Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
File:                     43af431e-7b03-3ec6-be32-6f902fc55c65.roa (raw, json)
Hash identifier:          C+hndTt8FaWa4Lsh8BSYsfXfhxTP2e5gXu+OAx5T01k=
Subject key identifier:   28:3C:38:1F:FF:11:FA:51:CA:5C:18:7F:C0:82:ED:A3:90:65:02:B1
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584E1B798C316EB044BDA4AB86C0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     10865
IP address blocks:        66.129.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8c:31:6e:b0:44:bd:a4:ab:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=94ac8251-c012-4798-ab5c-ef2dcb5521e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:b1:9f:1a:f7:ea:e0:cc:12:23:55:d3:98:
                    37:60:e2:ae:38:3a:4c:58:c5:aa:9c:46:fa:e1:24:
                    33:f0:28:03:b2:d2:21:b0:a2:4c:f3:bc:03:68:11:
                    95:5e:40:4e:f7:1c:71:44:4c:ec:5b:55:80:de:ce:
                    d0:ee:12:f1:96:90:89:5e:48:fd:0e:b9:cb:b1:6c:
                    39:c7:66:d4:22:36:9f:ca:3f:f9:1c:35:49:bb:8b:
                    c7:9e:56:53:7a:9d:7d:36:de:7c:f1:b6:eb:e4:66:
                    6a:86:3b:ce:20:70:cf:23:84:b6:d9:d8:e6:9e:d5:
                    b2:65:25:9b:f7:33:12:0f:13:8a:83:29:12:6a:f8:
                    20:b6:b1:b6:95:9e:3c:52:0f:0d:1b:dd:6b:1b:b5:
                    d9:be:b1:be:65:4d:47:2f:80:fa:32:2e:5b:3a:dc:
                    50:f4:55:7e:ed:6c:9d:c1:49:15:02:41:2a:0a:c8:
                    1d:91:af:d9:19:2f:69:fb:58:f5:d0:59:f2:86:81:
                    f2:25:e7:5b:be:bd:43:f5:89:06:36:35:32:1b:be:
                    29:1c:b1:77:46:bc:17:ea:f7:c8:e5:8d:d3:d1:5a:
                    56:8e:ec:b7:bf:6e:74:f6:bc:d8:8e:6b:2c:82:85:
                    3a:64:85:00:b8:b5:db:88:c6:72:7b:be:1b:af:f7:
                    d5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3C:38:1F:FF:11:FA:51:CA:5C:18:7F:C0:82:ED:A3:90:65:02:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/43af431e-7b03-3ec6-be32-6f902fc55c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:1a:31:d0:d9:e4:d2:55:b1:fc:82:76:b5:c6:ba:f9:82:ef:
         8f:c8:93:47:ab:71:7e:ed:50:f6:9b:15:0a:28:58:a1:b4:37:
         76:20:43:a9:1a:e9:63:60:cd:89:11:cf:7e:19:96:eb:8f:47:
         53:83:ee:3d:62:74:36:e3:ad:72:bf:d8:9c:38:40:2f:c4:e0:
         ba:6e:71:41:a3:8c:90:a0:4e:2f:e3:9b:50:ab:18:02:08:d3:
         a7:9a:a6:90:79:5d:d6:ec:10:5a:d4:91:51:fc:6d:30:24:5e:
         9a:75:af:c6:78:47:41:7d:82:f3:3e:cd:f5:7b:89:2a:f8:50:
         90:0e:e2:e2:be:32:77:dd:eb:c4:e8:09:b9:c2:16:83:ab:5e:
         c2:3f:69:28:79:36:c6:44:70:8e:ed:56:9b:34:0b:df:db:1c:
         8b:84:41:13:d1:2d:3f:50:fa:bb:e7:02:8d:e7:26:d8:06:3c:
         66:95:82:0b:00:74:b4:34:35:61:76:5e:6e:e3:ff:12:5d:d3:
         b0:cd:a8:8b:93:5d:9e:71:34:c6:50:05:7c:5f:2c:69:da:ad:
         77:01:e4:69:35:7e:9d:9c:48:6b:5b:c9:eb:5f:29:6c:91:ea:
         81:25:48:dc:f2:bb:cd:be:54:8d:a5:61:9e:d8:d8:cc:b3:56:
         2d:57:14:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:39:59 2026 by rpki-client