Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/9f81c53a-a99c-3518-b970-6ebd375ae001.roa
File:                     9f81c53a-a99c-3518-b970-6ebd375ae001.roa (raw, json)
Hash identifier:          TQEskfMdBMPs2O3c2FXIciFTBbxuHzY8CVHG2mVhlxM=
Subject key identifier:   06:F8:74:1E:79:66:9A:8D:FF:6C:CF:7F:CC:38:A2:F1:29:0D:C9:9A
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584DDD2078CCB966A96A43145900
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/9f81c53a-a99c-3518-b970-6ebd375ae001.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     11377
IP address blocks:        216.20.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:78:cc:b9:66:a9:6a:43:14:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=99f2d165-7d50-4120-bee6-7da3a9fb5d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e7:ac:79:c5:5a:92:11:bb:4e:52:79:98:e4:
                    4d:d4:6e:13:59:a2:f7:b8:64:db:0f:f2:cf:c3:de:
                    41:15:96:2f:b2:d7:9e:1b:56:4c:5a:2c:03:ca:ab:
                    db:6b:94:64:0f:2a:fa:c9:b0:65:f8:a8:8c:f9:ed:
                    14:49:49:ef:03:11:3a:84:a8:eb:62:c9:cc:6a:e3:
                    8f:1e:71:34:71:1b:3a:d5:aa:f0:da:64:0c:ba:c7:
                    e2:6a:97:cc:f1:3b:3a:79:5f:d9:2d:7a:f3:e9:ac:
                    db:45:0f:f9:f2:9b:0a:c4:3c:78:c7:8f:b5:e1:0b:
                    8c:34:97:30:b6:96:08:a7:04:d1:79:cc:32:e2:aa:
                    c7:c4:f4:22:02:7d:d5:bf:88:45:80:f8:1d:99:57:
                    20:57:79:14:6d:70:a3:d1:38:83:ad:0b:c5:22:9b:
                    cc:35:59:18:21:ed:e4:da:74:d5:47:82:16:1b:52:
                    e1:17:12:e5:92:ae:78:42:42:36:73:69:85:27:61:
                    4c:49:85:6c:69:6f:09:66:73:36:63:8e:b6:ba:ac:
                    36:ad:04:c6:32:2e:99:d9:a0:b3:12:a3:51:d5:70:
                    15:da:4f:07:e5:71:8a:65:38:1c:ae:8b:bb:b7:85:
                    09:24:a4:ef:04:64:31:f3:dc:03:c3:46:17:ff:6d:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F8:74:1E:79:66:9A:8D:FF:6C:CF:7F:CC:38:A2:F1:29:0D:C9:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/9f81c53a-a99c-3518-b970-6ebd375ae001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:9f:b7:ce:0c:85:55:50:90:78:b3:f1:4b:0e:7e:e3:81:1d:
         d0:aa:cf:7d:6f:67:24:05:66:66:ff:14:53:ef:a8:0d:56:bf:
         e2:ee:33:ba:a6:10:68:ec:e9:06:d9:23:09:89:59:d1:82:62:
         5d:7b:7c:32:86:0e:33:f1:57:e8:b9:61:32:c1:f6:65:b7:19:
         a6:dc:ba:d8:4f:09:6e:ab:a5:b3:07:27:ec:3e:5d:b7:66:02:
         cc:5f:f3:9b:c6:ce:88:16:27:b6:14:f0:38:43:d6:74:1d:5c:
         92:d0:7a:e3:3c:49:83:e5:aa:f7:7f:44:28:1c:ac:09:27:81:
         33:f3:8e:50:2d:3a:15:99:fc:4b:2e:71:d2:55:f7:d7:bc:8f:
         6b:fe:02:5c:40:7a:91:59:75:17:ee:fb:b8:72:d1:68:0e:b3:
         0f:8f:43:7f:5d:a6:88:1d:94:35:98:97:3b:59:77:b3:ad:7e:
         90:f8:cc:83:41:44:f0:a6:02:35:6e:e3:bc:1e:27:75:fb:d2:
         e1:36:3c:a9:44:3d:8b:cf:69:b9:2b:67:51:e8:19:0b:ce:d2:
         e3:0f:8c:05:61:99:d2:d0:8e:5c:f6:b9:c5:40:69:6d:24:e4:
         89:fc:a1:d9:ef:da:d4:c8:17:94:34:d0:b6:97:1a:42:f5:8f:
         d1:70:16:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:42:02 2026 by rpki-client