Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/63a33622-cac8-3e7b-a000-5c87a6fcb9ce.roa
File:                     63a33622-cac8-3e7b-a000-5c87a6fcb9ce.roa (raw, json)
Hash identifier:          iC5X5UbGgIOEcE2wXkP+slT58RsCkIkoV6/ILEgtbts=
Subject key identifier:   AA:6F:14:88:FA:C6:4D:4C:A8:25:09:E4:15:F7:EF:48:F0:9D:F1:57
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584DDBBB1DA06E132728081C8800
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/63a33622-cac8-3e7b-a000-5c87a6fcb9ce.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     60558
IP address blocks:        192.240.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:1d:a0:6e:13:27:28:08:1c:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=172ac175-39f2-43d0-9c82-a3dcc7ddd70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:49:6b:77:f4:21:3d:15:68:eb:15:58:f7:
                    7e:20:18:fc:6b:c3:b8:ac:18:b3:41:4f:41:20:e7:
                    29:78:4b:55:6b:c2:0a:12:67:02:d7:9a:eb:60:08:
                    15:b7:89:18:5e:b6:65:11:04:b9:fe:21:69:b5:7e:
                    05:30:39:4b:c0:76:01:1d:31:88:67:19:6c:2f:e2:
                    75:d5:a3:e4:7a:4d:a9:fb:2c:db:9f:07:21:cc:50:
                    97:cd:79:87:10:4c:0a:e5:ad:a1:9c:93:35:8c:2f:
                    d6:7b:4c:ab:19:73:65:8d:00:15:6b:7b:b7:81:e2:
                    37:80:be:c5:c3:32:59:f0:81:0e:b9:06:ab:99:e6:
                    05:4e:52:00:fb:2e:d2:06:92:1e:12:3c:5c:27:1b:
                    6d:c6:18:73:7a:53:42:09:77:e0:02:62:3f:f4:12:
                    57:48:0e:c2:79:9a:ea:f2:b7:b6:a3:da:84:84:40:
                    96:2c:59:0c:0f:01:8d:9c:74:4c:73:9e:4c:4c:fa:
                    aa:54:54:43:c8:d4:11:ae:2b:b5:bf:70:f0:51:51:
                    5f:8b:4f:57:66:ea:00:f2:fa:d8:09:2e:d3:d6:5e:
                    7d:52:ce:4a:3e:ea:94:d5:49:c4:77:e1:37:2a:36:
                    7b:01:b7:f6:b5:03:a4:1c:ec:85:28:28:4f:cd:6f:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6F:14:88:FA:C6:4D:4C:A8:25:09:E4:15:F7:EF:48:F0:9D:F1:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/63a33622-cac8-3e7b-a000-5c87a6fcb9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.240.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:1c:57:0f:7b:1e:ea:9f:60:20:76:9f:ab:04:cb:e9:93:f8:
         a0:ad:85:22:94:58:54:e9:80:90:0f:1c:98:9a:1d:dd:d6:02:
         97:e6:7d:9b:33:ae:4f:c9:08:e8:2f:68:85:c1:8f:41:6e:91:
         b4:83:03:32:73:2f:87:ff:70:dc:91:5e:ea:bc:11:f4:87:d0:
         00:04:a6:c3:af:3e:5f:2e:df:10:b3:0c:14:52:be:fb:39:72:
         53:f3:fc:2d:f9:89:24:ab:dc:b0:5e:ca:3a:ef:b9:bb:9f:47:
         db:ab:8a:e5:27:73:3e:7e:2e:85:c2:fa:04:b9:6d:9e:e4:61:
         55:d6:93:94:25:5b:6c:94:aa:f4:14:17:36:34:6a:9c:54:3a:
         de:35:de:bd:6a:e2:1b:4f:46:67:cc:f9:df:52:d8:7d:8e:61:
         95:e4:9b:2d:1d:a4:4e:f8:a4:d1:92:9f:6f:a1:38:19:8d:0f:
         31:06:cf:74:37:7f:b6:1c:46:27:26:7b:e1:9e:a3:5e:32:14:
         b1:10:db:22:fa:c4:7d:bd:e2:b6:af:3c:45:71:38:5c:56:64:
         3d:77:a0:0d:b2:5d:83:2f:87:1c:d2:85:13:83:7a:b2:9a:5f:
         27:ef:41:e0:91:47:8f:f0:77:d1:3e:a9:43:e7:d7:20:46:2a:
         31:bc:6b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:10 2026 by rpki-client