Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b3af4b-b45f-4b5f-927f-f1982dd171f1/06a8c79f-7e49-3ba0-9114-b149184aafc8.roa
File:                     06a8c79f-7e49-3ba0-9114-b149184aafc8.roa (raw, json)
Hash identifier:          9gx3uOhjeaFaMgew0nCgM1U2ZfBCKqvpuB5SqJ/4OWc=
Subject key identifier:   DC:91:FC:DF:6B:36:C4:AE:1E:92:E1:4C:B3:D2:F2:68:32:EE:5E:F9
Certificate issuer:       /CN=27b3af4b-b45f-4b5f-927f-f1982dd171f1
Certificate serial:       010D0C9F4328584E04361FB3BAE58392BDD19C40
Authority key identifier: 4E:BF:5A:9E:A0:66:71:D2:49:88:FB:40:6C:C7:96:08:7C:C4:52:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b3af4b-b45f-4b5f-927f-f1982dd171f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b3af4b-b45f-4b5f-927f-f1982dd171f1/06a8c79f-7e49-3ba0-9114-b149184aafc8.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     46082
IP address blocks:        147.185.40.0/22 maxlen: 24
                          159.26.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b3af4b-b45f-4b5f-927f-f1982dd171f1/27b3af4b-b45f-4b5f-927f-f1982dd171f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b3af4b-b45f-4b5f-927f-f1982dd171f1/27b3af4b-b45f-4b5f-927f-f1982dd171f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b3af4b-b45f-4b5f-927f-f1982dd171f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:1f:b3:ba:e5:83:92:bd:d1:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b3af4b-b45f-4b5f-927f-f1982dd171f1
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=cbde510d-3cee-44b7-9d85-0279c73b35ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e0:86:a3:5a:b8:2c:f8:01:66:42:b5:8f:ad:
                    fc:c4:39:68:6a:c6:6b:e1:6c:97:8f:c2:8e:88:8b:
                    8d:f7:43:d5:c7:57:06:9b:e1:27:70:85:5e:53:3e:
                    37:ba:4f:a6:8b:4b:c2:d3:bd:62:39:b1:47:be:fc:
                    21:bd:d1:c0:7d:7f:f3:fe:c8:88:e0:70:fd:33:64:
                    55:46:00:9f:a0:68:b4:ff:bf:2e:50:1e:c0:64:31:
                    a4:5b:54:cc:4a:24:0b:48:3d:14:ee:bc:0b:1e:50:
                    0d:be:39:94:17:24:37:14:42:14:e0:5b:cc:6a:c7:
                    8b:59:20:48:f2:be:24:42:5f:7d:1e:c6:aa:8e:6c:
                    41:9a:cf:3d:76:bf:d2:00:5a:3b:6d:e0:eb:0f:6d:
                    05:11:57:09:cc:de:95:55:0c:19:fc:38:ed:a7:4b:
                    6c:f5:d3:5f:8b:7d:da:ce:58:c6:e7:bd:a7:b0:ec:
                    5e:6a:fb:ca:9b:21:b1:f1:07:16:3a:31:7a:12:24:
                    4e:31:4c:be:65:c2:ad:52:c4:de:54:ca:b7:bd:ed:
                    0c:71:67:60:98:e1:52:da:e8:4a:e3:a4:a9:e2:4e:
                    15:b9:f7:e1:44:fe:33:0b:0f:db:ef:22:38:ef:4d:
                    2f:da:c1:60:0b:47:b5:c5:a9:29:4b:e1:f2:e6:33:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:FC:DF:6B:36:C4:AE:1E:92:E1:4C:B3:D2:F2:68:32:EE:5E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b3af4b-b45f-4b5f-927f-f1982dd171f1/06a8c79f-7e49-3ba0-9114-b149184aafc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b3af4b-b45f-4b5f-927f-f1982dd171f1/27b3af4b-b45f-4b5f-927f-f1982dd171f1.crl

            X509v3 Authority Key Identifier:
                keyid:4E:BF:5A:9E:A0:66:71:D2:49:88:FB:40:6C:C7:96:08:7C:C4:52:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b3af4b-b45f-4b5f-927f-f1982dd171f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.40.0/22
                  159.26.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b9:a4:47:2b:10:9a:82:47:c8:dd:95:44:96:4e:ae:78:2b:
         f6:c3:67:5a:f9:ca:42:d3:43:41:72:cd:53:1e:a5:46:dc:06:
         17:72:f1:97:47:fa:cf:a2:40:3f:20:bc:bd:20:99:80:6c:26:
         60:de:27:c2:35:8c:40:de:fb:27:df:30:ee:30:37:95:a6:b9:
         04:a1:77:53:b6:e1:d6:a3:3c:2f:d8:fa:92:3d:42:e3:6d:82:
         b2:6c:38:cb:ec:2c:d4:86:20:62:db:9c:dd:fe:0a:13:85:cb:
         37:ec:f5:61:c6:82:79:c0:a1:03:44:e5:ba:a1:c6:80:bb:a7:
         45:87:31:c6:cc:72:17:da:0a:09:81:45:59:b3:ff:9a:99:35:
         7f:2a:83:75:c7:09:51:23:70:a0:81:82:a8:63:e5:50:fa:ae:
         48:78:35:32:43:d3:02:78:19:e6:02:49:91:38:c3:e5:b8:56:
         a2:cf:df:8c:f7:7e:43:54:ef:e9:3d:fc:f7:95:06:e4:6f:bf:
         3b:d1:a1:97:a4:c4:c5:51:3c:99:24:5c:6e:68:17:c6:a0:af:
         8e:8f:60:da:7b:38:37:d9:57:56:5c:d7:a5:0f:08:51:71:5c:
         0a:4c:d1:7b:7b:a3:8b:4d:9a:53:f3:6f:92:b2:64:10:f9:ef:
         9e:2a:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:07 2026 by rpki-client