Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/f9aab180-93da-396f-bfbe-9e48a799debe.roa
File:                     f9aab180-93da-396f-bfbe-9e48a799debe.roa (raw, json)
Hash identifier:          QAJCusL8dgzBtPHHzCqi+0zzJhg8r2Pwc2VTR10lkeU=
Subject key identifier:   09:78:BE:22:8E:17:12:E8:B5:28:2B:CA:0B:4A:15:BC:21:8C:0E:74
Certificate issuer:       /CN=3e48233d-2f75-4e7f-b6b9-87e412dfbd8b
Certificate serial:       010D0C9F4328584E0865E0FD7FC968C71A0AF880
Authority key identifier: 86:7F:E5:14:63:46:76:DB:97:80:69:B2:6E:7B:87:1B:BE:51:86:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/f9aab180-93da-396f-bfbe-9e48a799debe.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     14618
IP address blocks:        134.195.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:e0:fd:7f:c9:68:c7:1a:0a:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e48233d-2f75-4e7f-b6b9-87e412dfbd8b
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=ec349aa2-00de-4d0c-8110-e256cbfc2a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:d4:27:47:1c:f2:b4:75:58:63:96:55:02:
                    cb:66:16:3b:9b:83:26:c6:df:c7:42:2d:35:00:ef:
                    ed:31:68:48:94:87:2d:9b:af:4e:23:ed:c1:73:11:
                    db:3d:b4:24:4d:35:8d:ee:e8:6c:6c:bd:e0:84:24:
                    de:c0:cb:bb:49:2a:d0:3c:10:01:13:73:e9:3b:95:
                    f3:ab:5b:3e:64:c6:a0:49:0e:01:62:c2:99:9a:10:
                    a6:4b:b9:b7:0e:28:0c:00:5c:b6:82:c5:5e:73:fc:
                    42:8d:1f:cd:58:12:16:f6:47:39:9a:3b:4b:7e:3f:
                    54:13:50:29:fc:d1:86:3a:0c:99:2e:02:6a:b2:7c:
                    ba:94:4d:53:28:ba:f1:7f:ae:d1:51:34:64:ef:d8:
                    69:4b:e5:e3:43:28:ff:2a:a4:b2:f6:40:6e:f3:81:
                    55:e4:66:36:ec:ef:cf:2c:a6:b6:15:1c:90:8c:ba:
                    1f:da:9d:9b:40:e0:15:84:6f:4f:a8:77:02:34:35:
                    f5:ee:78:a1:1a:23:a0:19:75:db:72:d1:5e:be:78:
                    31:1b:e3:1c:68:53:b1:1d:84:bc:ed:e3:1b:80:7b:
                    5b:13:e1:c3:2d:e2:08:98:0c:0e:b4:4c:93:28:4b:
                    42:70:4a:88:59:01:45:5e:30:cd:f1:a3:04:be:e4:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:78:BE:22:8E:17:12:E8:B5:28:2B:CA:0B:4A:15:BC:21:8C:0E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/f9aab180-93da-396f-bfbe-9e48a799debe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.crl

            X509v3 Authority Key Identifier:
                keyid:86:7F:E5:14:63:46:76:DB:97:80:69:B2:6E:7B:87:1B:BE:51:86:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3e48233d-2f75-4e7f-b6b9-87e412dfbd8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:94:67:bc:0e:b8:b8:d6:0e:77:00:bf:84:0f:75:b1:fc:13:
         6c:0d:50:c3:d4:c5:0a:89:ac:b9:e4:58:f8:7a:91:e2:57:55:
         90:46:ec:38:31:75:cb:4e:73:18:41:1e:d0:c5:5f:81:42:65:
         f6:2b:7d:13:58:6b:07:bb:0a:4f:ad:e7:17:e4:cb:16:5b:68:
         15:9a:98:76:be:b5:0e:1e:6b:4c:da:2b:a7:39:fa:74:91:3a:
         ba:0e:5e:3e:50:ce:e1:c4:06:78:c7:89:7b:07:88:32:62:e6:
         1d:8a:77:26:b6:85:51:56:a3:17:2b:48:35:62:86:35:76:59:
         88:29:96:89:6f:3e:4c:df:00:f3:cb:97:2a:1d:d7:f3:19:ae:
         11:8f:eb:41:de:cb:9a:b3:9d:c5:b0:ea:f1:f3:c6:43:d9:33:
         e3:a7:3e:e6:c4:6f:68:8a:86:fc:04:c6:38:4d:09:47:bf:a9:
         37:bb:1f:23:46:ce:2e:27:8b:7f:07:d8:9b:a2:c7:50:87:cf:
         b6:38:9e:89:af:82:f3:de:7e:58:38:50:c8:5c:9c:8a:fd:27:
         9c:75:53:f7:9a:10:92:60:56:c6:70:08:e9:c7:58:85:0a:26:
         59:81:9b:1f:6f:c0:c5:38:b3:b4:38:cf:26:72:af:ab:2a:c5:
         40:11:4b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:30:00 2026 by rpki-client