Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/91bfad80-6fe2-32cf-8016-16bf4b19a422.roa
File:                     91bfad80-6fe2-32cf-8016-16bf4b19a422.roa (raw, json)
Hash identifier:          Ie3k+ypMf+OsAwmdGaMQAMtuSWQFQ7Uj/vdN9kiiZtA=
Subject key identifier:   30:F1:E7:CC:D8:4E:38:39:62:A7:0D:16:9E:59:5A:B7:A3:DC:C5:9E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E447C2D7696DAF78CB34380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/91bfad80-6fe2-32cf-8016-16bf4b19a422.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        104.137.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:7c:2d:76:96:da:f7:8c:b3:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=399eccff-6aaf-4d1d-ac1e-60c38cfbf2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:0a:67:e4:ad:34:98:8e:fb:3e:e2:29:cc:
                    85:f3:af:eb:a6:24:f6:76:f9:6f:44:53:db:38:dc:
                    02:03:a2:1c:dc:45:e9:43:c4:ba:f9:9e:50:42:5b:
                    25:36:12:4e:8d:26:c3:59:d1:04:cf:9d:ad:51:b5:
                    51:4b:5d:cf:71:7b:77:71:9f:0b:89:1f:7b:0e:6c:
                    37:bc:a9:48:6b:cb:23:b2:ad:45:dd:26:e1:4e:91:
                    f1:aa:af:03:0d:c4:6d:52:35:1d:15:bb:7d:62:d5:
                    6d:52:d9:28:c0:a1:5c:0e:a8:f4:b9:89:a8:f2:e5:
                    fe:84:eb:36:68:07:a1:3a:da:f7:ff:9c:8e:d6:32:
                    e8:db:bc:e6:fb:61:d3:e8:63:0f:6f:81:07:d0:1f:
                    74:52:f7:17:db:c0:9e:96:bc:9b:dc:68:9a:b8:e1:
                    aa:8a:fe:01:4e:48:d7:1a:2c:d8:8c:a7:e9:1b:f2:
                    ef:3e:e2:23:fc:03:f1:8c:4a:4b:fe:b8:71:80:f1:
                    08:24:fc:45:8f:01:aa:14:59:20:e5:79:b2:2a:ad:
                    4c:9d:9b:a8:fc:5e:57:ae:9e:d4:b1:9d:a3:91:e2:
                    ec:d0:3f:58:d7:56:65:c4:0c:6f:95:21:0b:a1:04:
                    07:fd:35:4d:ea:c3:da:00:c3:f8:e0:e4:00:8a:db:
                    db:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F1:E7:CC:D8:4E:38:39:62:A7:0D:16:9E:59:5A:B7:A3:DC:C5:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/91bfad80-6fe2-32cf-8016-16bf4b19a422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.137.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5b:a3:f1:d1:c9:c2:30:b6:87:8a:e3:64:c5:ca:e7:93:35:
         cd:b8:f9:14:65:93:56:23:69:70:e0:7e:df:40:67:36:99:e4:
         f8:18:e4:84:50:ef:d4:c5:5c:8f:40:be:47:cd:7c:75:51:ce:
         53:78:e9:12:45:91:3a:e5:fa:ca:dd:a5:ec:1e:ef:4f:7f:e4:
         56:b7:bf:36:10:6c:27:55:0e:df:df:77:80:5d:10:4c:3f:4b:
         84:57:fb:fa:fe:b2:63:6f:e7:9b:78:54:0d:b5:26:c5:86:ac:
         ba:ac:a0:52:57:6c:af:b9:76:f1:70:ae:2e:d6:aa:9c:0b:e3:
         5f:ce:06:4f:33:01:5c:ab:a2:ed:cd:18:ed:c2:23:4a:cd:5e:
         b1:07:d3:c8:6f:db:43:aa:cd:8f:ab:97:ee:ab:34:c1:87:aa:
         7c:92:98:d1:33:d1:7c:8f:4f:1b:01:87:fe:da:38:3f:ee:7b:
         2f:eb:59:e4:3d:71:2c:76:d7:23:91:16:f4:d1:c5:2a:64:81:
         05:3b:59:17:6b:a6:4c:b6:73:b9:de:d9:a6:a8:42:1e:fa:7d:
         2b:86:6f:b9:28:31:48:42:54:e3:75:e1:7f:b5:30:e7:87:20:
         a1:28:da:a5:44:8d:11:a0:6e:94:f9:32:99:70:aa:ac:3b:e5:
         56:78:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:47:25 2026 by rpki-client