f2:54:29:72:57:09:69:4c:6f:98:ba:
         9c:b1:6c:46:46:69:dc:32:54:af:dc:ac:97:d7:c1:8c:30:97:
         2f:fd:b3:68:c7:c1:d7:dd:2a:cf:f0:4a:03:e8:e9:ee:f3:40:
         c6:4f:6d:71:d5:88:f8:f1:c1:1f:fe:ef:39:13:26:04:98:46:
         df:2f:d5:72:7c:d2:4e:09:1f:8b:61:e0:b0:12:d6:f7:da:e8:
         fa:cf:95:75:27:e4:5c:74:0f:96:ae:71:2d:97:56:98:c8:92:
         4e:21:30:f2:7e:dc:a7:9f:b2:6e:34:db:54:c9:a6:76:de:8f:
         f6:8c:70:37:5c:3f:47:b6:67:9a:47:2e:21:fe:9f:01:a0:3c:
         65:e1:ce:71:c3:4e:e8:f1:41:fb:84:64:b3:69:2b:c8:47:aa:
         f3:99:84:0e:eb:c6:01:5d:59:79:61:9e:c2:64:97:c2:1e:01:
         08:3d:75:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:03:59 2026 by rpki-client