Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/13d01cea-2801-3989-8246-aaeea60371b4.roa
File:                     13d01cea-2801-3989-8246-aaeea60371b4.roa (raw, json)
Hash identifier:          Ew4XFLrZKHVVMeXeHhTp98+0T9YzN8uA1joZnrdXdLg=
Subject key identifier:   7D:AB:36:0F:9F:14:93:42:9B:AB:C3:AC:14:48:78:3B:5C:47:F8:74
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F6D7E80483FABE6BC8A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/13d01cea-2801-3989-8246-aaeea60371b4.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     33588
IP address blocks:        159.111.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:6d:7e:80:48:3f:ab:e6:bc:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=eebd3a59-6429-4d40-8014-41b7759b92f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:db:32:e1:f0:1c:37:da:12:55:e2:f6:41:8f:
                    7c:00:e8:54:51:4b:93:8f:0a:2a:92:6e:90:fa:ee:
                    07:00:71:8d:52:08:86:22:af:df:28:34:29:d6:d5:
                    8d:4f:ff:18:64:5c:66:9b:9f:99:10:dc:d2:28:2e:
                    b8:de:15:f5:29:84:ed:79:8d:68:23:9b:ed:83:a8:
                    36:73:2c:4a:ca:78:d5:09:5c:82:d1:ba:88:a2:95:
                    94:9b:e5:d9:5b:cf:cb:ef:dc:ba:e7:8d:c2:17:98:
                    df:46:74:e6:e4:2e:42:a4:8b:ca:0a:29:6d:5c:83:
                    dc:a0:7f:95:37:8f:cf:07:5e:b2:90:bd:ab:98:6a:
                    26:32:b5:3b:d7:8a:fc:63:44:3b:a1:18:bc:5c:71:
                    b8:af:da:06:0f:2b:a1:40:9e:01:95:ae:e8:7f:b8:
                    10:0b:36:5d:4a:92:65:a6:fa:d1:25:c9:36:2c:46:
                    95:62:da:e0:61:15:18:a0:3a:53:58:9e:b5:6c:a3:
                    14:c4:72:a3:1c:d3:0c:c1:09:3a:ca:50:76:47:a8:
                    db:fe:87:1d:13:93:f1:69:c1:78:6b:90:e1:f2:7c:
                    0a:d4:69:12:c1:a1:1f:66:12:e5:34:58:ea:cf:b5:
                    7a:6e:f9:76:e3:88:42:74:d0:ec:b6:16:34:27:21:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AB:36:0F:9F:14:93:42:9B:AB:C3:AC:14:48:78:3B:5C:47:F8:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/13d01cea-2801-3989-8246-aaeea60371b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.111.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:29:2f:3f:e9:85:20:5d:74:f7:45:b6:b7:58:0f:9d:ef:6f:
         c2:4d:9c:f6:e6:6b:84:8e:2d:85:24:3d:c7:7d:c0:5b:ce:7f:
         39:ab:f3:8b:74:ee:8c:d4:5f:ac:34:14:19:b4:68:5f:fa:59:
         f0:0c:94:37:f8:4f:91:8a:8f:7f:83:26:dd:02:f7:d8:51:a6:
         7c:b7:36:a9:28:84:e5:5b:99:01:6e:32:a4:01:32:b7:2b:78:
         94:49:51:71:a4:70:0a:2b:0f:0f:dc:78:d7:9b:8f:75:19:ac:
         1e:57:01:76:cf:76:77:3c:fc:17:95:38:a9:e5:a6:14:fe:75:
         d2:fa:1f:61:f4:fe:0f:5a:95:aa:51:e2:d2:19:c0:fd:d4:90:
         9c:cb:ad:9e:8e:bd:25:e7:54:f5:d2:53:52:ef:6b:00:ec:00:
         e0:e3:c7:7a:65:8c:f8:a5:4e:84:0b:c2:d8:68:4d:c5:45:27:
         75:61:ec:b3:e2:73:93:88:31:e4:0c:67:1e:63:17:72:d2:14:
         fd:69:c0:39:2a:c6:a1:9d:75:eb:62:24:39:e8:fe:33:28:93:
         81:73:de:1f:47:91:b2:c7:27:87:87:f2:93:c2:91:ac:15:d4:
         68:92:8d:a2:40:f4:73:fa:b3:f9:e2:a9:8b:9e:f9:c4:90:2e:
         8c:ed:3b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:59:29 2026 by rpki-client