Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/6c920a13-fbeb-3e6d-a569-500385a453da.roa
File:                     6c920a13-fbeb-3e6d-a569-500385a453da.roa (raw, json)
Hash identifier:          HzGaqhNLordfCVJNjjbHgiag/GtYwF3nU3Febm5zTIk=
Subject key identifier:   52:9D:89:8C:FE:6A:41:BC:CF:89:B3:E6:06:6B:D6:7F:A4:01:06:4C
Certificate issuer:       /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
Certificate serial:       010D0C9F4328584DE58080DAFD01922DC0B98E20
Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/6c920a13-fbeb-3e6d-a569-500385a453da.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     399864
IP address blocks:        216.238.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:80:da:fd:01:92:2d:c0:b9:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=cbced8e7-d733-4971-ad96-67a916dc398d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:87:66:0a:18:ed:b5:3a:fe:6f:7a:80:6c:5f:
                    97:4d:a8:6a:ab:7f:ae:d1:e1:63:cb:8e:7e:85:5d:
                    0c:bb:b4:c5:86:0f:c4:91:fe:05:d4:bf:8a:cb:ae:
                    90:30:4c:3f:65:26:d2:76:0b:e6:40:5a:0a:c7:4b:
                    ba:5d:8c:71:47:be:f3:cd:05:71:60:da:3c:43:db:
                    08:2d:d1:70:b5:e9:49:63:6d:77:b7:8b:d4:de:f3:
                    eb:0c:6b:16:b1:f1:fc:ed:4d:8a:24:3c:11:0c:38:
                    3b:2d:57:e5:71:3e:fe:0a:f3:28:6a:fe:37:53:8a:
                    1a:fd:f9:da:dd:32:d3:7e:be:8f:76:d1:ae:51:6e:
                    fb:2b:0a:b2:6a:60:44:33:22:f5:31:ee:1c:50:35:
                    8a:f0:27:03:2e:c6:14:6a:a8:c2:97:07:e5:64:39:
                    6a:12:2d:96:33:1d:1f:4e:f7:90:2c:56:d6:08:7d:
                    0c:ce:40:b0:e1:88:c6:20:4e:e9:c5:ec:aa:c3:fd:
                    1f:0f:bb:41:59:57:a0:d8:f1:91:22:00:59:e6:60:
                    41:ef:14:0a:5a:8d:c4:b2:95:82:20:45:7f:cc:e0:
                    b6:7a:22:0e:9c:c3:6b:4d:b5:77:3c:6f:4a:3a:9c:
                    c3:90:ef:3c:f5:e3:4d:bf:a2:b2:e7:3d:4d:6f:28:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9D:89:8C:FE:6A:41:BC:CF:89:B3:E6:06:6B:D6:7F:A4:01:06:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/6c920a13-fbeb-3e6d-a569-500385a453da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl

            X509v3 Authority Key Identifier:
                keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:97:e4:31:a4:ac:08:54:b0:37:7b:8a:6c:61:05:9f:9a:ab:
         6e:c6:c4:29:4d:3a:5c:42:b2:2d:ad:5a:4c:5d:ff:69:98:c8:
         5b:f2:2d:64:ee:3b:6d:55:63:19:91:65:d9:09:5d:07:e7:c3:
         9e:67:34:2e:97:fc:61:1d:fd:c4:5d:7e:2d:e7:72:1b:44:ad:
         ba:88:30:db:ab:35:1f:42:6a:78:f7:a9:e8:3b:32:ed:62:3a:
         af:99:81:d6:1c:aa:82:82:47:3e:2e:9e:b4:43:83:5e:71:5b:
         0e:ec:e5:95:71:0b:2a:a7:e2:b9:a8:b2:4e:bb:d4:c2:85:31:
         b2:dd:77:86:a0:65:3a:ec:3d:65:68:9e:6e:e5:ca:17:db:d2:
         3c:3f:6f:1c:80:f0:e7:8e:2e:3f:1d:23:78:c4:57:5b:18:af:
         5f:cb:50:62:02:20:5e:cf:d4:3a:a6:de:8a:a0:59:5f:c9:6c:
         9f:e5:be:7b:50:80:fc:7e:67:02:7b:73:18:18:4e:43:04:df:
         a6:7a:07:5a:32:f4:df:10:c0:79:4c:58:9a:96:c9:f9:d3:a5:
         31:bf:08:6c:68:0c:cc:9c:6e:e3:04:72:f4:f7:60:08:26:42:
         22:da:66:e8:d3:32:ed:2e:b9:c1:2e:c5:d1:dd:51:3e:33:11:
         e3:19:11:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:42:20 2026 by rpki-client