Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/6b886f46-4a10-33ef-b8bc-84fddc997738.roa
File:                     6b886f46-4a10-33ef-b8bc-84fddc997738.roa (raw, json)
Hash identifier:          Rmb+k4/6YccHR62M4x9THi+INFUBTLYjsjyagu7WAZ0=
Subject key identifier:   81:A0:95:FA:2D:F6:69:8B:77:09:C2:16:3E:FF:E2:8E:4A:FC:A7:FE
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F4328584D6AAA83D3C46E4C84D6C5E140
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/6b886f46-4a10-33ef-b8bc-84fddc997738.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     11659
IP address blocks:        169.147.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:83:d3:c4:6e:4c:84:d6:c5:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=52b90dfd-4fa5-447d-86da-118494a2ccc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6a:57:3c:9c:82:3b:4a:ba:4e:e8:13:eb:af:
                    de:6e:2e:44:10:eb:d6:ec:b0:f6:00:8d:a6:df:07:
                    aa:f7:e8:f0:f5:bf:cf:44:69:99:87:9a:9a:8b:12:
                    94:c2:1d:ac:12:b4:df:9a:fa:34:86:91:26:2b:d6:
                    2b:f2:66:b9:d3:27:a2:b1:de:f5:77:b9:f6:76:28:
                    46:a4:57:7d:ed:28:49:2a:33:1d:6b:61:c5:4d:4e:
                    4e:4d:e8:0c:01:40:e9:8e:cd:91:fa:5a:76:b7:f2:
                    f3:cf:5e:a8:a3:1a:f6:a6:98:a1:dd:de:c1:fb:ae:
                    d4:6e:ec:5d:62:94:6e:cd:dd:f3:05:20:dd:0c:99:
                    64:62:c6:f9:19:65:83:42:f3:e8:6f:29:69:de:0a:
                    34:cf:28:81:9d:0c:9b:07:b8:22:de:ec:58:8f:f8:
                    da:47:12:eb:49:a6:47:e5:94:7c:2c:f7:0d:b1:8a:
                    ec:91:26:cb:f9:5f:81:29:b4:1b:fd:21:42:d1:50:
                    45:95:ef:8a:23:96:e5:3a:95:dc:4b:75:40:43:cc:
                    c8:bc:ef:7e:fa:82:46:b3:ea:3d:02:3b:64:4f:6e:
                    80:a9:85:f1:f0:14:29:6b:ae:68:42:7f:99:64:3f:
                    70:1e:ed:8a:f4:e1:d8:67:32:e6:4a:ee:c4:83:e1:
                    0a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A0:95:FA:2D:F6:69:8B:77:09:C2:16:3E:FF:E2:8E:4A:FC:A7:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/6b886f46-4a10-33ef-b8bc-84fddc997738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c6:cd:27:84:b9:8a:f7:1d:40:a9:27:52:8e:35:d1:d5:d6:
         25:5f:d6:7b:27:ea:6d:3a:49:3e:3e:73:ff:fa:48:75:e7:12:
         15:75:ae:f1:e9:67:9e:c5:5c:f8:4e:dd:d2:cd:57:60:5b:ed:
         82:d4:d4:0e:12:8e:35:17:42:c5:37:a0:b2:07:af:a6:09:ee:
         ca:01:ee:c9:5d:3f:77:88:fa:43:2b:77:4d:8f:79:1c:81:6f:
         de:8c:6b:7e:5f:85:3a:6c:6d:d2:77:91:f5:69:73:33:6e:06:
         66:95:0c:35:92:a8:b2:08:20:df:a9:fc:3f:4c:43:d4:fa:45:
         39:5c:e6:87:77:4f:49:17:db:e1:8c:f1:78:47:94:e3:ba:a2:
         00:d2:df:e1:e0:54:df:d6:4b:36:5d:8a:46:f6:94:b4:4f:3d:
         8c:3c:2c:70:8d:be:4e:32:b1:21:5d:1e:cc:a0:2a:64:9c:85:
         08:68:75:68:4c:cb:46:17:55:90:c8:a9:5a:a7:2e:a9:41:e6:
         85:f3:40:ef:dd:ec:63:36:42:42:1f:e2:d2:12:c3:31:e8:54:
         d5:60:92:31:19:1a:a1:57:e4:f2:06:df:ed:17:94:35:7e:e3:
         fe:fd:6d:62:55:38:a3:c0:6b:16:67:95:b9:d9:5f:85:7c:d8:
         ea:9a:9f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:17 2026 by rpki-client