Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa
File:                     684afc08-241d-3133-9300-b05e5c02b68f.roa (raw, json)
Hash identifier:          0LsCdUC91ABVuUXM1qV9tiw3/pc+u1OUY3PAAKprhQg=
Subject key identifier:   5A:86:51:D7:73:5F:61:C0:72:1C:38:FB:58:3C:72:A7:2C:AE:22:FE
Certificate issuer:       /CN=15b30dd1-216d-4b82-87ee-44becb2d20c7
Certificate serial:       010D0C9F4328584DF2108B20F45D1F0419492C80
Authority key identifier: 4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     32852
IP address blocks:        204.10.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:8b:20:f4:5d:1f:04:19:49:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b30dd1-216d-4b82-87ee-44becb2d20c7
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=a7ee6643-362c-47fd-90bc-d8d5d7c5b8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:2b:ad:20:f9:3e:14:52:04:46:4b:81:50:
                    6d:e3:95:e8:b1:78:f0:7a:d8:15:b3:1c:e1:55:05:
                    d3:b5:2a:d4:0c:f2:a7:04:8a:63:99:6d:74:a3:eb:
                    88:d3:85:77:f5:3a:c0:3e:1d:45:4f:c6:12:3e:fe:
                    92:c2:63:1a:87:e8:c9:44:37:6a:64:75:04:2c:09:
                    36:7b:b6:25:2e:99:12:89:3f:03:e9:e1:ac:1c:a8:
                    d9:cc:21:73:7a:9a:ce:8b:c7:64:54:49:eb:f5:9d:
                    a9:95:42:54:3d:1b:08:3c:a9:70:ef:03:35:82:a6:
                    c5:34:a7:28:8a:37:7f:c0:60:08:b7:23:95:6b:97:
                    73:d1:33:93:5b:99:8a:7c:75:c0:4a:f8:11:ca:26:
                    3e:54:d6:f5:ee:77:86:a6:06:c5:38:71:3d:7f:88:
                    d8:34:b3:7c:86:00:48:d7:d5:80:dd:0d:1c:c7:1f:
                    85:ff:7c:a0:0d:40:16:56:ea:9b:3f:4e:c2:44:4b:
                    c5:d9:4e:4f:f4:d5:2f:f5:ca:a4:81:96:2a:3c:e1:
                    c3:d9:08:57:2b:7a:51:80:1a:29:68:18:42:05:67:
                    ad:b7:2c:25:ae:cd:a8:d6:23:9c:0d:c6:af:9c:d2:
                    64:dc:0b:80:1c:18:aa:c2:ab:56:bf:c0:00:46:5b:
                    0e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:86:51:D7:73:5F:61:C0:72:1C:38:FB:58:3C:72:A7:2C:AE:22:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl

            X509v3 Authority Key Identifier:
                keyid:4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c6:f4:29:32:55:4d:e1:9e:50:75:94:0e:a4:ef:cf:37:7a:
         df:71:95:3a:5d:f0:e8:29:d2:a6:51:32:6a:ce:0c:a5:7b:0b:
         1f:be:5b:64:ec:83:08:bf:99:2a:5f:5a:1f:f5:07:91:7c:bd:
         f8:df:0b:68:5d:e4:7d:ca:e0:8b:e2:05:a3:e9:27:00:7e:aa:
         04:d1:4a:22:46:4b:cc:79:c6:17:ad:6b:7e:ee:7f:71:ae:1c:
         93:da:97:0f:52:3f:fa:dd:23:ef:bb:c1:c6:2a:87:8c:f3:d9:
         d1:a7:ea:55:de:3d:f2:01:65:45:fe:41:1a:19:d8:4d:96:1d:
         2d:d9:4b:c2:ad:a9:80:15:ae:5e:a9:40:97:28:c3:9d:56:35:
         eb:e1:46:8d:7e:fc:6a:4f:a2:1f:e0:7d:b5:6e:6a:93:bb:bb:
         b1:ab:5a:a6:d9:39:8a:42:12:b5:2c:bf:1c:a0:df:df:92:d7:
         75:87:f2:11:0f:ea:08:8d:05:80:2d:82:35:57:5d:70:96:b3:
         e5:7c:e7:24:58:99:43:45:00:97:57:3d:b2:e5:ef:aa:5f:20:
         17:d2:17:94:a1:41:e3:c7:fb:09:c3:63:4d:f6:16:7c:4a:d8:
         b2:45:9c:77:5e:59:4f:86:f0:93:6a:8d:61:6a:a1:5c:9d:20:
         62:5c:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:14:28 2026 by rpki-client