Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa
File:                     6ac34efc-b417-35c3-8e9e-422402db22ca.roa (raw, json)
Hash identifier:          E2E8rg9fSFaxhBMcT/7XDCj2FV/clhjYkRi9Ndn8ynA=
Subject key identifier:   2C:AF:A2:3A:74:59:4A:80:3D:C3:DF:65:C7:20:7D:AB:14:DF:38:BA
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584E1E4447BC4E3763C74C62C2D4
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     138699
IP address blocks:        71.18.227.0/24 maxlen: 24
                          101.45.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:47:bc:4e:37:63:c7:4c:62:c2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=2325748c-09bf-4d05-ad3d-202eef7d37fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:4c:8b:7d:e5:40:e2:77:2e:be:e7:3d:36:
                    5b:9f:49:5f:3e:a5:0c:7d:bb:ae:52:df:38:c3:cc:
                    47:9f:bf:e9:95:e3:3b:51:fc:b2:9b:9e:93:4a:9d:
                    8e:60:9e:51:f7:3d:24:12:a5:b0:9e:c6:b1:56:e2:
                    97:bd:ba:b7:a7:c4:cd:27:8d:2c:a3:a8:6e:7d:da:
                    dc:03:ce:10:ff:d8:d8:56:9b:35:90:b2:56:1b:cc:
                    41:86:c9:a3:9d:e7:2d:42:12:fd:ac:8d:c7:48:13:
                    56:05:8e:b7:08:4c:b9:41:00:c1:32:c6:97:cd:bf:
                    31:3a:8e:d9:5b:03:6d:3b:70:d0:2a:10:9d:ad:e5:
                    89:3a:2b:39:8c:0c:32:4a:b5:06:69:83:dc:a3:60:
                    e2:f5:d1:ee:52:8f:f3:be:be:76:1c:8b:23:26:d5:
                    1e:03:ef:ec:d1:de:61:0e:62:6c:e2:d7:ff:03:60:
                    01:5d:81:93:0d:81:f9:8c:e5:ea:06:a8:50:e2:61:
                    0d:b7:10:de:00:b9:b1:5c:65:ec:68:15:c3:d0:eb:
                    0a:5b:40:4f:be:11:b4:cc:7f:07:be:f3:12:85:c5:
                    4d:fa:c8:d7:2f:9a:02:b5:8f:47:6f:63:84:c7:7e:
                    63:4e:b5:1c:bd:c9:b8:2b:47:12:6a:dd:8b:1d:54:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AF:A2:3A:74:59:4A:80:3D:C3:DF:65:C7:20:7D:AB:14:DF:38:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.227.0/24
                  101.45.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:c7:43:4c:e5:f9:e2:f9:ee:f9:9e:ad:39:b9:66:7f:65:d9:
         0f:03:ff:55:a6:7a:7e:ac:de:3c:a9:42:85:78:41:5b:cf:bd:
         61:0d:ed:f7:e4:e6:03:f5:5c:43:b2:6c:b1:2d:32:7b:e7:cc:
         13:ce:4b:6e:2c:e6:7e:a8:8a:0b:4f:fb:32:19:9a:b7:31:32:
         ae:0a:37:80:1e:84:28:1c:70:23:ed:14:7c:44:66:ef:41:10:
         42:3c:73:07:3a:51:68:bf:a7:b8:30:15:c4:4e:d0:7d:b6:95:
         8e:43:f3:77:ba:bb:d8:5d:52:4e:d4:dd:45:2e:53:89:0d:e3:
         29:d5:48:f7:7a:3e:eb:8f:c1:66:55:ed:b9:c4:ad:a5:b5:ae:
         6e:b1:7a:68:22:4c:e4:e3:10:ef:85:2a:6a:ee:37:dd:a1:67:
         0e:1f:ef:b9:f5:ae:95:6b:5f:19:e3:10:2e:c1:07:09:f6:8b:
         95:71:8d:98:a1:03:f8:ca:d9:57:e4:4f:2b:46:62:48:47:60:
         f0:58:c4:39:ba:99:f8:31:db:8b:49:12:32:20:23:b7:7c:4f:
         80:3b:fe:ba:0f:32:ee:92:63:3a:2d:c2:af:17:de:4b:56:36:
         b1:e2:73:c1:ac:24:0d:b2:55:03:87:76:77:64:f3:9f:98:b4:
         8d:c3:43:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:47:37 2026 by rpki-client