Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/1a3caee3-86b7-3edc-b666-a4985f7273af.roa
File:                     1a3caee3-86b7-3edc-b666-a4985f7273af.roa (raw, json)
Hash identifier:          MDjk482T+BXszle59Z0oJvTfDQjT2zqxaMZkDhcqJn8=
Subject key identifier:   01:7A:77:B3:4C:EF:0C:8C:8F:27:12:80:80:1A:E2:32:3E:45:EE:FB
Certificate issuer:       /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial:       010D0C9F4328584DF0AB35BA736B05852A217B80
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/1a3caee3-86b7-3edc-b666-a4985f7273af.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     397511
IP address blocks:        128.210.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:35:ba:73:6b:05:85:2a:21:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=be4bea1a-8605-4041-9c11-812f50a29bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2a:32:ae:da:a0:ac:48:9e:f4:42:9f:84:e1:
                    fc:37:e8:d5:6a:f2:0c:b3:6d:86:53:80:a1:f7:90:
                    50:97:44:a2:d9:95:2c:82:de:60:d1:17:73:b6:9b:
                    b8:4a:06:8d:51:e5:eb:a5:eb:cc:5a:df:27:50:62:
                    7d:41:eb:22:32:8f:ba:19:80:02:0b:59:63:6f:89:
                    63:c9:24:b6:74:3c:e1:f1:af:a0:a1:8e:65:c0:97:
                    37:3a:3d:28:aa:bf:fc:c1:00:30:e1:e9:47:05:28:
                    6e:6c:f6:64:46:59:3c:2e:40:2f:b1:aa:3b:ea:c4:
                    b5:0b:d8:d5:1d:89:8b:b8:86:56:5b:14:98:e4:d2:
                    8a:d7:b9:66:13:ae:80:c7:63:e8:a6:fc:dc:a2:ae:
                    fd:39:57:22:75:9c:d8:76:b0:8d:ca:a6:5c:a7:b7:
                    8e:f7:08:23:87:92:a3:95:bc:54:f6:8a:c5:47:18:
                    6e:4c:19:91:17:2b:9d:a9:d8:d8:e5:57:86:3f:70:
                    de:9c:e6:78:64:c1:ef:44:39:e6:df:d5:70:f2:1b:
                    51:db:7d:bf:d4:11:62:ef:4d:a4:23:df:b0:5f:e6:
                    b5:71:04:30:b8:ec:db:59:07:18:23:38:7e:a7:21:
                    be:88:03:52:cf:77:8c:1b:d8:d0:a3:7e:59:71:1b:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7A:77:B3:4C:EF:0C:8C:8F:27:12:80:80:1A:E2:32:3E:45:EE:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/1a3caee3-86b7-3edc-b666-a4985f7273af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl

            X509v3 Authority Key Identifier:
                keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:fe:78:1b:3d:1a:ed:f3:14:0b:ac:44:59:47:6a:8c:83:4e:
         9a:9c:3f:be:04:b0:35:93:ed:7a:2f:49:1d:1f:75:e6:ea:b6:
         45:f8:4e:f5:cb:23:87:4c:e4:9f:6a:43:a1:16:f4:fc:40:86:
         6d:61:c8:33:3b:77:ee:fd:79:d1:7e:b8:31:e4:1f:ce:60:78:
         49:0c:b6:b7:f3:d0:a3:e4:38:bf:eb:d2:d6:da:cc:a4:0f:e8:
         bc:fc:af:c7:4b:b7:d7:ce:37:3c:f3:9f:9b:e8:10:5c:5e:fa:
         ab:64:41:15:fc:c0:73:e5:43:95:3d:27:b8:a5:75:4a:5b:b9:
         b0:e0:5e:55:44:16:06:d5:f4:1a:cd:3f:f9:df:ca:67:a2:51:
         8c:c2:99:c6:f1:47:49:1e:be:75:5d:a2:cf:63:42:eb:f0:67:
         27:f0:3f:3e:81:d3:4c:ac:27:84:d8:8b:a0:d0:fe:9d:2c:4d:
         dd:4f:a7:62:b4:49:b5:d8:c0:91:52:29:57:e1:b9:85:ad:73:
         10:5a:c9:85:fb:0e:04:26:3c:91:94:dd:c9:63:3f:a0:9a:c6:
         2c:c9:b1:7f:ef:9b:6e:12:b0:4a:15:01:fc:67:f0:bc:13:b9:
         a4:8d:5c:ea:4e:51:4b:5b:7b:79:f7:e2:a4:70:af:97:0c:f1:
         b5:3d:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:42 2026 by rpki-client