Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa
File:                     b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa (raw, json)
Hash identifier:          mrJ0EgtfmNxZhxwA/+qoIujG9HQR7NVvZrNCSnunbHk=
Subject key identifier:   64:61:59:D6:CD:46:AB:C8:EF:A2:84:E6:D6:ED:55:ED:E4:29:B9:AA
Certificate issuer:       /CN=c9607f1e-20c8-421d-b23b-a4c9bb6b791f
Certificate serial:       010D0C9F4328584DE84B3B609CCB0CFAEE6A1380
Authority key identifier: 3A:9D:F6:7E:78:A2:D3:C4:F2:72:DA:86:5E:28:29:FF:EE:ED:05:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     26962
IP address blocks:        207.71.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:3b:60:9c:cb:0c:fa:ee:6a:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9607f1e-20c8-421d-b23b-a4c9bb6b791f
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=3cbbf693-7d41-4555-8d0c-26294c9217d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:19:8f:a9:bf:da:88:c8:3f:42:7a:ba:ff:
                    c4:b5:7c:63:f7:8c:a9:78:22:73:e4:90:b2:b1:91:
                    c5:f5:07:76:ed:8a:5d:45:22:a1:2c:42:3f:4e:e7:
                    d5:e2:2b:77:06:75:06:ee:8f:af:90:b0:74:0d:25:
                    c4:7e:53:ff:bf:1f:e5:8e:f2:c1:a9:8e:2b:62:d0:
                    89:48:ae:c0:37:6a:ae:1c:6e:6a:90:97:e1:99:94:
                    30:9e:70:53:01:35:b3:da:32:01:10:2d:03:5c:cc:
                    35:62:28:fa:1b:a4:77:aa:84:d2:9f:02:f7:06:5c:
                    ee:b1:08:00:35:76:d6:d4:83:77:60:b3:c3:ec:56:
                    35:56:81:ba:c6:cc:4e:ce:e8:18:28:6b:92:95:8b:
                    3a:66:64:e1:6d:12:fc:a8:07:2f:d2:a2:03:ad:d9:
                    a7:cf:08:98:0a:4d:4b:97:e2:d2:d1:8f:7e:7d:94:
                    ad:0a:49:fc:83:26:6a:62:e7:27:a1:24:5a:d1:16:
                    63:c4:44:e9:5a:bd:ab:8c:0a:42:2c:de:b2:80:54:
                    fc:3c:e8:fd:2f:da:fa:c2:a1:ec:b0:3b:4e:0d:df:
                    b2:b4:da:72:8a:c6:98:ad:de:a8:ba:89:42:ff:e4:
                    9f:89:30:a7:e7:94:ab:45:82:84:c7:32:1c:04:9b:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:61:59:D6:CD:46:AB:C8:EF:A2:84:E6:D6:ED:55:ED:E4:29:B9:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:9D:F6:7E:78:A2:D3:C4:F2:72:DA:86:5E:28:29:FF:EE:ED:05:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.71.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:28:fb:15:d0:60:af:37:33:ba:97:89:a1:68:5b:7c:94:96:
         29:f1:29:53:50:9d:97:e6:ba:42:c6:c6:bd:9c:e9:1e:a2:2d:
         4c:d1:65:8f:f3:c1:f8:6b:1e:e7:03:98:3c:06:a0:25:65:17:
         94:f2:90:22:24:51:07:c7:75:f1:e1:48:a9:87:ca:7a:15:24:
         d2:84:3c:3e:77:05:dd:51:95:4d:2c:4c:99:ba:e3:1f:da:99:
         9e:74:f1:e1:52:c6:63:36:19:05:ca:fa:59:04:f2:4a:53:6c:
         91:c4:cb:f1:b8:e2:14:99:43:4e:4f:5b:0e:d7:ae:ab:25:77:
         b8:66:a3:9a:28:4f:43:e1:de:14:4d:1b:a2:c6:7f:65:4a:77:
         e2:7d:e2:8c:65:cf:0a:28:93:df:a7:22:0e:65:02:e0:36:19:
         60:f8:a3:e4:ad:0d:82:b2:fd:3f:6b:f5:36:ee:97:f5:05:49:
         5a:16:f1:18:70:a8:9c:97:27:77:93:9c:a3:e2:f3:cc:93:87:
         3e:68:58:4c:e5:0d:78:6e:2d:d8:86:5e:f3:58:02:80:a5:a8:
         c6:dd:e8:f8:93:d9:85:c7:1f:98:36:8b:9b:ca:e8:6f:a8:fd:
         c8:3e:3b:df:b8:78:63:0f:be:b8:c4:74:ae:3f:67:67:35:2c:
         f0:24:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:35 2026 by rpki-client