Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/1c0970c7-6818-3f17-a6be-abb3ae87972c.roa
File:                     1c0970c7-6818-3f17-a6be-abb3ae87972c.roa (raw, json)
Hash identifier:          D0FTTWUdaPF8PRa6U8L4ffrmZI6jYrZpCg7A0O4+9Vw=
Subject key identifier:   D2:8D:A9:FA:67:74:34:E6:8A:AD:8F:73:EC:C9:18:AC:B1:D1:DE:9A
Certificate issuer:       /CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
Certificate serial:       010D0C9F4328584E07008B603A3CE5CE67909880
Authority key identifier: CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/1c0970c7-6818-3f17-a6be-abb3ae87972c.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     393397
IP address blocks:        173.195.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:8b:60:3a:3c:e5:ce:67:90:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=d58cc067-6313-4bda-b7b1-75aa9eaac778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:ed:5c:b5:68:93:c7:85:7a:a4:22:21:e5:
                    7b:8c:e8:a9:c2:a8:45:82:d0:1d:3e:d5:1c:b7:28:
                    65:79:b4:f9:f3:a7:e0:78:03:b3:4d:5e:85:ba:fd:
                    64:e9:3b:5b:38:aa:14:c9:aa:e5:72:fd:76:54:42:
                    b2:d3:76:09:6a:d3:da:89:d7:a7:a4:11:e8:57:7d:
                    4b:42:e7:5a:00:0a:ac:51:fa:2c:21:0e:75:ae:e9:
                    68:4b:a2:de:29:88:ab:2a:f8:65:2e:e1:3d:96:56:
                    83:6c:5c:b9:0e:9e:6e:19:36:9d:33:27:35:ca:56:
                    67:81:df:2b:41:be:ae:8b:63:24:72:4e:c1:b8:53:
                    b3:68:5d:74:92:8b:dc:d5:71:f4:50:48:55:af:2b:
                    9e:0b:83:e6:16:3a:b9:20:e6:3e:71:a3:02:cd:00:
                    72:06:86:30:4f:08:e3:9e:b3:41:61:cb:d7:0a:2a:
                    41:68:97:b5:e1:fc:f2:6e:52:04:9a:e2:37:fd:bc:
                    57:73:14:cd:67:85:7d:c0:1f:da:32:75:0b:ab:61:
                    e0:8b:e5:0b:8c:c0:eb:1c:47:ca:54:fc:a4:31:31:
                    6d:ea:72:f3:aa:e7:2f:9e:e2:5d:0d:6c:56:5f:df:
                    79:6d:1c:5b:9a:15:d3:07:8e:58:aa:46:e1:8f:76:
                    4d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8D:A9:FA:67:74:34:E6:8A:AD:8F:73:EC:C9:18:AC:B1:D1:DE:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/1c0970c7-6818-3f17-a6be-abb3ae87972c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl

            X509v3 Authority Key Identifier:
                keyid:CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5b:09:9e:1a:a0:b7:78:41:65:27:02:37:65:dd:dd:a5:58:
         ea:a9:81:f3:60:75:d1:e0:ac:ca:e7:f7:43:5c:90:b8:c2:94:
         b0:7c:86:2e:1e:fd:e3:82:b2:5f:ef:fa:71:e7:5f:6d:90:42:
         8a:8e:10:ab:59:58:f9:53:f3:8a:0b:5e:46:f0:e0:60:d2:07:
         f1:04:db:45:0c:0f:2b:ca:b7:af:3c:fe:62:9b:56:ba:ea:98:
         34:bb:86:e7:4a:eb:92:fa:d0:b6:98:2f:ab:61:a7:70:cc:ba:
         39:12:56:97:33:55:08:c9:0b:df:38:b2:7b:4f:7a:27:c7:d2:
         d6:1d:c3:64:af:8d:2a:ab:e1:e5:96:12:89:55:a4:eb:6c:f2:
         ec:42:ab:17:f6:54:3e:9c:c5:11:36:ab:4c:9a:a2:68:03:c4:
         5e:35:4b:91:36:69:48:13:20:9f:22:05:5d:8e:a6:68:05:51:
         82:23:0a:62:50:4b:7a:7b:fb:ee:bd:85:fe:98:ab:6f:ee:fd:
         c5:74:24:d8:8f:23:5b:9e:4f:2a:f7:73:99:cb:5d:c5:d8:ef:
         96:41:d0:a7:47:8b:e6:50:c8:9f:65:d4:ac:85:7d:64:22:ef:
         81:6c:07:f7:d8:93:88:25:ec:43:9c:4f:6c:73:81:77:64:b4:
         4a:12:00:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:58 2026 by rpki-client