Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625/3783c75f-a8af-34ef-87e2-74dd3048dff0.roa
File:                     3783c75f-a8af-34ef-87e2-74dd3048dff0.roa (raw, json)
Hash identifier:          t8OhfIQl0E2m6io2GeoDnKf8RG0dgDPxlwzht9SwIuw=
Subject key identifier:   B4:B2:E2:06:8F:1B:50:96:1E:8B:C5:A7:C3:0C:75:2C:0F:EA:BD:65
Certificate issuer:       /CN=ecb97f03-7477-4dcb-aea2-e92598620625
Certificate serial:       010D0C9F4328584E310A9A2186DE4497A9C20F40
Authority key identifier: 6C:7C:F5:F8:06:A8:8E:E9:58:AC:32:83:D1:30:50:8D:68:67:8A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625/3783c75f-a8af-34ef-87e2-74dd3048dff0.roa
Signing time:             Tue 16 Jun 2026 14:24:29 +0000
ROA not before:           Tue 16 Jun 2026 14:24:29 +0000
ROA not after:            Mon 14 Sep 2026 14:24:29 +0000
asID:                     46426
IP address blocks:        64.179.192.0/20 maxlen: 24
                          69.168.32.0/20 maxlen: 24
                          162.246.152.0/22 maxlen: 24
                          2606:c840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625/ecb97f03-7477-4dcb-aea2-e92598620625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625/ecb97f03-7477-4dcb-aea2-e92598620625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:0a:9a:21:86:de:44:97:a9:c2:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb97f03-7477-4dcb-aea2-e92598620625
        Validity
            Not Before: Jun 16 14:24:29 2026 GMT
            Not After : Sep 14 14:24:29 2026 GMT
        Subject: CN=6e9f7608-3e2b-4d19-9854-0d80811ccdad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:11:5e:91:95:0d:1f:4b:37:0d:fb:c0:9c:03:
                    b4:16:33:9a:09:65:70:c8:19:9f:a0:0c:1d:e5:bd:
                    9e:44:1d:c5:5d:b5:c7:8d:0e:d0:fe:2c:2a:3f:6f:
                    4f:90:0c:57:37:b3:03:74:d3:c2:ec:d6:3d:52:3a:
                    dc:85:6c:c1:30:30:a5:57:41:f2:05:b7:a4:3f:be:
                    4a:3d:4c:2c:cc:54:55:d5:b4:00:34:fa:33:e0:05:
                    90:31:79:02:f1:31:1d:bc:eb:7a:85:67:26:99:5e:
                    8b:65:6d:5f:4b:cf:d3:c8:8c:4b:cf:64:a6:a3:a3:
                    f2:ab:9f:a2:9b:b7:01:4c:42:da:d6:6d:a6:cb:f6:
                    8c:04:41:d0:ec:68:2a:96:b4:a5:d0:62:ee:b5:3e:
                    28:a7:bf:f5:cc:12:6e:f8:04:a2:46:e0:76:64:4a:
                    07:c1:2a:c0:b4:3d:fc:be:3c:08:80:9a:fa:80:1b:
                    61:26:08:12:51:bd:04:d6:24:ea:e4:76:2c:7a:f0:
                    26:b5:76:a6:44:eb:75:73:7f:ad:7c:a3:a6:de:4c:
                    57:03:bc:87:eb:ea:95:e3:67:b8:8b:42:69:72:c0:
                    15:1e:c5:ca:d2:02:28:da:eb:b7:19:fe:00:47:5f:
                    1e:b0:65:ef:71:e5:ca:86:69:a4:72:bb:d5:d3:da:
                    82:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B2:E2:06:8F:1B:50:96:1E:8B:C5:A7:C3:0C:75:2C:0F:EA:BD:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625/3783c75f-a8af-34ef-87e2-74dd3048dff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625/ecb97f03-7477-4dcb-aea2-e92598620625.crl

            X509v3 Authority Key Identifier:
                keyid:6C:7C:F5:F8:06:A8:8E:E9:58:AC:32:83:D1:30:50:8D:68:67:8A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ecb97f03-7477-4dcb-aea2-e92598620625.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.179.192.0/20
                  69.168.32.0/20
                  162.246.152.0/22
                IPv6:
                  2606:c840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c9:49:70:b6:20:3b:5b:e3:0f:d1:62:4c:ef:94:c6:33:a6:
         2f:8c:6c:c9:30:4f:1b:8d:68:0e:0f:a8:72:a5:e9:b3:26:7a:
         30:d3:19:49:ac:77:76:6e:e4:87:4e:da:0a:99:13:49:ce:7c:
         45:7c:d9:21:b1:aa:dc:eb:b9:f1:aa:ff:a3:a1:fc:8d:c3:9c:
         fa:b4:4a:aa:7b:1b:13:6c:7b:4f:1f:aa:ca:6d:89:09:e9:a2:
         bb:15:df:34:5d:0b:36:da:26:14:ae:4a:05:34:05:6a:67:bd:
         02:a6:65:20:3e:41:03:e2:cb:08:81:29:6a:65:46:59:dc:e5:
         81:79:bc:08:a7:49:e7:f7:94:a1:36:ee:db:0e:e7:15:26:74:
         e7:f3:c4:55:1a:98:fa:09:46:6f:d1:76:de:fd:a7:62:12:d3:
         81:9a:36:7b:f4:6d:c3:3c:a4:20:7e:f6:49:7c:2d:03:d5:17:
         1c:4a:2c:d3:f3:3c:34:40:3c:99:2b:a2:c9:77:9d:ff:b2:48:
         d1:de:8c:68:d6:43:ad:53:b6:fb:46:a8:8e:f5:da:3d:b9:31:
         4d:ab:40:c0:23:06:84:51:25:95:80:35:73:6f:a2:cd:ce:ab:
         d0:68:b3:16:59:af:87:9c:c5:f4:0e:1a:f2:ba:c5:dd:95:a1:
         1e:e9:ec:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:56:08 2026 by rpki-client