Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ad3be9fe-fad1-38cd-b7fd-ca9b83fb6f2e.roa
File:                     ad3be9fe-fad1-38cd-b7fd-ca9b83fb6f2e.roa (raw, json)
Hash identifier:          ioZFpB5uvPZ62xblJh31ztFc3Vw+ITWGp729czL03lg=
Subject key identifier:   76:B5:CF:55:D9:88:03:C4:11:15:31:95:DC:C2:AC:1D:0C:38:F5:05
Certificate issuer:       /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial:       010D0C9F4328584E0C1ECF6C67EC91DF6E8D6AC8
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ad3be9fe-fad1-38cd-b7fd-ca9b83fb6f2e.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     16509
IP address blocks:        98.142.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:cf:6c:67:ec:91:df:6e:8d:6a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=cffbabd5-689f-49cf-bd32-4724d66e34e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:1a:9d:0b:7e:59:8b:ca:31:f7:50:f6:76:
                    f7:05:51:46:70:81:ab:bb:95:ed:db:14:24:60:3c:
                    d6:3c:36:21:cb:a1:81:01:87:4e:68:e9:d6:3d:7d:
                    04:d8:fc:19:3b:13:00:3f:b1:0c:a6:79:08:e9:6a:
                    a3:f9:e5:85:1e:95:0e:e9:2c:8d:5b:b6:59:b6:f1:
                    01:39:e6:19:da:70:d9:f1:51:2b:26:6e:94:cb:60:
                    9f:1d:ea:41:bc:bb:de:f5:53:23:40:9c:7d:6c:2f:
                    0b:5e:d6:a0:72:c4:3a:1d:0a:fd:3e:45:b4:81:11:
                    8c:a8:38:43:06:09:ea:29:13:b3:16:2b:87:31:97:
                    51:4d:01:c1:e4:fa:cd:5a:66:34:ba:c9:ad:db:35:
                    a6:e2:b5:b1:4d:d3:a4:80:d4:eb:bf:2b:97:14:89:
                    b3:c7:18:c2:72:d0:ed:64:05:30:e3:cb:7f:f8:9e:
                    93:ca:e8:59:86:77:02:f2:42:c8:be:f3:b7:23:0f:
                    af:b8:a3:ca:29:e2:43:22:87:f8:92:fe:63:f7:aa:
                    c4:be:f9:eb:f3:26:3d:50:c5:a0:f6:62:aa:35:a9:
                    3f:e7:ea:f0:f7:7d:e0:7e:34:e7:af:0e:f5:b3:c7:
                    c7:6c:54:4f:06:6c:9c:d9:0d:bd:88:a1:8f:cd:5a:
                    7f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B5:CF:55:D9:88:03:C4:11:15:31:95:DC:C2:AC:1D:0C:38:F5:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ad3be9fe-fad1-38cd-b7fd-ca9b83fb6f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl

            X509v3 Authority Key Identifier:
                keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7b:7d:6c:09:d5:8a:8a:f8:e2:5b:fc:df:b2:9d:cb:c3:f8:
         97:6c:a7:4f:bc:59:d3:e9:2a:85:02:9e:ec:81:35:d2:42:ca:
         11:ac:30:05:c3:b0:ff:5c:b8:be:17:cb:87:ab:e9:e6:c6:5f:
         a8:cb:d2:d7:ff:86:04:4a:8b:c1:79:18:d9:49:d8:e8:08:47:
         25:63:37:25:2f:64:2f:d5:82:a1:98:4a:a3:08:d9:5e:6f:e4:
         97:11:c7:07:bc:16:39:e1:d3:c6:b0:cc:66:da:48:3d:47:76:
         3d:56:6f:81:d4:0d:df:ac:be:f4:a6:73:22:66:62:de:83:c0:
         7a:96:c1:96:ec:10:b0:0c:25:09:0f:17:0f:3f:12:ed:f8:1e:
         ca:e7:0e:9b:d3:60:b8:33:86:ea:73:e2:ed:66:07:e1:70:43:
         f8:09:ca:ff:d2:ef:90:1d:a1:df:59:41:9c:9c:aa:dd:19:cc:
         f3:55:d8:cf:a7:2f:91:a3:08:3b:d9:cc:b1:09:49:07:b3:3f:
         d7:22:4b:2f:b0:c9:ca:e0:e3:69:86:7f:05:3c:c6:81:4f:0c:
         a2:45:6c:bf:59:ff:51:33:c9:e1:99:97:88:dd:68:c3:db:c6:
         93:09:81:3b:af:4e:fd:6e:ce:92:a4:a6:b9:5b:0a:c7:72:d1:
         f8:0a:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:01:19 2026 by rpki-client