Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/7b1d7aaa-7842-3120-bea1-728ce3e2d5d8.roa
File:                     7b1d7aaa-7842-3120-bea1-728ce3e2d5d8.roa (raw, json)
Hash identifier:          sG9iji09XoZhe/iCizTTquAxWI87LYenWkYhLY0RKMQ=
Subject key identifier:   09:5B:48:B4:E2:91:41:6A:D7:34:7A:F6:6E:EA:12:0F:B9:C7:74:F3
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E2809BF840252C4A0E584C280
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/7b1d7aaa-7842-3120-bea1-728ce3e2d5d8.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     12025
IP address blocks:        66.35.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:bf:84:02:52:c4:a0:e5:84:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=814e98e9-a205-4d73-bb1e-ceb7ed8659fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:ff:6a:6d:71:75:10:66:0c:46:f4:e9:8f:
                    e2:bc:3d:c2:d7:31:7e:70:a9:de:d1:05:2d:d0:0b:
                    df:40:7c:3a:38:7b:67:ae:3c:b3:fd:0e:a4:cf:0b:
                    f0:d9:31:08:99:7b:cc:9b:39:dd:44:de:d9:e3:67:
                    fb:72:a2:7a:ed:cd:dd:3a:aa:2a:37:cc:e9:e4:ee:
                    23:23:c0:f3:f9:a5:a5:69:cb:c1:c9:ba:b7:8e:91:
                    17:a1:7e:c6:cc:66:f5:6f:f2:21:27:09:a6:c5:23:
                    b5:91:42:76:58:8d:6b:af:c8:3f:05:5a:08:5e:70:
                    5e:92:16:d3:55:cc:97:d9:41:b1:58:24:f3:39:c2:
                    3e:69:e8:52:13:67:db:47:c7:31:2e:34:6c:fa:3b:
                    5a:29:d3:78:a0:96:a4:c4:8b:03:f3:aa:e7:8b:cf:
                    90:8d:e6:d9:91:98:25:07:76:73:05:62:68:80:45:
                    8b:e0:89:e3:84:a2:2d:6e:1f:6c:ac:05:22:4b:d3:
                    de:1d:48:dd:5f:af:18:44:07:09:6b:a5:e3:59:b6:
                    d3:bc:17:d0:a2:c4:ca:3d:32:d8:d9:17:7d:55:13:
                    10:58:2e:8a:d2:8a:8c:4a:1a:2c:a7:6b:5a:99:d0:
                    17:e6:1c:db:7e:1a:62:cd:2d:f3:85:82:1f:44:07:
                    87:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5B:48:B4:E2:91:41:6A:D7:34:7A:F6:6E:EA:12:0F:B9:C7:74:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/7b1d7aaa-7842-3120-bea1-728ce3e2d5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:43:0d:79:29:b7:7a:e7:e3:58:93:d5:ff:c0:65:a3:46:0c:
         2d:5c:a7:4b:11:23:f5:8e:5f:75:d5:d6:3e:ea:c7:c3:6c:1d:
         ad:e7:05:c4:e9:12:d2:7f:f1:cb:57:b3:2e:24:fa:81:f5:e3:
         f4:23:f4:a2:17:b5:85:d7:84:c9:20:04:3d:8b:01:4b:64:d9:
         b3:11:fa:cf:d8:b6:78:cd:01:2c:75:33:a7:65:d5:86:ae:0a:
         77:0b:21:91:cc:19:4d:a0:fe:1a:fc:52:13:5f:f9:0c:b7:47:
         75:bc:5b:c5:01:43:a3:6f:b3:81:b5:44:f4:f7:27:f6:04:c2:
         44:b3:28:f1:1a:cd:48:04:65:18:99:65:57:35:21:5d:43:1b:
         2c:ac:75:29:36:0f:57:f0:62:38:5d:fd:98:fc:86:94:ea:c6:
         7a:32:dd:20:06:ae:4a:e7:cf:59:06:70:30:9e:df:63:09:fd:
         7e:3a:6d:79:68:20:f1:83:20:a2:f9:fb:e8:ad:f3:aa:80:bf:
         93:41:13:b2:f3:2a:51:ba:70:a4:9e:33:8a:48:c3:77:a6:68:
         90:40:39:12:c9:49:6b:10:28:b0:26:3f:d5:32:c2:c3:53:2c:
         d7:60:17:f1:3a:f9:c5:15:14:31:76:32:3b:f5:86:ba:de:95:
         56:73:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:04:47 2026 by rpki-client