Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d86514b6-8eb8-37ea-9210-59c9e8322b83.roa
File:                     d86514b6-8eb8-37ea-9210-59c9e8322b83.roa (raw, json)
Hash identifier:          8L9FcIBX5/nsXWSUNDdC09zflg83hxDr12lwEj2jM0k=
Subject key identifier:   2E:BB:97:D5:CA:B9:12:87:A4:18:21:CA:09:D5:21:AD:C7:DA:54:8C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E447B51592148BB9D8806D0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d86514b6-8eb8-37ea-9210-59c9e8322b83.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     20115
IP address blocks:        174.81.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:7b:51:59:21:48:bb:9d:88:06:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=83bc108e-06cf-4da9-962c-cb18e1896035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:78:12:de:2f:34:3b:c5:06:80:d9:32:4b:
                    26:1d:8b:f6:7d:62:04:17:19:08:a4:a4:1d:14:5a:
                    34:17:f5:58:6d:28:c9:4e:8f:df:39:40:51:ff:80:
                    9c:79:af:71:ad:f7:ec:fd:37:e8:19:51:a8:81:f2:
                    c6:85:43:16:b6:d3:f7:21:5c:9f:14:4a:5c:df:e1:
                    e6:9a:91:77:3c:07:fe:7a:f1:73:99:11:0a:08:86:
                    39:a2:ee:7f:19:b8:71:46:1c:86:a8:c5:1a:18:0c:
                    f7:cc:15:0c:37:99:10:1b:ff:0f:03:f6:52:50:04:
                    d1:d9:e9:98:47:6e:08:3c:3a:86:15:0c:11:09:85:
                    57:30:ec:7a:28:4a:a7:f4:36:0d:b2:64:3d:e7:65:
                    91:ef:ee:5c:2e:b6:dc:ea:09:30:3d:b5:ce:0b:f9:
                    82:a2:f0:e8:5f:1e:2a:ac:53:c4:08:a7:7e:2b:ab:
                    f7:7f:a2:5d:54:78:46:67:60:5e:0a:5f:40:aa:ff:
                    35:d8:04:d7:ab:50:d7:63:1a:cb:9b:ae:4b:a7:b5:
                    a6:ff:de:49:fc:1e:13:f5:58:b1:44:21:2d:de:de:
                    5c:14:b6:e3:df:d0:37:09:0e:cb:c4:45:da:47:15:
                    93:ff:44:14:40:80:0c:93:4d:4f:7c:d6:59:3a:63:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BB:97:D5:CA:B9:12:87:A4:18:21:CA:09:D5:21:AD:C7:DA:54:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d86514b6-8eb8-37ea-9210-59c9e8322b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.81.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d9:25:03:7c:57:f5:14:db:fb:ab:c5:8e:48:80:1d:9c:5c:
         0a:37:7f:6f:25:ec:92:82:df:84:98:fd:a1:16:3e:7e:8b:cc:
         84:c4:52:8d:3a:dc:46:4d:7a:83:ff:a4:a7:4d:af:b4:8e:7c:
         ea:f3:cc:61:ec:59:36:9a:f8:23:77:68:41:30:97:ea:f7:6d:
         8b:6e:06:5e:c7:55:2a:fb:ce:1d:e0:f8:1b:36:ef:26:3c:e6:
         a9:66:3b:b6:83:79:90:71:7c:05:e2:7b:b1:22:7d:f4:c4:59:
         20:e5:b4:46:b7:d2:85:5f:f6:06:4b:fd:02:e6:19:0e:77:b3:
         5e:f6:11:aa:d1:01:fd:06:62:9d:af:7f:ec:14:b1:b3:54:3b:
         13:e6:b1:e2:19:f2:aa:2d:d6:d5:d1:1f:07:4d:61:70:6d:0b:
         da:39:fd:e3:fb:b2:8a:a7:f3:63:d3:7b:0f:f6:96:78:32:09:
         0d:51:27:8a:6e:02:c3:cc:16:28:cf:16:9a:fe:34:bc:1b:bc:
         38:fc:ae:98:d9:b8:a9:03:f6:74:50:41:24:23:42:78:98:c7:
         23:df:99:ff:75:86:aa:0f:13:38:80:92:10:e9:1b:7c:c1:fe:
         af:1f:81:ce:f2:a6:6a:e2:ee:ba:85:6f:f7:40:eb:01:63:d3:
         48:d0:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:59:43 2026 by rpki-client