Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/7591ed07-3e4f-34e7-983f-c68801299932.roa
File:                     7591ed07-3e4f-34e7-983f-c68801299932.roa (raw, json)
Hash identifier:          oOySQ+bIVf5QUXfpETzkLHeCm6/5EjozGKwX1Fyx+1g=
Subject key identifier:   B4:16:C8:79:2D:91:A3:66:35:27:FC:06:D7:1D:64:19:8D:BE:ED:B2
Certificate issuer:       /CN=e7255484-0f74-45b3-b1d2-b5eda55e6ce7
Certificate serial:       010D0C9F4328584DF640A91AFE831069CDC244C0
Authority key identifier: DE:AA:75:03:16:19:FC:53:EA:E3:97:BC:11:13:6C:90:61:55:FD:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/7591ed07-3e4f-34e7-983f-c68801299932.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     11727
IP address blocks:        173.241.96.0/20 maxlen: 24
                          209.240.112.0/20 maxlen: 24
                          216.183.128.0/19 maxlen: 24
                          2604:5340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a9:1a:fe:83:10:69:cd:c2:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7255484-0f74-45b3-b1d2-b5eda55e6ce7
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=4d2d0720-c4d1-4c30-8683-6749d49fa2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c2:73:57:bc:a5:28:cc:ca:3e:8f:69:b3:40:
                    91:0a:97:8f:d0:a9:8c:9e:b1:0a:3f:90:e0:8a:0f:
                    eb:48:3b:0d:30:32:ce:ae:08:16:db:12:36:b6:4c:
                    86:c3:03:22:bb:27:ec:45:08:9b:08:11:ef:38:67:
                    93:f4:c0:e5:ac:05:1c:60:24:4e:8b:05:76:5c:e0:
                    2b:d6:76:fe:56:e8:d2:02:16:42:2a:a6:73:78:46:
                    bd:f5:01:2f:e6:f2:23:4e:73:29:aa:24:5a:c7:41:
                    ff:17:d0:66:c1:b8:e2:04:fb:11:b1:f4:98:10:7b:
                    69:9e:5b:b3:4b:66:aa:be:b2:68:41:d6:9d:28:03:
                    84:6b:04:c9:80:a2:37:92:d2:8e:12:91:e4:1d:d1:
                    61:a8:d7:d7:fe:0c:fd:24:c6:dd:78:41:5a:e9:e4:
                    ba:2c:ed:a2:09:4e:f3:92:28:97:db:8a:a2:30:9a:
                    92:45:98:4a:3e:13:a9:11:bd:22:b5:cd:a7:83:0e:
                    d5:58:85:b8:6e:df:f1:5f:7c:bb:5e:03:b6:87:95:
                    73:23:a3:2d:e2:f8:82:0d:46:cd:09:ac:27:e2:ed:
                    ef:27:16:c4:8e:19:ce:96:28:b3:89:bb:18:6e:f1:
                    91:6c:f8:46:40:5e:2c:09:e9:39:c1:08:b2:84:74:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:16:C8:79:2D:91:A3:66:35:27:FC:06:D7:1D:64:19:8D:BE:ED:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/7591ed07-3e4f-34e7-983f-c68801299932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.crl

            X509v3 Authority Key Identifier:
                keyid:DE:AA:75:03:16:19:FC:53:EA:E3:97:BC:11:13:6C:90:61:55:FD:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.96.0/20
                  209.240.112.0/20
                  216.183.128.0/19
                IPv6:
                  2604:5340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:3f:d8:12:c9:e1:6a:e0:ac:bd:43:8e:0b:4c:62:b4:c9:dc:
         98:b9:44:31:3b:0d:f1:f7:ae:7f:c1:3a:1b:8d:3e:eb:24:ac:
         78:7a:cb:ab:b4:48:7a:e9:1b:7a:f0:c9:b8:83:74:76:57:d2:
         77:ea:09:40:53:af:79:52:be:c8:08:51:4b:6a:67:b9:bb:9a:
         f5:b7:4a:22:1b:af:1a:86:01:92:85:d4:2a:4a:1f:e2:07:6d:
         60:d4:6b:8f:a7:96:59:81:b6:ab:f9:28:21:7f:8f:33:19:01:
         d9:af:b8:8f:6c:6e:3d:d1:dc:8f:b2:7c:d1:86:22:44:bf:5e:
         a2:ae:ac:44:91:74:fa:3c:84:2f:b9:56:dd:c1:62:72:81:c7:
         65:c5:9c:33:c0:bb:cb:c7:82:e2:e2:3c:26:5a:c5:f1:b7:3c:
         11:1f:88:52:b3:96:8a:cd:cd:81:db:c8:b2:75:63:cc:ca:85:
         d7:5a:ea:84:b2:56:99:0e:b4:6f:a0:ad:f2:d6:46:d1:7a:cc:
         0f:e1:34:39:47:9e:80:ba:54:27:0a:c6:63:d0:5c:a8:7c:46:
         bb:68:fd:d9:e5:f7:38:06:bc:bd:2a:2e:f2:b7:3d:c3:7a:99:
         f0:8f:f5:7a:60:da:47:92:ff:d4:3c:ad:0c:f1:39:ec:19:9d:
         b8:49:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:14 2026 by rpki-client