Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa
File:                     0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa (raw, json)
Hash identifier:          VtLXJrKQ6dAjJ0TNJkXVpH54pg6UDZsMbYcTGUkKKAw=
Subject key identifier:   AC:EF:15:DC:41:F5:34:1D:E8:EB:95:E0:61:AA:2C:86:9D:9B:CB:9D
Certificate issuer:       /CN=a99940f3-ed95-444a-a18b-6d4d902f65bd
Certificate serial:       010D0C9F4328584E2809B9CBCEC59B9FCD052680
Authority key identifier: 7F:9E:C8:8D:B1:5F:32:57:D1:3F:F1:02:1A:28:DA:D6:86:3C:54:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     33602
IP address blocks:        132.214.0.0/16 maxlen: 16
                          132.214.0.0/17 maxlen: 17
                          132.214.128.0/18 maxlen: 18
                          132.214.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:b9:cb:ce:c5:9b:9f:cd:05:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a99940f3-ed95-444a-a18b-6d4d902f65bd
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=89d26c6a-2536-4eab-a27f-3547fba9c7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:dc:30:d5:17:18:63:8d:69:46:03:ba:35:
                    85:c6:ed:52:50:9f:52:8f:52:b5:f9:d8:d4:b0:7c:
                    8d:3a:43:cf:9e:6e:da:51:43:c7:90:89:ba:49:ca:
                    b0:d2:db:bc:12:b3:c4:92:d6:c6:5b:6c:60:e4:66:
                    fe:59:00:2d:9b:aa:e2:73:ca:30:5f:5a:74:e8:9c:
                    c1:24:61:47:ce:76:ec:ac:17:b5:f1:65:9c:5b:1f:
                    93:66:85:e2:b7:cd:f0:03:c6:e4:85:ed:cc:6e:b5:
                    7f:d0:4f:23:1b:91:25:21:3d:ca:68:ef:35:92:48:
                    d7:7f:4c:a0:41:1e:a8:f1:95:00:17:43:b7:56:d3:
                    9f:85:ad:af:96:56:1b:65:56:1f:d6:c8:9e:ca:9e:
                    25:eb:7d:37:a9:da:51:ec:6e:2b:45:3d:00:5c:30:
                    06:35:ca:4f:7e:3e:12:95:05:40:14:be:f4:0d:34:
                    c6:b1:b8:54:b3:bb:60:f0:01:98:0d:b9:83:de:eb:
                    42:f4:4f:2f:f0:b5:3f:f3:a3:74:ca:08:06:67:04:
                    04:56:bf:8b:94:13:ba:08:04:74:de:08:a7:2d:1c:
                    84:08:29:09:f1:25:3f:c3:cf:dc:c5:34:72:97:f6:
                    99:ec:00:72:63:8b:8f:4a:75:59:d1:7a:0c:e1:95:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EF:15:DC:41:F5:34:1D:E8:EB:95:E0:61:AA:2C:86:9D:9B:CB:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.crl

            X509v3 Authority Key Identifier:
                keyid:7F:9E:C8:8D:B1:5F:32:57:D1:3F:F1:02:1A:28:DA:D6:86:3C:54:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.214.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c2:69:56:b4:5f:42:30:77:ca:a7:4b:8a:a0:08:e6:06:9c:
         21:69:49:b3:e2:1c:0f:0a:ae:56:dd:90:91:20:56:bc:2e:01:
         84:40:35:e7:67:79:0f:35:1b:43:7a:6a:a1:b2:ec:e3:e5:f3:
         2d:ce:30:83:96:50:13:db:40:cd:6a:04:88:b6:a0:8a:03:0e:
         ee:3e:aa:1b:5a:5b:58:96:19:ab:08:81:88:aa:84:4b:e2:eb:
         26:bd:b2:db:31:db:d3:8e:26:03:ea:48:e1:fd:1b:07:5d:1c:
         d5:7b:ab:19:23:33:c1:26:ea:8d:66:f2:86:73:cb:4c:46:88:
         ff:bf:c5:43:54:34:df:01:47:e4:1a:b6:54:e0:f1:9d:a2:49:
         c6:e8:4d:22:55:1b:ef:ce:f5:b6:8d:d4:c6:65:bd:e4:9e:4f:
         98:3d:a3:c2:ae:97:5a:c3:ad:8c:c5:b2:77:17:84:fa:14:d0:
         98:20:bb:53:85:c8:73:37:ce:84:7c:94:8d:18:52:e4:e8:31:
         db:fe:e0:a1:ba:f4:c1:a3:bd:5c:7d:48:db:d3:f9:fe:81:9c:
         22:27:14:4a:dd:90:cc:d8:65:02:d2:7c:f3:21:1c:52:28:39:
         26:15:26:7c:06:12:b7:ce:f0:5d:aa:5d:59:53:75:84:24:84:
         93:6d:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:36 2026 by rpki-client