Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/c0d92aec-a852-3811-9169-c6a18fe58454.roa
File:                     c0d92aec-a852-3811-9169-c6a18fe58454.roa (raw, json)
Hash identifier:          v7sXdnuzRZRSleDnd7i6R2O/ELYAwnQbJdz1a9n92I4=
Subject key identifier:   A4:D7:F6:6B:3F:11:BB:31:6A:CA:61:4E:54:40:47:E5:5C:77:42:3F
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F4328584DEB15ECE391F82D6533CD8F40
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/c0d92aec-a852-3811-9169-c6a18fe58454.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     14434
IP address blocks:        66.248.160.0/19 maxlen: 24
                          98.142.160.0/20 maxlen: 24
                          172.84.192.0/18 maxlen: 24
                          198.36.28.0/22 maxlen: 24
                          209.221.192.0/19 maxlen: 24
                          2606:5a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:ec:e3:91:f8:2d:65:33:cd:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=8980e464-020d-4221-a340-1a1d810f4360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:b3:8e:b3:e0:38:01:1d:11:61:ab:40:57:
                    ef:2d:2a:7b:09:f6:63:34:34:9d:66:a9:04:06:2a:
                    07:15:8c:a8:bf:16:1c:f9:12:a6:af:e1:0a:53:b9:
                    c7:0b:f5:b0:b4:43:65:93:c8:2b:8b:df:19:33:c7:
                    ec:a8:a7:e4:99:e9:a7:ba:94:cb:82:b4:c6:a5:a3:
                    20:22:35:cd:8f:70:14:af:c1:48:17:e4:66:e5:97:
                    ba:81:a2:c0:bb:74:71:60:a3:47:d8:0e:78:23:99:
                    1a:87:3c:db:45:98:26:a0:fb:62:c0:49:ee:5a:82:
                    d5:2e:8e:53:1f:04:47:3e:a0:e2:fc:2c:d1:e7:75:
                    be:f9:a3:5b:76:af:36:ee:b3:99:c9:bc:ea:80:b1:
                    a7:c1:3e:c1:2f:a7:59:14:19:27:c7:75:70:b6:f8:
                    a1:e5:43:6c:2d:da:4e:be:b4:48:d5:b4:40:1f:c6:
                    4c:e1:58:2e:03:27:7c:1b:5d:ef:32:0c:e1:60:2d:
                    22:7f:42:8b:05:75:20:0b:bb:1a:45:dd:86:f6:d6:
                    f7:2b:77:de:3e:9e:a8:8c:65:a7:e8:a9:04:c2:7d:
                    dc:33:06:e0:2b:24:cf:07:2e:75:80:12:2f:2c:7e:
                    54:01:ca:59:85:85:b6:34:b1:65:03:c6:6e:05:46:
                    cc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D7:F6:6B:3F:11:BB:31:6A:CA:61:4E:54:40:47:E5:5C:77:42:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/c0d92aec-a852-3811-9169-c6a18fe58454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.160.0/19
                  98.142.160.0/20
                  172.84.192.0/18
                  198.36.28.0/22
                  209.221.192.0/19
                IPv6:
                  2606:5a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:28:76:81:74:67:5c:ec:bf:57:ba:9f:0f:4b:9d:a7:23:15:
         46:b5:b2:9a:ef:2a:db:de:d4:24:b0:17:ad:66:e9:a0:bf:b6:
         bf:18:00:44:40:a1:f3:0b:3e:79:f0:60:34:4b:35:fa:d1:a5:
         00:1e:1a:70:90:94:63:ed:1f:09:7a:8f:ba:55:2e:25:8a:ea:
         01:4f:a9:fb:49:13:ff:af:55:b6:3f:00:5a:47:72:75:27:32:
         a6:a6:94:77:4f:5e:14:28:3a:f3:44:b3:5f:1c:51:3e:43:67:
         44:f7:50:53:f8:80:d8:c3:7a:bf:25:d6:87:57:a9:2b:18:6a:
         d4:de:96:f9:d8:a7:08:b6:33:95:53:c6:b5:77:b3:d7:ea:1f:
         c0:ac:9b:01:44:e7:ee:88:aa:72:f3:15:88:95:ef:4f:f6:96:
         a1:dc:cb:8c:5f:64:8c:0a:b1:7e:33:54:92:8e:ff:4d:6c:10:
         85:c2:27:51:e8:b0:20:b5:cb:3a:10:bc:a2:93:8f:2f:ae:54:
         5e:6f:de:b8:aa:5d:7c:c7:68:f9:e0:58:0d:bb:7c:1c:e5:70:
         6f:6b:9d:b8:28:10:a1:09:96:d1:c7:13:f5:ed:39:9b:ec:5e:
         82:87:7d:5c:56:a6:ba:f5:22:df:51:9a:40:97:8b:76:7c:98:
         36:d5:36:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:37:37 2026 by rpki-client