Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/381aa0d8-0713-3628-808e-2235213b6efc.roa
File:                     381aa0d8-0713-3628-808e-2235213b6efc.roa (raw, json)
Hash identifier:          FnCmdskVLM+sjnKZ7wrmxdEUbcRNpkUrx/bswDME7yw=
Subject key identifier:   82:6A:C2:98:FF:46:E0:EF:36:5A:32:23:D4:EE:97:99:5F:24:26:88
Certificate issuer:       /CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7
Certificate serial:       010D0C9F4328584DE84B3D5612D6187A8A0F2100
Authority key identifier: 56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/381aa0d8-0713-3628-808e-2235213b6efc.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     13943
IP address blocks:        141.193.104.0/22 maxlen: 22
                          173.231.72.0/21 maxlen: 21
                          199.66.144.0/21 maxlen: 21
                          2604:bdc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:3d:56:12:d6:18:7a:8a:0f:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=07a24e78-2c61-48de-9c6a-3d99149435cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:b4:2d:0b:32:f4:a8:0a:9b:fb:b5:09:a3:
                    e5:9c:bd:93:39:25:df:bf:ce:ce:c6:ad:a2:b8:c4:
                    49:b7:e5:b6:58:c7:b3:e2:7d:79:c8:0f:94:cb:47:
                    16:9e:75:fa:e4:db:cd:3d:8a:8b:43:70:4d:0b:d0:
                    ba:db:7f:6e:f2:fa:a4:f9:e9:b6:8b:9f:e6:9c:f5:
                    d1:db:e6:bb:42:45:0c:ae:d9:b9:7a:6d:98:e4:93:
                    e3:82:77:62:56:e2:a8:a6:a3:cb:bb:b3:a2:aa:c0:
                    bc:c3:59:af:db:62:60:66:17:8b:5b:39:76:ba:ba:
                    37:eb:cc:98:12:87:41:11:fb:4c:10:45:48:fa:8a:
                    e8:03:68:0f:45:4f:2b:c7:64:42:30:3f:d0:7b:8f:
                    46:af:e8:c8:2f:b6:2f:21:12:6f:86:3f:2f:97:8b:
                    0c:c4:ea:2c:4d:c9:6a:c5:83:5f:13:53:ba:83:b1:
                    7c:5d:95:ab:5f:db:fb:05:be:e0:f4:8f:c8:d8:9d:
                    d9:ad:de:74:50:d7:34:1e:52:8d:d6:ae:3b:e2:cf:
                    e8:81:66:46:1a:45:59:0d:d0:6b:cf:2a:07:d7:8c:
                    9d:71:f5:96:df:ff:15:15:da:06:0c:89:86:b9:02:
                    51:41:00:ef:68:c0:d6:8c:59:07:d0:2e:1f:72:8f:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6A:C2:98:FF:46:E0:EF:36:5A:32:23:D4:EE:97:99:5F:24:26:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/381aa0d8-0713-3628-808e-2235213b6efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl

            X509v3 Authority Key Identifier:
                keyid:56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.104.0/22
                  173.231.72.0/21
                  199.66.144.0/21
                IPv6:
                  2604:bdc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a8:f2:40:ad:36:61:06:8f:53:33:e4:df:0b:12:68:72:b5:
         1c:37:70:a5:d0:e8:a0:3d:a4:b5:4a:e7:bb:26:06:1e:42:3d:
         74:10:3a:f3:75:0b:cc:ef:21:48:86:9c:75:20:ab:e1:a4:7c:
         df:75:1d:c4:ed:fe:37:08:b2:d3:08:e5:41:80:43:27:0f:b5:
         76:b2:94:06:0a:98:c3:08:aa:71:fe:3e:f6:68:e9:9c:07:fe:
         70:04:f8:00:ec:03:28:61:9a:8d:75:02:69:1c:91:44:50:27:
         06:e0:17:cc:ba:e6:98:f2:81:af:8c:68:dc:de:50:fe:c0:03:
         fd:5d:8f:2c:85:b8:87:e8:37:f3:ca:a3:83:84:a3:4f:ba:b8:
         b2:2c:20:41:31:07:24:e2:0f:ad:bf:90:87:97:4f:e8:44:ea:
         aa:86:6e:00:50:86:77:e8:4c:71:95:bd:fa:70:3c:de:f7:8e:
         9d:d0:14:aa:ec:da:32:ab:35:13:43:5a:fc:59:c0:66:37:6e:
         93:c4:ed:99:0e:97:b5:6c:e6:48:df:10:63:20:7c:ff:09:b9:
         7a:7d:db:6d:f5:dc:67:44:2c:ef:68:07:65:21:5e:5c:76:f4:
         65:eb:bc:86:9b:ea:9f:e6:96:db:28:cd:e7:d2:ff:87:0b:18:
         c9:2a:dc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:39 2026 by rpki-client