Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa
File:                     c94ce2a3-4802-3ebb-ac84-90080f08baea.roa (raw, json)
Hash identifier:          53OiRJeixADaOsMHW+0pMYg4I/17tzzQy40lKY1aCRo=
Subject key identifier:   B1:3E:69:34:A8:96:D1:08:45:0E:40:20:C7:9B:17:10:0B:2A:9C:A2
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584E210EF9FA59C207C10ACF3180
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     22418
IP address blocks:        209.151.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f9:fa:59:c2:07:c1:0a:cf:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=ff4719b9-ccdd-4d09-9b2b-f9f6d9445588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:07:f1:3f:00:cc:eb:68:16:8b:90:94:4c:4d:
                    e0:c5:b8:96:ba:fd:15:7c:38:69:db:e0:d4:e6:ab:
                    54:1d:e6:26:62:d5:2d:72:27:3e:75:ef:ed:3b:3e:
                    53:cf:06:e9:58:54:d4:fa:a0:01:e5:ad:0f:cc:26:
                    69:9a:20:91:3a:71:41:0a:56:54:28:25:f2:87:23:
                    e6:ca:38:5a:50:50:c7:63:1f:38:b8:43:24:1f:e4:
                    5c:a1:50:71:cb:47:42:37:9b:26:6b:fa:4e:9a:15:
                    8a:b3:60:90:15:b9:d5:97:6a:dd:73:cd:e6:4d:d6:
                    8d:18:e0:e0:c5:41:1d:4b:1f:4a:c0:fe:14:4d:ee:
                    a0:28:a6:5c:2b:69:c5:49:47:d5:97:0b:91:a4:87:
                    4f:dc:1e:85:c5:6b:08:49:1a:4b:d4:4b:84:14:39:
                    4b:9d:61:d1:9f:6f:f3:b5:c2:0f:bc:fd:c6:72:41:
                    21:73:fe:94:1c:7c:00:5d:2b:cf:ae:5b:38:3e:c7:
                    b3:1e:e7:89:70:74:94:65:15:c5:89:89:25:6f:03:
                    4f:f6:54:bc:ae:e0:00:b1:b1:60:b4:07:97:f1:b5:
                    f5:18:52:19:05:34:61:13:c1:4f:83:39:82:ef:70:
                    91:5e:ea:72:50:65:14:3d:f7:8d:46:c1:d8:8f:6d:
                    4d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3E:69:34:A8:96:D1:08:45:0E:40:20:C7:9B:17:10:0B:2A:9C:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c94ce2a3-4802-3ebb-ac84-90080f08baea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:69:d0:90:97:1d:ff:a8:63:2c:87:65:91:ae:f6:bc:d0:35:
         04:b3:19:d9:8b:d7:8f:e1:f5:6c:78:1f:f9:5e:80:bd:a9:17:
         32:72:09:43:21:58:8f:54:3e:61:fa:8a:84:d8:ce:ec:55:1f:
         4c:db:46:2f:94:27:0f:83:48:54:79:bf:87:88:dd:52:58:fe:
         7a:90:b2:f2:35:41:4e:8c:08:f0:94:1f:b2:4b:e7:69:4d:71:
         1f:f2:66:81:ee:bb:3a:d0:3d:16:63:fd:f5:e4:94:ab:91:6f:
         e6:ec:c2:7f:3a:ed:85:ca:fd:dc:7c:94:26:e7:8a:a2:d5:c3:
         0e:d0:90:bc:a6:96:2d:d0:4a:c1:ec:3b:fd:06:b4:77:f2:ed:
         3e:ec:ce:59:9a:1e:36:00:be:3f:69:68:92:2e:f3:1d:cb:e9:
         e1:b6:6e:95:d3:a8:2b:ec:de:17:ab:7f:8c:2d:04:b5:13:d3:
         21:fe:b1:5c:df:cc:b7:73:4a:41:4a:2d:48:1f:83:01:5d:18:
         bc:0c:b1:1f:7b:d0:01:05:2c:4b:71:94:48:f4:a3:96:a8:18:
         bd:60:44:f7:e7:cd:37:67:c0:06:c2:60:2e:8c:8b:bb:c2:de:
         2c:97:e5:9d:87:f1:7e:7c:f8:73:44:d0:bf:5c:16:c8:11:f1:
         7b:db:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:03:50 2026 by rpki-client