Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa
File:                     e51d6345-d432-370c-9bcf-1a0a6bc53063.roa (raw, json)
Hash identifier:          voI2+3XpNhUg99E3N9jGSvCQPFMQg4SeJAEHKpAGV5w=
Subject key identifier:   4E:D3:C3:C8:AF:1C:7C:F1:56:E5:82:D9:A5:BC:4B:7C:D8:82:17:5B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E447AC4F8CFBE1566F92E80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     20115
IP address blocks:        172.220.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:7a:c4:f8:cf:be:15:66:f9:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=25f45f3e-b666-4e29-b73e-bce4a48d3387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:47:fb:d5:00:0c:83:b1:f6:7e:93:3a:c8:89:
                    63:bd:d6:71:50:20:7c:ec:ee:97:2c:92:26:22:14:
                    01:0e:6c:16:d4:e3:c6:32:03:c4:c9:7f:b7:29:ce:
                    08:7c:c9:bd:d1:8c:f8:7f:36:3f:29:16:de:e8:9e:
                    57:35:67:8d:e3:ef:a6:ee:71:08:bc:e7:63:10:95:
                    78:9f:9e:b7:69:66:a7:cb:26:62:b7:70:00:37:ee:
                    cd:ad:e7:7f:0e:e3:83:cd:ae:d3:94:4a:7d:67:e0:
                    a5:8a:8d:ea:f0:d7:95:23:3e:23:80:51:7a:53:30:
                    ab:83:2c:d5:67:ae:52:30:3b:65:20:9a:28:5f:e7:
                    85:04:44:46:52:eb:07:52:f9:d9:6e:a9:5d:ff:33:
                    89:51:84:6c:cf:e9:0a:41:b5:62:5d:7e:55:9a:f2:
                    7a:42:e5:11:9e:7e:3f:75:bb:b3:6c:a2:13:68:70:
                    70:73:24:d9:a0:e1:89:52:f9:65:71:0f:d8:93:14:
                    ff:ba:5e:a1:16:a3:2c:97:28:8f:e3:37:e6:af:14:
                    2f:f1:37:04:ee:6c:c5:0a:6b:9a:41:e0:54:e1:ea:
                    9f:9f:52:a3:c0:3f:8b:ea:dd:b1:99:06:0d:a4:7b:
                    6a:a4:5e:43:21:31:8f:bd:53:57:a5:6a:64:86:c9:
                    23:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D3:C3:C8:AF:1C:7C:F1:56:E5:82:D9:A5:BC:4B:7C:D8:82:17:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.220.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ef:8b:b5:b4:ce:80:94:e9:44:44:db:87:0b:13:37:19:d8:
         41:2d:0a:5a:1e:32:e7:d1:30:30:0c:e1:fa:87:0e:03:7d:54:
         50:49:44:29:93:27:0d:5d:50:1e:7f:5d:66:aa:ca:ca:6c:18:
         d2:e4:9e:6b:b4:0a:b6:df:17:2c:48:bb:75:5c:6e:8e:f2:13:
         cb:79:23:ca:e0:a6:8c:71:9b:84:c7:0b:70:e0:03:2d:60:fe:
         18:c4:73:0b:d2:7b:67:c1:9d:e0:77:25:a1:45:8c:ca:49:53:
         65:94:74:ff:5b:7c:55:09:b7:63:fa:80:f1:c4:4d:75:66:ce:
         97:2a:1b:3f:31:46:61:90:4e:ee:a3:1b:06:41:99:14:1b:75:
         b3:1d:91:41:8d:44:0c:db:a8:ed:9e:83:d9:fe:0c:aa:89:97:
         5c:2d:a3:45:51:0c:4f:b2:32:8e:ae:89:63:57:3e:8b:1d:b2:
         a7:c7:01:50:d7:e4:be:e1:ed:a6:5a:fc:28:d7:10:04:f7:18:
         1b:49:ff:e0:0b:f7:c3:9d:59:0d:be:c2:c1:4c:5f:f1:d5:bf:
         a0:78:fe:79:f8:39:d3:5f:c5:5e:f1:76:4e:04:ad:bf:42:b4:
         14:cf:ce:08:30:ad:25:0b:18:d6:5c:38:09:09:fd:df:8e:30:
         0a:63:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:23:43 2026 by rpki-client