Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa
File:                     6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa (raw, json)
Hash identifier:          YlJ7XMlXaA6GoTwaSFiZkaedgFajPZpksmj3/VJSak8=
Subject key identifier:   48:CA:52:FF:0A:E0:6F:3A:34:9F:3A:25:41:1E:93:2A:20:5C:5A:80
Certificate issuer:       /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial:       010D0C9F4328584E253F06842F55153AA79E4080
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     26677
IP address blocks:        199.212.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:06:84:2f:55:15:3a:a7:9e:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=42914185-a526-4c5e-acd0-6dfbd8461a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e5:ab:c3:d4:01:b1:cd:c0:50:46:e0:c0:09:
                    39:6a:8f:56:b7:ec:d7:7f:b5:83:c6:31:2d:db:9d:
                    df:19:b9:2d:aa:a8:bb:06:9c:99:07:e1:b9:c9:26:
                    c0:f2:f5:52:02:9a:bd:af:bf:43:8a:f0:e3:2a:1d:
                    11:82:3f:2b:0f:e8:c4:1d:69:1c:d9:da:16:4c:6c:
                    cc:37:b7:70:f0:54:bb:58:5c:a4:9a:2b:ed:0d:a4:
                    83:75:0c:61:2a:2f:f1:8b:62:bb:07:38:54:cd:13:
                    61:c5:06:c8:0a:a8:05:36:f8:66:da:c7:be:33:79:
                    bd:a8:80:17:5c:8b:ad:cc:a3:f6:e2:78:f9:d4:77:
                    34:88:b6:06:8e:0a:a0:10:ff:75:4f:a0:18:5e:fc:
                    50:77:e3:ae:91:9d:52:db:3e:85:b6:e7:67:d7:10:
                    3c:f9:7e:73:cb:9a:52:94:0e:7c:f2:0a:78:a6:37:
                    f4:38:3f:3c:e2:86:5a:17:2b:f9:6b:b8:3c:64:69:
                    e4:d5:b0:4f:4a:fc:82:98:c2:b6:78:45:02:72:4c:
                    c1:5e:84:7d:70:63:7d:9e:55:b2:96:25:82:ae:d8:
                    1f:e2:e1:e4:bf:0d:0d:21:3a:7f:0f:83:f2:12:d4:
                    1c:b5:ac:16:e3:34:04:c9:96:85:e9:18:e8:14:89:
                    db:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CA:52:FF:0A:E0:6F:3A:34:9F:3A:25:41:1E:93:2A:20:5C:5A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl

            X509v3 Authority Key Identifier:
                keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4f:bd:e0:b4:18:bd:49:d8:3b:a1:44:81:82:36:59:02:bc:
         70:cd:e8:51:b5:6d:31:9a:5f:7b:34:28:09:cd:a7:16:05:1f:
         33:3a:0e:c5:3c:4d:a0:c2:13:fb:4b:e3:0f:e0:75:9b:bf:25:
         95:6b:be:a6:f0:bf:2d:cc:32:a5:bd:54:6c:c5:f3:90:1b:05:
         67:b7:42:b6:3e:ab:21:e3:a0:7d:aa:22:76:6a:aa:58:cf:a8:
         15:11:81:97:26:79:63:d7:74:95:bd:bf:9b:0e:de:97:1c:99:
         06:55:1b:8f:41:08:d8:a1:c2:a3:9a:d4:96:9c:23:69:3e:47:
         d6:6d:76:72:39:82:61:ad:73:0b:2f:0b:1b:27:fd:7a:7d:17:
         72:6b:70:ef:24:29:8a:28:c4:e5:c6:6a:6d:80:54:ce:b2:95:
         71:76:11:21:90:95:b9:73:55:92:cf:ab:ef:0b:18:8b:d4:4d:
         1f:6a:53:fc:e9:9c:72:47:43:0f:47:28:ee:18:3e:81:e2:a2:
         c9:8f:b9:64:0c:04:21:53:82:35:35:7f:b9:a3:02:d4:66:7c:
         4f:42:c5:0a:2e:97:cf:4a:a7:a9:26:51:a1:fa:63:29:b2:3d:
         8e:74:00:cb:43:ed:42:d8:e6:61:73:45:27:d4:3b:65:7a:b6:
         bc:ae:67:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:25:04 2026 by rpki-client