Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3e01de38-c03d-37ab-bc15-1e7d04b365ee.roa
File:                     3e01de38-c03d-37ab-bc15-1e7d04b365ee.roa (raw, json)
Hash identifier:          EL36KUjVYa4rGvsMJENNQRShmecfQl5V74qHpOf4LMI=
Subject key identifier:   96:08:22:AD:FA:6A:74:8C:23:97:F4:5C:29:84:8C:DC:E2:A2:0B:E7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DFB6BC5599D64E5B3B902E480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3e01de38-c03d-37ab-bc15-1e7d04b365ee.roa
Signing time:             Thu 28 May 2026 09:26:37 +0000
ROA not before:           Thu 28 May 2026 09:26:37 +0000
ROA not after:            Wed 26 Aug 2026 09:26:37 +0000
asID:                     2914
IP address blocks:        216.132.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:6b:c5:59:9d:64:e5:b3:b9:02:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 28 09:26:37 2026 GMT
            Not After : Aug 26 09:26:37 2026 GMT
        Subject: CN=10c17762-1ed4-4237-818e-d5893b9e3920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:02:76:fe:d4:fd:be:2b:b9:74:4d:45:fd:
                    b2:59:3c:af:26:f5:2e:16:dc:bb:9e:6f:13:34:10:
                    6b:73:41:55:d2:79:05:66:f4:4e:08:8f:92:53:13:
                    34:22:75:eb:cf:d7:56:2f:e2:ee:ef:fd:14:86:bd:
                    f9:88:1c:91:c2:4b:df:45:47:f8:d8:3e:ae:01:ca:
                    c9:04:86:8a:9d:ff:cf:db:13:d1:d7:34:89:f6:a6:
                    d2:da:07:c2:af:d8:72:9f:4c:a6:e5:64:38:49:44:
                    22:8b:dd:b3:50:a5:aa:a3:c7:25:63:d3:c1:cf:cd:
                    e8:d1:0b:96:3d:e0:c7:55:a6:6f:78:b2:60:5a:63:
                    1c:29:c1:df:02:2e:59:8e:fe:93:80:9d:e9:c5:3e:
                    a0:65:e2:d8:d2:1d:1c:41:d3:ef:99:53:8a:ea:f2:
                    eb:93:ec:a9:3a:ec:6a:57:80:af:d6:38:33:97:27:
                    0e:cb:ba:28:dd:be:c2:e0:97:c2:86:58:d3:ce:5f:
                    f3:55:53:d8:d9:b7:35:72:e3:df:fc:b9:95:31:ac:
                    96:08:bd:4d:10:cf:8b:1d:e1:1b:8e:91:e9:a4:3d:
                    39:18:f1:10:25:cc:af:1a:ea:b6:36:d3:37:10:46:
                    be:5f:41:83:11:db:c3:ab:d8:3c:aa:f6:d9:11:59:
                    f9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:08:22:AD:FA:6A:74:8C:23:97:F4:5C:29:84:8C:DC:E2:A2:0B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3e01de38-c03d-37ab-bc15-1e7d04b365ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a7:1c:a9:31:f9:64:a7:9d:a7:a2:81:40:3e:a2:43:b1:ce:
         78:af:cb:06:63:0d:a5:fe:90:42:9b:67:3a:dd:3d:ea:e1:b8:
         70:35:a1:05:03:28:17:30:03:01:5e:2c:f3:c8:e2:de:9d:f8:
         38:a1:d9:70:b7:69:7c:7a:1b:6b:68:03:0a:4f:7c:e2:8e:59:
         87:8a:01:13:ae:0a:ab:87:8e:b9:24:0e:fb:d9:d5:d0:64:5c:
         0c:6e:4b:95:73:5f:1e:21:56:66:c0:23:b7:94:05:fd:25:1e:
         38:39:55:b9:57:d0:7e:84:dc:2e:f4:dc:62:fe:af:27:e4:6b:
         1d:49:fb:47:fe:ad:6a:90:5e:10:19:cf:6b:7f:4f:9e:6e:6a:
         2d:ca:af:71:7c:66:af:c2:46:61:ef:d0:3a:e6:3f:77:6d:2d:
         09:db:77:64:f8:84:c3:f1:38:1f:82:3d:4e:87:82:44:97:30:
         b9:7b:14:3f:a3:39:2c:d3:90:bb:b3:d8:88:e8:d0:9f:31:6c:
         58:7c:97:5f:ea:67:97:7a:d6:24:fa:30:e3:fe:47:e7:0a:83:
         3d:0b:9c:c4:1c:93:3a:bd:e0:e0:9f:04:08:14:57:cf:79:d2:
         a6:4f:eb:7a:39:5c:ff:cf:e2:df:d5:b3:b0:e3:1f:4c:8f:a9:
         af:5f:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:53:28 2026 by rpki-client