Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa
File:                     3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa (raw, json)
Hash identifier:          b3Wzlt4qYvMMdrJYtvVeuc8Ns4vgHbzXcy37FGsdAFw=
Subject key identifier:   92:9D:ED:80:E1:C7:BD:09:4B:10:92:E9:1A:1F:B9:9C:1C:3C:31:D3
Certificate issuer:       /CN=219f6136-3599-4e41-920e-eccbe6592210
Certificate serial:       010D0C9F4328584E18AEDEB839C58D6596C61E58
Authority key identifier: CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     17001
IP address blocks:        140.193.0.0/16 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:de:b8:39:c5:8d:65:96:c6:1e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219f6136-3599-4e41-920e-eccbe6592210
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=195cebe6-2236-4a92-be78-b151af68fe73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:31:a2:ee:fe:18:64:f2:37:1d:6e:de:43:5a:
                    29:6e:58:d6:88:f2:59:ca:6b:a4:5f:5d:a3:69:7b:
                    fe:be:44:3c:6e:c7:b5:b4:0d:87:c0:1a:ff:47:03:
                    26:ba:5e:48:51:32:8e:af:2f:73:a9:df:31:c8:6d:
                    49:38:46:e8:31:3c:91:9f:a1:87:39:db:c7:30:81:
                    0c:85:45:a3:3e:e5:c3:23:da:a5:02:dc:3b:a5:e1:
                    29:df:9d:f5:bf:46:40:a5:52:54:fb:d8:93:e1:4a:
                    e4:b9:71:97:b8:15:ec:d2:f5:65:8f:96:dc:e3:f7:
                    f6:68:32:e1:97:e3:98:1f:55:0f:84:6e:8f:59:92:
                    91:68:4f:c6:ba:cb:20:2b:71:2d:d5:f5:db:ba:1e:
                    a0:15:f5:f7:c2:ca:d9:64:6f:52:00:f6:72:ae:bd:
                    52:71:2f:df:e7:25:ce:61:c8:90:7c:a3:46:1f:c4:
                    d0:73:bf:07:36:db:ff:dd:6b:02:4f:02:8f:3c:69:
                    2f:99:3c:d3:49:57:a1:d5:2b:30:70:bf:d1:f5:ba:
                    e4:e3:0b:06:7c:17:ad:f1:5f:40:22:8e:ea:2e:a9:
                    05:41:e4:a4:ab:ab:50:eb:87:dd:86:10:83:81:52:
                    a0:92:5a:47:8a:6f:d9:66:bb:6d:9c:12:3c:5d:a3:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9D:ED:80:E1:C7:BD:09:4B:10:92:E9:1A:1F:B9:9C:1C:3C:31:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl

            X509v3 Authority Key Identifier:
                keyid:CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.193.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:68:6d:ea:f1:5a:5e:ca:35:29:4f:f1:e5:1f:43:d6:ff:61:
         95:5f:d5:f3:8c:c2:83:38:f6:4c:1d:6a:d4:4b:51:bf:91:c8:
         04:1b:69:91:7e:81:a6:00:a4:24:20:6d:80:17:2a:11:a4:ed:
         d6:e8:b3:dd:6a:60:d4:7d:2e:6c:ea:61:5b:f2:29:fe:c6:dd:
         51:a6:37:c2:b6:2b:95:d3:22:10:3a:ba:60:0b:38:69:17:79:
         55:0f:94:c8:15:4f:34:85:c3:10:41:b2:c1:2e:eb:7f:d6:7a:
         87:ca:76:51:0c:38:a1:14:50:04:2b:8c:47:15:99:6b:aa:dd:
         37:a5:80:eb:d2:91:97:6c:97:88:8c:05:69:6b:3b:b6:93:21:
         db:8d:fc:ef:58:e2:33:ea:50:10:3f:35:4a:a7:a0:65:cb:21:
         7c:43:ca:d7:f7:d5:4f:a5:c4:0d:63:17:cd:1f:09:22:49:12:
         09:e7:05:58:fd:d1:c1:db:3d:92:22:75:98:26:1e:9b:b1:80:
         7c:dc:7b:67:3a:b1:68:cb:55:d9:1d:25:4a:19:dc:f6:5e:45:
         5c:74:12:66:70:9a:90:3f:4a:83:4c:48:eb:90:1a:b2:ef:e3:
         2c:19:b4:a9:2c:e3:6a:50:ad:ff:b0:7c:ac:38:22:3b:59:ac:
         b5:da:0a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:25:43 2026 by rpki-client