Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa
File:                     1ece9c7d-b04b-3926-9731-b706c26b400a.roa (raw, json)
Hash identifier:          WEikvVSJ6IYuOAEd1lnrDde41PQa3OqbRnVi5ozGlZo=
Subject key identifier:   A1:D8:7A:3D:2E:8B:C9:51:71:53:13:18:48:A2:77:42:63:F9:88:12
Certificate issuer:       /CN=8fd7a5d6-2433-44f5-94f4-95c64a92b2ec
Certificate serial:       010D0C9F4328584DEF45DA3F8219302E85FB2F78
Authority key identifier: 6A:B4:BA:2D:9B:D2:93:08:BD:70:DA:47:8F:C1:F2:97:CE:19:CE:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     20169
IP address blocks:        149.112.51.0/24 maxlen: 24
                          2001:504:128::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:da:3f:82:19:30:2e:85:fb:2f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd7a5d6-2433-44f5-94f4-95c64a92b2ec
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=ff29e4ab-a49a-40a8-b950-0af9a729d7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:be:e5:8a:43:dd:0b:19:e8:d1:c7:4a:ca:
                    d8:a6:15:7a:18:c2:19:fe:5c:ed:8e:71:25:70:23:
                    98:45:b2:23:16:5e:c6:76:9b:fd:94:fd:a6:85:bf:
                    f8:b9:46:e5:80:a6:68:f4:1d:91:65:96:a1:81:0d:
                    44:32:12:e4:1b:d6:bf:55:d3:47:7d:0f:4d:ef:23:
                    48:a9:dd:45:4b:2b:ea:04:28:a8:39:33:02:2e:8d:
                    bb:78:9a:71:ba:e9:eb:ce:9e:54:a9:76:b1:75:0c:
                    2c:2e:70:27:4f:55:a7:7f:e2:ee:84:47:81:91:ae:
                    dd:63:8c:ee:77:b8:96:69:77:42:33:60:83:50:4c:
                    d8:23:f3:37:0d:23:c7:35:1b:3b:b9:b6:6e:76:bd:
                    c0:94:af:43:72:28:0e:0c:1d:15:c7:ea:0a:88:41:
                    07:3b:ba:c3:2a:80:bb:cf:a4:7c:2a:8f:b1:04:db:
                    7c:b0:8b:49:07:a0:e5:f3:75:91:0e:61:6c:fb:07:
                    43:7e:c7:f5:41:ff:53:c5:e3:5e:83:8d:34:85:f2:
                    28:30:0c:be:04:0c:e2:dc:b1:e2:fa:68:c6:c2:75:
                    37:61:36:b8:20:21:0a:82:76:2f:30:c6:85:4f:f4:
                    3e:ba:ac:3a:59:55:91:73:2e:17:7a:a9:d2:6d:32:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D8:7A:3D:2E:8B:C9:51:71:53:13:18:48:A2:77:42:63:F9:88:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.crl

            X509v3 Authority Key Identifier:
                keyid:6A:B4:BA:2D:9B:D2:93:08:BD:70:DA:47:8F:C1:F2:97:CE:19:CE:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.51.0/24
                IPv6:
                  2001:504:128::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:da:77:05:94:ef:b6:80:c4:d3:f4:82:ff:ee:e2:e0:97:d0:
         86:d9:53:c9:31:c8:21:2c:c5:89:8b:fe:66:30:3d:c5:c0:1d:
         41:bf:3a:5d:3e:04:da:16:67:3a:69:47:4b:e2:09:c9:92:30:
         6d:40:16:01:a8:87:ca:bf:fa:a5:b6:ba:68:ad:83:48:fc:08:
         6e:ae:23:51:44:fb:89:3c:d2:e9:e8:37:d5:61:f1:1c:f7:55:
         ed:43:dc:5f:81:ae:e3:12:a0:4f:c8:81:75:d4:a0:3e:cc:ff:
         ce:4b:df:70:32:6f:99:1f:2c:6a:46:00:1f:9b:ce:a9:fa:25:
         fa:b0:10:a3:8e:ae:7e:3c:be:ae:dd:5f:d0:8e:d0:d4:b2:44:
         f0:48:e0:e6:70:5c:9c:f5:71:64:2a:d9:a5:72:0f:35:c6:a4:
         b2:09:58:11:53:3d:ac:5b:b1:fa:25:19:d5:f8:0b:ea:0c:42:
         77:b1:91:b7:ec:7a:63:6a:b2:93:a9:ba:30:50:19:ca:ec:ae:
         ae:d1:47:a8:ef:22:fc:b6:fd:66:ea:c4:5f:07:90:a0:ac:35:
         2e:fe:06:5c:65:f0:ad:49:32:e0:87:f5:32:cf:6f:8c:ec:b8:
         fb:6e:83:8f:c0:c1:3c:5a:2a:1a:0f:f7:66:75:a2:8c:ad:f8:
         01:d2:95:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:13 2026 by rpki-client