Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/bbda01bd-3e2d-3fc9-bf67-b95c2bc0701c.roa
File:                     bbda01bd-3e2d-3fc9-bf67-b95c2bc0701c.roa (raw, json)
Hash identifier:          9+f2Qa90mjMBU5y7ifZu0B4PZOUkmi3SLJ+AE3EGYpg=
Subject key identifier:   26:E9:39:C1:5A:7D:DD:E3:AC:7B:3C:A1:CC:6C:EC:8F:2A:ED:77:E3
Certificate issuer:       /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial:       010D0C9F4328584E0A6FF73BD1A203EFCAAD11A0
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/bbda01bd-3e2d-3fc9-bf67-b95c2bc0701c.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     14618
IP address blocks:        72.19.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f7:3b:d1:a2:03:ef:ca:ad:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=6fa35dd6-4613-4569-9e8d-aa4fcf932160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:1f:6a:fa:d8:2b:fd:d9:29:0f:12:5a:d9:
                    0c:46:61:31:19:41:c2:46:09:22:0d:6d:0e:45:bd:
                    7c:2c:62:81:1a:b2:db:79:80:8a:da:71:32:96:9b:
                    c9:6e:35:b7:67:0f:93:94:54:2d:d6:1e:dc:d7:50:
                    ef:5d:14:6c:16:b4:85:70:c2:56:cb:2c:ae:bc:d9:
                    7e:f3:77:15:04:6b:3f:8b:70:22:3a:67:6a:53:fd:
                    a1:6c:3f:99:f2:2d:22:2d:1d:44:68:7a:3e:58:cf:
                    99:30:fa:e9:2a:66:bf:83:24:09:ff:fd:40:1a:ce:
                    97:55:bb:9f:f1:f8:ea:11:4c:99:33:2d:b8:64:e4:
                    99:3a:61:ad:62:6b:56:f8:3a:20:31:80:5f:02:9d:
                    cf:71:e9:25:6f:ca:63:f9:0e:d8:5a:6a:7d:d1:9a:
                    1f:a4:10:72:46:0a:66:af:0e:ee:28:0a:27:15:3f:
                    24:7a:ae:b9:05:d9:7b:bc:50:18:bf:b2:61:6e:5b:
                    cd:5f:14:5a:f5:0b:2f:f6:ce:52:a2:b0:72:68:df:
                    ab:0c:81:be:48:93:06:0e:f9:67:02:f9:f5:40:fe:
                    74:24:88:f2:06:36:d2:a2:07:38:4e:3b:0a:35:48:
                    27:eb:1c:ba:43:64:f4:1c:77:c8:04:c5:c2:56:1e:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E9:39:C1:5A:7D:DD:E3:AC:7B:3C:A1:CC:6C:EC:8F:2A:ED:77:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/bbda01bd-3e2d-3fc9-bf67-b95c2bc0701c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl

            X509v3 Authority Key Identifier:
                keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.19.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5f:f2:f8:0e:a5:36:a5:e6:83:c6:43:b1:0e:a3:ca:3e:f6:
         aa:22:17:72:99:28:e2:01:17:8e:6d:87:ae:95:28:a7:39:d9:
         52:2a:3a:00:7f:7a:6b:d7:dc:c7:50:62:14:c8:61:32:d0:8a:
         ab:cf:d6:5e:47:32:c8:9e:bb:61:bf:6c:ad:8c:13:71:8f:92:
         86:45:68:61:02:4b:ec:dc:25:2b:08:8a:d7:33:14:bf:ee:90:
         27:b6:95:86:43:da:fe:2c:31:4d:96:0e:02:b4:91:37:4e:9f:
         36:54:67:fb:48:83:89:95:f6:ea:3c:28:d0:4d:9b:e1:d7:20:
         2c:56:dc:c9:57:31:b3:16:48:36:18:a3:26:30:cd:18:5f:cb:
         53:be:f9:fd:04:bf:31:1a:f4:e4:ee:50:1b:13:15:35:59:f0:
         3c:f6:17:06:e3:cb:82:0e:be:00:ed:81:6b:2e:73:da:50:98:
         76:da:96:27:c7:6e:fb:70:d1:d2:b7:0a:c4:2f:f4:af:6e:62:
         98:a7:26:80:dd:7f:4b:47:6c:86:d3:1c:c5:b6:38:73:a2:f9:
         23:e4:10:2e:69:3c:60:96:55:26:99:0d:dc:67:76:84:ec:b7:
         7a:07:17:21:2e:06:43:c7:81:cf:64:e0:a8:df:bf:0c:1e:ef:
         e7:73:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:32 2026 by rpki-client