Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/393039fd-21e4-32bf-83f2-00a678ce590e.roa
File:                     393039fd-21e4-32bf-83f2-00a678ce590e.roa (raw, json)
Hash identifier:          qfVkBDnEvLJyvdBr0SFwcLj3GNgkc+Hj4cFq5MWsaBg=
Subject key identifier:   9A:ED:83:56:2E:78:B7:8B:23:4A:AD:05:5D:75:E2:BF:D6:44:02:02
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E1319949FEA278453B2C34300
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/393039fd-21e4-32bf-83f2-00a678ce590e.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     6079
IP address blocks:        65.86.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:94:9f:ea:27:84:53:b2:c3:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=aff808b2-db9c-4ebd-97de-eed6fae53851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:81:cf:a8:28:82:cb:21:ca:8a:7c:f9:ba:
                    69:1b:e8:f5:bb:fb:e2:2a:aa:5e:8a:1f:f3:23:e5:
                    a6:21:0f:cc:85:c8:cf:eb:6b:ea:e2:ee:e6:8a:73:
                    bc:d9:c1:04:39:b5:92:c0:c5:90:7f:6d:df:34:46:
                    ac:02:99:63:8a:39:9f:3e:08:ce:38:20:30:83:a5:
                    9a:d8:ac:86:d6:91:60:18:5f:45:c3:24:89:f0:49:
                    ff:12:7b:3c:ac:bd:0c:d5:c8:68:a6:56:76:ba:1d:
                    5e:94:73:56:82:a4:65:83:8c:80:77:29:b6:60:2e:
                    59:6c:df:dd:f8:8a:05:74:b1:f3:a6:17:44:47:41:
                    52:ec:87:03:d9:90:33:3e:29:21:f0:65:a6:ca:83:
                    1f:61:de:a2:b1:5b:c3:39:69:63:71:54:a9:c7:57:
                    ea:ab:2f:d0:63:f9:17:89:21:1c:e7:1f:a2:9b:ff:
                    18:c1:1e:4b:4b:a3:5f:48:61:5b:4c:ee:e3:70:6a:
                    4a:7b:65:46:10:2c:b2:dc:3e:06:65:ea:f4:d2:84:
                    11:e7:91:0c:d0:b6:34:c0:66:06:f8:d2:86:59:d5:
                    39:63:25:23:5a:69:d3:78:a5:19:a0:f3:d7:da:94:
                    c1:ba:1a:3e:30:28:76:a4:b6:55:ad:8b:44:62:23:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:ED:83:56:2E:78:B7:8B:23:4A:AD:05:5D:75:E2:BF:D6:44:02:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/393039fd-21e4-32bf-83f2-00a678ce590e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:31:c1:96:3c:bb:b3:9a:f3:34:d7:9c:56:63:a1:54:1b:d3:
         00:e8:14:9f:ea:69:47:00:c2:c1:d9:2a:54:5c:9d:9d:e3:56:
         b9:a8:43:48:5f:1a:c2:ca:7d:a9:d7:9f:c5:d0:0b:5f:53:86:
         9f:68:78:5e:c3:bb:f9:89:32:75:95:25:94:fc:9b:93:41:03:
         df:a4:5b:d7:64:bf:5a:85:fe:40:a2:24:02:9e:e2:92:9e:62:
         da:dd:6f:79:4e:57:42:bc:a4:5a:84:ab:27:f8:32:3f:ba:a9:
         a2:6d:af:69:1f:80:c1:93:3c:a2:c9:e0:ba:38:b8:21:3d:f0:
         64:20:8f:83:6a:9c:51:0f:d7:f8:d1:95:3a:8c:27:6c:f3:9c:
         e8:77:62:0b:0a:84:72:3d:08:5a:a8:2d:ab:77:77:1c:b9:d9:
         59:ac:7f:47:ed:79:18:bd:75:13:49:f6:c8:26:56:4e:6d:0e:
         1c:14:95:8a:f9:af:9a:f5:4d:5d:68:d7:54:cf:52:11:1c:09:
         d1:ef:07:9d:1c:be:b8:d3:02:cd:b2:80:37:5a:03:8b:bf:db:
         62:10:4d:21:ce:24:90:7c:70:ba:55:9f:97:9f:e5:65:d6:dc:
         24:a5:e9:ed:90:d3:44:49:d3:fa:b9:35:07:88:ab:d5:8b:0e:
         a9:5f:56:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:01:43 2026 by rpki-client