Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/a447c3b4-c844-34bc-a5db-4b1ff925c005.roa
File:                     a447c3b4-c844-34bc-a5db-4b1ff925c005.roa (raw, json)
Hash identifier:          1p8aGkkwEF5b3VmH8qOs7GhNaUsJxxkoIwMRLB9AVJA=
Subject key identifier:   A2:C4:5B:14:EC:52:F0:92:CB:A8:4C:C4:30:C7:E7:34:C6:41:2C:C2
Certificate issuer:       /CN=f42ba754-2a4d-4b4e-b364-698af500fc82
Certificate serial:       010D0C9F4328584DFA8E6954E5B7CBFDBD5A0F34
Authority key identifier: 7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/a447c3b4-c844-34bc-a5db-4b1ff925c005.roa
Signing time:             Thu 28 May 2026 02:00:36 +0000
ROA not before:           Thu 28 May 2026 02:00:36 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     1613
IP address blocks:        168.100.252.0/24 maxlen: 24
                          168.100.254.0/23 maxlen: 24
                          2605:e740::/40 maxlen: 40
                          2605:e740:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:8e:69:54:e5:b7:cb:fd:bd:5a:0f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42ba754-2a4d-4b4e-b364-698af500fc82
        Validity
            Not Before: May 28 02:00:36 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=f0489fd9-95e1-491c-b695-358f1e352a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:db:55:de:f4:32:dd:78:93:d1:91:93:cc:
                    30:83:64:54:ed:99:de:8f:da:d3:a1:31:68:2c:f5:
                    d8:62:87:61:22:86:9b:10:38:76:87:21:a2:b7:45:
                    34:3f:5a:a1:10:65:83:5d:a6:17:dd:62:c0:1c:ab:
                    1c:68:32:dd:89:b2:59:21:48:a6:f4:6c:f1:bd:0c:
                    48:c1:fd:07:05:d2:cf:e3:38:1b:55:86:01:62:da:
                    21:7b:a6:95:94:36:d6:a7:17:c2:a1:c5:27:5f:6a:
                    27:27:38:93:a9:af:e4:89:79:b6:b2:44:98:5e:1d:
                    de:be:43:4f:84:32:2c:e2:ef:f0:1d:64:29:15:86:
                    fb:fd:9e:83:1d:7d:c7:06:dc:08:62:77:f4:1e:61:
                    18:ec:15:dd:2e:30:af:99:25:3c:cb:e1:0e:66:b2:
                    87:04:7b:ea:63:88:55:dc:e9:56:47:0c:9c:68:a5:
                    a6:d4:28:ff:02:5c:7d:1c:49:48:e0:53:e4:61:72:
                    7a:59:9b:cb:a6:aa:1d:d9:44:ce:a2:d9:81:26:05:
                    bc:0b:e3:20:61:69:df:c0:2f:65:3e:cf:7a:29:4e:
                    cc:f8:32:47:41:8b:60:1c:cd:4e:d8:3b:06:3f:92:
                    65:8e:c1:44:4f:f8:14:9d:8e:0b:21:4a:15:45:3c:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C4:5B:14:EC:52:F0:92:CB:A8:4C:C4:30:C7:E7:34:C6:41:2C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/a447c3b4-c844-34bc-a5db-4b1ff925c005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl

            X509v3 Authority Key Identifier:
                keyid:7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.252.0/24
                  168.100.254.0/23
                IPv6:
                  2605:e740::/40
                  2605:e740:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:22:31:5f:85:95:07:b0:c8:05:27:6c:e7:75:bc:4c:1a:e1:
         38:ce:fc:ed:77:51:1c:eb:28:91:db:cb:48:b4:bb:f2:ea:fe:
         ea:69:7e:8f:d9:4e:f3:60:22:82:1b:17:4e:65:2d:da:79:2f:
         0e:e2:07:6c:e2:fc:3e:45:7b:61:25:5c:92:a8:8e:c2:78:c6:
         a6:f9:93:7a:8f:12:47:8c:5d:1b:ac:25:f9:36:02:c3:81:b9:
         d1:17:f8:d2:55:59:10:2c:4d:af:12:73:3f:a5:83:37:3b:b4:
         6c:0c:b4:0a:dc:0c:33:c6:f7:64:f4:2f:e9:ad:4a:08:7d:b7:
         83:b2:69:6f:8e:fa:57:a6:01:9c:cf:fc:be:f0:a8:86:00:52:
         11:b4:bf:5f:26:5d:27:b5:1c:db:02:d6:f2:40:e5:64:af:2e:
         98:78:12:6e:aa:9a:8d:cd:6d:96:6c:bd:2f:78:59:41:5e:fb:
         05:26:64:a4:27:c3:96:38:11:50:c9:17:10:28:75:08:17:77:
         c2:6e:b1:8d:e1:09:04:fa:53:a3:7e:cb:58:1f:c8:37:16:44:
         ab:e9:59:a4:38:84:cb:a2:5a:16:6f:55:5b:38:a1:59:e6:a8:
         df:4e:d2:b8:3d:d7:29:d1:9e:09:e0:8f:7b:0c:ae:d2:a9:21:
         4a:20:ea:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:12:33 2026 by rpki-client