Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b6ead6d2-ec85-3a82-b502-55fb79fe5173.roa
File:                     b6ead6d2-ec85-3a82-b502-55fb79fe5173.roa (raw, json)
Hash identifier:          RpBIBWb4a9h97Po9uXmZpPE29rEkzQarusJE694UAvA=
Subject key identifier:   38:D2:C4:BB:B9:B8:8F:EE:AC:B0:75:5E:D9:C4:DC:72:C4:A6:5C:87
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA57105B43BBF6882C77C
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b6ead6d2-ec85-3a82-b502-55fb79fe5173.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     20197
IP address blocks:        204.84.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a5:71:05:b4:3b:bf:68:82:c7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=a94efb26-08ca-4cd4-8b4d-4f216561c33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:bc:67:00:37:ff:2a:03:5b:8d:56:24:4e:
                    80:0d:77:11:e4:f5:f9:bd:65:fe:54:b6:96:01:68:
                    af:9f:bf:ad:06:65:2d:90:a3:45:02:60:fa:cd:ef:
                    d2:c1:45:52:ef:07:89:65:c1:cd:0f:1e:1d:85:be:
                    90:db:e7:7d:ab:b7:80:67:21:c6:a4:98:bd:e9:d6:
                    8a:25:b1:cd:4b:8a:a3:06:c5:2a:dc:5a:33:b0:7d:
                    52:ce:b4:b1:32:bd:7f:37:00:2a:45:32:0d:5e:b4:
                    2c:de:04:df:79:8c:d8:4f:b2:95:20:c8:99:19:90:
                    24:b6:e5:30:e4:6c:51:f3:1e:4e:bd:ef:d1:c0:bd:
                    b9:0d:01:a0:07:fa:f1:d7:d5:53:a2:22:0c:f7:79:
                    1d:9a:7f:c2:82:de:7d:ba:4d:2f:d5:af:86:5c:13:
                    da:bd:a7:97:a2:ae:8a:cc:55:28:4d:98:e9:30:6b:
                    65:e4:8c:21:20:16:97:fc:a4:79:99:a7:5e:72:ed:
                    c9:23:48:76:41:15:68:d8:fc:ee:61:2f:b0:38:7d:
                    9f:cc:81:62:97:e9:4a:7e:bc:9d:f1:d8:78:8f:2d:
                    61:3e:4d:7d:63:8d:be:01:4c:d8:7a:4a:4a:2c:79:
                    03:08:16:0c:6b:e6:2b:f4:16:98:a2:8d:8b:84:43:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D2:C4:BB:B9:B8:8F:EE:AC:B0:75:5E:D9:C4:DC:72:C4:A6:5C:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b6ead6d2-ec85-3a82-b502-55fb79fe5173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:55:75:b4:8f:7c:9e:58:76:fd:6f:44:be:bf:90:b4:84:e1:
         f0:d4:b2:25:68:f5:31:28:57:db:27:4e:a6:f5:a2:c3:b3:d6:
         b2:f0:0a:cb:8c:d9:02:25:89:72:c7:a5:63:ac:0c:31:46:88:
         c3:35:b8:2d:fc:b4:c6:1c:86:eb:8b:7a:e7:96:00:43:e4:ab:
         3f:e2:85:5b:b1:12:ce:bb:44:ca:3f:40:2f:aa:bf:37:13:be:
         c2:d6:00:d2:3e:36:57:72:16:73:7f:7e:cd:8a:7d:84:c5:c8:
         e3:c4:46:6d:03:4d:a4:b0:47:cb:af:e5:1d:9a:8b:36:30:92:
         2f:33:9d:1e:47:67:ff:51:f3:e5:94:10:c5:d1:f4:d9:a8:9d:
         c8:b1:11:9f:ef:f2:51:a5:e9:6c:e3:56:db:a1:41:91:10:97:
         cf:a7:8e:7d:88:60:71:3f:b5:a5:4e:ae:2d:f4:40:ae:ee:a3:
         ae:a5:cd:6d:b5:dd:7b:aa:c1:72:e8:12:81:77:97:7c:62:d7:
         e3:4c:dd:22:e8:47:26:2c:eb:81:cb:2f:3f:45:e4:71:a2:bf:
         1d:0d:46:3d:9c:77:94:18:87:45:df:7f:46:e9:b7:da:07:f0:
         76:72:05:2b:06:91:41:cb:29:28:8e:69:a6:8f:47:65:c9:20:
         b1:22:6c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:42 2026 by rpki-client