Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d101b106-245c-3770-9db3-7842b1423d8b.roa
File:                     d101b106-245c-3770-9db3-7842b1423d8b.roa (raw, json)
Hash identifier:          D5LVrmsuR09J3BHAw1XTL7yOHsry0L06npJOx4bL6/I=
Subject key identifier:   1D:DC:29:5D:36:58:1A:16:98:38:F4:88:CD:23:DA:E4:72:23:27:48
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F4328584DF640A8B51A4020F4D35378C0
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d101b106-245c-3770-9db3-7842b1423d8b.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        173.195.225.0/24 maxlen: 24
                          173.195.226.0/24 maxlen: 24
                          173.195.227.0/24 maxlen: 24
                          173.195.228.0/24 maxlen: 24
                          173.195.229.0/24 maxlen: 24
                          173.195.230.0/24 maxlen: 24
                          173.195.231.0/24 maxlen: 24
                          173.195.232.0/24 maxlen: 24
                          173.195.233.0/24 maxlen: 24
                          173.195.234.0/24 maxlen: 24
                          173.195.235.0/24 maxlen: 24
                          173.195.236.0/24 maxlen: 24
                          173.195.237.0/24 maxlen: 24
                          173.195.238.0/24 maxlen: 24
                          173.195.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a8:b5:1a:40:20:f4:d3:53:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=f32fa524-ece9-49ba-b4cd-a37ce6d1924a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1d:61:34:20:b7:36:80:cc:f0:98:fa:5d:4a:
                    96:0b:81:0f:40:3d:9b:5a:29:8c:47:fe:dd:a6:7f:
                    1f:a2:2f:a3:ba:5d:29:1c:13:b6:5c:04:8e:26:72:
                    40:97:6b:dc:a4:41:50:35:ce:6b:32:36:5c:ab:3e:
                    35:49:41:37:3e:65:00:0e:2c:8a:1b:85:37:14:d5:
                    aa:b2:bc:a5:9c:fc:64:f1:31:1f:23:e0:d6:74:ca:
                    e1:3c:c5:2b:94:7e:cd:64:b4:e0:b8:00:f2:a9:e9:
                    a5:92:45:d2:a3:cb:d5:59:8e:c3:3b:40:96:7e:b1:
                    a8:a9:ca:0c:00:23:ff:46:4c:24:fd:d9:93:cb:5f:
                    b1:e7:eb:ed:e1:4d:58:9b:da:a2:b1:84:52:e0:82:
                    70:9e:51:e2:fe:a6:8b:3b:34:66:b1:37:4c:22:d6:
                    d0:34:c2:13:45:67:3c:0c:75:20:92:8b:54:f6:2b:
                    e0:f2:83:f6:ac:92:f2:7f:0a:55:d4:a4:ff:5f:21:
                    9f:87:26:bd:4a:a6:8a:aa:fc:9b:bd:58:96:32:f7:
                    68:af:14:96:1b:23:06:26:e6:5f:bb:dc:1e:f9:36:
                    0f:a0:f0:97:df:0c:49:9f:31:3e:8d:30:24:0c:0c:
                    12:5b:04:92:95:25:fa:fd:30:1f:26:e3:48:cd:0f:
                    a0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DC:29:5D:36:58:1A:16:98:38:F4:88:CD:23:DA:E4:72:23:27:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d101b106-245c-3770-9db3-7842b1423d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.225.0-173.195.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:6f:62:0d:95:69:45:ac:18:cb:a4:3a:56:b5:63:ad:51:d8:
         36:3b:e4:fe:b5:05:ea:d7:5d:11:1e:38:3f:4a:06:b3:79:d1:
         2b:d8:36:bd:29:9c:b0:d0:0d:33:49:46:07:b5:7f:a9:ed:93:
         42:ed:01:d6:3e:54:2a:a2:3c:3f:ed:2d:4c:16:3b:cb:fb:aa:
         9a:0f:d3:db:1d:23:87:9e:d7:6f:2f:c8:1c:15:92:88:ae:c4:
         3a:84:ba:05:29:14:90:1a:58:31:7d:f4:fb:f8:ff:03:7a:f7:
         5e:fa:12:41:be:a7:b1:89:b8:b7:f7:f9:e6:a9:5b:4a:d3:98:
         65:46:ee:63:ed:5a:b8:8f:c7:58:8f:06:f6:4a:8e:94:09:ce:
         55:87:dc:f6:74:26:46:9e:fa:63:92:dd:f3:5c:23:ee:5c:70:
         f3:cf:bf:18:c3:46:93:0a:89:ad:04:2b:f0:9c:11:e6:af:6e:
         ad:78:25:71:b3:6b:9b:cd:b6:e8:86:af:55:30:f3:df:63:ce:
         02:3e:31:f7:45:93:bf:a5:84:d8:fa:a5:a3:a7:9e:39:8a:8d:
         7a:31:04:ba:60:5b:bd:a6:f6:13:61:b6:b0:47:ff:52:01:32:
         5b:eb:49:2e:37:df:47:b3:5e:8e:2a:08:de:ad:6f:09:86:7e:
         3c:52:6a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:55 2026 by rpki-client