Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa
File:                     dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa (raw, json)
Hash identifier:          iox0RHia0zAGNuJvI5vwZQ/m9PFW+HTOZE7hlmlMarY=
Subject key identifier:   60:55:1C:56:F4:3B:14:AF:D7:C7:6C:2C:4C:E5:7E:D0:6C:27:CC:9D
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584DD78B1C26836D0A6E6F2AF000
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     3738
IP address blocks:        192.250.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:1c:26:83:6d:0a:6e:6f:2a:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=1683043c-7e9e-45af-b9c7-124c9f974445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d6:b5:c0:b8:81:7b:09:6c:13:13:0a:6b:69:
                    a0:64:b2:d5:3d:ba:79:60:f1:08:bc:ad:01:4c:73:
                    b8:eb:ce:68:a3:a2:c6:a9:42:25:5a:f4:4f:43:b8:
                    48:26:90:cb:38:79:46:92:24:93:47:47:3b:1b:f1:
                    21:44:d6:dd:9b:63:0f:76:71:10:5b:9b:b5:d6:37:
                    e1:de:ad:b7:e0:6d:ae:76:c8:fc:34:c1:28:69:4b:
                    8d:2d:21:6d:5d:4f:01:ee:29:a3:1b:33:20:f9:48:
                    01:98:cf:d8:e1:ce:a7:81:d4:c3:7f:d5:57:ac:20:
                    d5:c3:1b:c0:8a:b4:9e:67:c9:e7:ac:ab:98:c9:f0:
                    d7:d5:e3:66:de:59:61:ec:5b:76:53:fd:5b:26:7c:
                    cd:53:ad:22:ec:34:35:dd:5e:76:9d:e1:5f:89:76:
                    63:af:26:89:fa:12:f0:3d:60:11:e0:d4:89:17:0e:
                    f2:04:59:4e:56:39:7e:a4:a4:5b:0a:24:a7:d9:13:
                    65:20:27:18:ae:bf:12:71:92:0e:3f:28:b1:27:e8:
                    2a:07:9c:23:c5:c1:4e:fd:29:76:65:d8:94:0f:3f:
                    fe:50:ed:c3:24:e9:5b:b7:e3:3e:dd:d9:2f:e3:1c:
                    a4:43:8f:aa:f5:87:84:cd:46:c3:7e:49:ca:ee:5b:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:55:1C:56:F4:3B:14:AF:D7:C7:6C:2C:4C:E5:7E:D0:6C:27:CC:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d6:f2:21:5e:50:2f:4c:15:ee:00:90:61:0b:5e:4f:11:7c:
         b4:1e:6f:e1:84:5f:9a:b5:e3:f7:1e:95:a5:9b:0c:72:c5:ed:
         ad:d0:cd:85:7f:05:97:a8:7e:2d:96:1c:d5:07:59:50:63:b0:
         df:af:bd:0f:b2:35:76:37:79:ff:e7:41:7f:4f:80:53:1d:d6:
         63:8d:a2:c5:4c:32:b0:58:3d:7a:70:41:bc:45:6e:7e:1e:47:
         16:40:c5:80:bc:1b:cf:36:13:47:af:df:15:a9:96:0b:47:5c:
         4d:4a:94:05:ff:1b:e4:78:7e:fb:87:f9:95:b8:65:ae:07:fd:
         4f:59:28:81:75:ee:47:98:85:7d:6a:f1:04:ff:ec:32:15:1d:
         c6:83:86:8e:9d:96:b6:be:07:ae:47:9e:cf:56:dc:a3:42:2a:
         a7:de:34:40:13:2a:e8:ad:7b:53:93:06:5c:89:57:6e:d8:92:
         ef:07:d5:e9:d3:25:83:f6:5b:47:4a:bf:10:97:8f:a4:03:7a:
         51:40:d8:72:27:0e:aa:a1:88:2c:4e:fc:32:3a:4e:4d:69:ee:
         45:b4:15:81:54:f5:3e:f2:de:9f:ae:ec:cd:9a:04:71:85:32:
         46:34:86:34:0c:56:24:bd:4e:d1:f9:1c:54:17:2e:cb:95:88:
         ce:47:e6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:18:12 2026 by rpki-client