Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/5966a349-3140-3452-86aa-0f856b56ecb9.roa
File:                     5966a349-3140-3452-86aa-0f856b56ecb9.roa (raw, json)
Hash identifier:          +ACpvv2YzOBVKHzZ1u1uc4w7mD5Zbaq9r9wFJBZ2aEY=
Subject key identifier:   A4:68:91:4E:98:60:C9:B3:3D:BF:4C:B2:22:98:F4:CE:CB:61:4D:40
Certificate issuer:       /CN=eb5678a9-924a-4464-90ce-3a9ac84c49b2
Certificate serial:       010D0C9F4328584DFD3B1E4D5E0FCA1A93125160
Authority key identifier: 8B:85:BF:40:09:BF:59:EB:0B:7B:0E:60:C0:46:31:1B:F4:6A:99:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/5966a349-3140-3452-86aa-0f856b56ecb9.roa
Signing time:             Fri 29 May 2026 01:00:10 +0000
ROA not before:           Fri 29 May 2026 01:00:10 +0000
ROA not after:            Thu 27 Aug 2026 01:00:10 +0000
asID:                     11580
IP address blocks:        162.254.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/eb5678a9-924a-4464-90ce-3a9ac84c49b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/eb5678a9-924a-4464-90ce-3a9ac84c49b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fd:3b:1e:4d:5e:0f:ca:1a:93:12:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5678a9-924a-4464-90ce-3a9ac84c49b2
        Validity
            Not Before: May 29 01:00:10 2026 GMT
            Not After : Aug 27 01:00:10 2026 GMT
        Subject: CN=45f5a1a4-20a2-4c17-9908-0a584168f2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:44:db:89:8e:d6:af:9e:f4:35:9b:dc:cf:
                    87:39:ae:7e:d0:8f:03:6d:e9:79:63:ce:30:2c:4f:
                    ec:02:27:4e:0d:d5:81:73:b1:9b:13:2e:71:69:81:
                    9b:59:51:9a:56:c9:27:fc:fc:ca:a7:05:08:b5:51:
                    39:0f:70:59:37:1b:ab:40:20:d3:07:d7:52:a9:3d:
                    66:f0:e2:c2:e4:f5:98:e9:f5:87:44:d3:de:2e:a9:
                    5c:38:07:fe:ff:49:68:31:aa:e3:cf:31:80:8a:1a:
                    86:ea:e6:fa:58:70:cb:02:09:e7:2a:8e:37:f6:0b:
                    17:06:20:9d:2c:ed:09:7a:bc:b0:26:25:4d:04:ec:
                    0f:1d:f2:06:ca:43:39:70:89:29:32:35:37:d2:25:
                    11:79:d2:fb:2f:18:db:b6:ed:85:16:58:f5:e6:02:
                    b9:84:05:8f:18:c7:89:dd:9b:55:da:ca:4e:19:c4:
                    f3:aa:7c:ea:65:69:4e:5f:93:fc:57:69:bd:af:11:
                    71:8b:fc:9c:e3:2d:ab:62:89:7d:33:57:2f:cf:60:
                    eb:de:32:d8:cc:be:d6:ec:6d:ec:ad:da:7f:60:f7:
                    5d:37:be:30:c3:ef:77:c4:66:48:ac:50:11:0a:dc:
                    52:2c:e8:da:35:83:ad:6d:f6:52:af:05:d2:dc:37:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:68:91:4E:98:60:C9:B3:3D:BF:4C:B2:22:98:F4:CE:CB:61:4D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/5966a349-3140-3452-86aa-0f856b56ecb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/eb5678a9-924a-4464-90ce-3a9ac84c49b2.crl

            X509v3 Authority Key Identifier:
                keyid:8B:85:BF:40:09:BF:59:EB:0B:7B:0E:60:C0:46:31:1B:F4:6A:99:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:8d:ff:fb:12:a7:dc:02:fa:35:a9:08:d1:64:ed:26:b1:87:
         6e:f1:2d:2f:15:b8:51:2a:cc:6d:f0:76:ed:e1:4b:f4:db:77:
         71:96:98:e6:7d:dd:0a:d1:03:6a:6a:e2:d8:f5:59:df:0b:df:
         53:e4:76:ca:52:e7:a7:eb:cf:ee:5b:19:90:53:5a:ea:96:3f:
         75:57:c7:91:a8:1f:68:40:83:0d:d9:6a:e6:aa:67:52:70:e6:
         f6:07:5a:3b:43:07:fb:c6:d4:c8:27:16:76:8f:c1:4d:95:95:
         ec:37:45:5d:aa:29:0d:c1:ea:07:0a:80:ed:8c:17:85:d5:6e:
         0e:3b:5e:39:2d:a4:36:69:7b:b6:bb:a0:5c:39:f6:79:3c:64:
         89:ba:30:14:aa:08:5d:f5:e5:8e:89:bd:4e:a9:d2:1a:96:f2:
         48:d9:a8:d8:4c:7c:77:dd:0f:fa:9d:d8:c8:0b:91:c1:16:82:
         d7:df:6b:bf:c3:0c:74:56:2b:c0:7e:8c:7a:1c:9e:76:3b:a8:
         0c:1c:69:12:ba:b6:1f:a5:1d:97:1b:5a:0b:e0:7a:ed:90:99:
         c0:30:ca:a2:da:14:80:00:b3:4e:77:a2:7f:b0:ce:b8:49:0a:
         59:18:89:fd:14:3b:8a:4d:a7:7e:fe:72:61:ae:ed:37:10:c7:
         56:4a:d5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:44:08 2026 by rpki-client