Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa
File:                     5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa (raw, json)
Hash identifier:          vxv/ohOLhIkFrfs4d7K7riGA3laBN7rVHRpIqzy2Fbo=
Subject key identifier:   35:39:1F:28:D2:54:C6:0B:35:34:38:CA:E0:5E:E9:ED:E1:DB:1D:EE
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584E253F07030CB85800FDC8F980
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     0
IP address blocks:        125.253.80.0/21 maxlen: 21
                          125.253.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:07:03:0c:b8:58:00:fd:c8:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=e9141f98-7611-4592-847f-513a489d00b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:7b:74:28:cc:3e:e1:6a:3b:fb:e5:d3:f4:
                    60:82:4b:be:c9:71:ab:d6:5f:ad:13:a6:fb:37:ea:
                    3b:ad:89:c1:5d:3d:89:9f:6c:c7:27:36:16:45:85:
                    c3:9b:8e:b9:3c:00:b7:b0:a9:bd:e8:21:9e:a0:db:
                    ea:5c:95:c9:03:16:ea:4e:40:e9:73:2f:45:9a:bf:
                    76:f9:59:72:65:e5:dd:d0:f8:68:c3:f2:71:a9:e3:
                    47:67:5f:43:3e:89:bb:b2:79:ef:a3:6d:b5:a6:38:
                    19:d0:12:bf:2f:10:a6:ac:ff:bc:56:36:e3:f9:75:
                    f5:10:b8:9d:64:8a:1d:ed:c1:af:2d:0f:fc:45:4d:
                    51:cd:66:49:79:e9:e0:a6:b5:40:ba:1d:36:a1:86:
                    20:5e:a7:20:10:59:6e:f5:1f:f4:b5:28:06:d8:e3:
                    29:ba:71:e0:03:b7:0a:32:48:55:a7:42:5f:88:0c:
                    67:60:21:1a:a3:13:a6:70:c6:5e:55:a9:36:e2:88:
                    40:8f:25:4c:21:06:74:67:c1:9d:79:41:40:eb:6b:
                    7f:f1:7f:f1:a6:5b:d8:a5:c8:49:ce:12:ab:e2:6d:
                    49:bc:b5:fa:e1:cf:69:44:89:bc:61:26:47:a6:a5:
                    51:05:2d:65:3d:28:27:27:a6:2a:ef:9f:d6:35:6b:
                    7a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:39:1F:28:D2:54:C6:0B:35:34:38:CA:E0:5E:E9:ED:E1:DB:1D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.253.80.0-125.253.91.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:76:e8:39:19:7b:be:9b:6f:af:75:f5:3a:0e:d9:6b:0e:c9:
         3c:ef:d8:4d:45:0e:12:d1:78:a3:78:6d:f5:ce:5e:57:6c:d8:
         22:22:72:b4:cb:37:c7:b6:1c:0e:53:a2:cf:62:3b:73:de:c5:
         d8:06:9f:ea:b7:12:2c:e2:d6:d9:5d:47:e8:4a:6e:a1:38:12:
         0d:60:f0:4e:5b:73:88:fa:c5:b0:9c:8d:8b:46:a2:72:42:7b:
         21:32:cc:58:94:8e:7b:fe:1e:59:a9:9b:18:85:39:f2:28:ba:
         06:4d:c5:7f:e2:51:6f:ef:13:9f:22:35:c3:ae:e4:03:68:7d:
         6b:a2:b7:8c:90:1c:26:bd:d4:89:5c:b2:93:e6:0f:7f:38:2f:
         a6:a5:69:8a:65:fd:98:60:4c:1e:49:fa:95:e0:9b:c7:61:c1:
         22:5e:7a:7f:5d:24:fe:cb:2b:1c:cf:ae:12:3f:5b:1c:b3:b7:
         54:b0:f3:4c:f9:ac:3e:35:b6:95:0c:37:5f:9e:1f:0e:74:8e:
         58:d0:39:ac:30:1b:47:40:39:a1:b1:e8:c5:9f:c6:2f:5d:41:
         f1:ed:69:9a:70:62:94:aa:8d:42:94:cd:ef:2a:f0:35:e9:57:
         3f:5e:16:6d:c6:68:eb:3b:ec:aa:cc:d1:4c:ce:6c:26:ec:29:
         ea:b9:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:16 2026 by rpki-client