Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/dd9388eb-93e3-3f6e-b57c-9ee6f9aff8b5.roa
File:                     dd9388eb-93e3-3f6e-b57c-9ee6f9aff8b5.roa (raw, json)
Hash identifier:          YYguteLWN2xBQe8/xVw/4d6slEFhBCd2xmM/zGSAGqM=
Subject key identifier:   51:F8:8A:28:15:4A:50:5E:4A:E8:0C:9F:04:62:37:AB:F1:14:AE:D0
Certificate issuer:       /CN=825ee845-e910-434b-9fb6-239bbc2774f6
Certificate serial:       010D0C9F4328584E253F0177477261EC81CC2900
Authority key identifier: 1B:4E:F9:6F:A3:67:CD:DA:19:D7:FE:34:2A:24:AF:1F:5A:FE:6E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/dd9388eb-93e3-3f6e-b57c-9ee6f9aff8b5.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     20130
IP address blocks:        140.192.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:01:77:47:72:61:ec:81:cc:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825ee845-e910-434b-9fb6-239bbc2774f6
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=8ce07991-f7c4-4575-a702-4b8e6afcf5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:a3:b0:eb:02:8c:9f:63:24:76:da:38:21:
                    44:d7:b2:1c:c9:bf:4e:80:90:0c:48:82:ce:34:12:
                    d2:69:19:90:76:05:c6:f8:db:7d:7b:a6:09:8b:7e:
                    b1:05:05:62:80:5c:b4:cc:87:af:77:d3:20:16:c4:
                    5a:57:00:69:3c:c3:d4:d5:96:5f:bb:6f:de:33:fa:
                    bb:8a:f3:76:0e:3b:14:4f:85:e6:80:b0:a5:89:53:
                    5d:ed:b7:c8:5c:d2:64:69:45:b6:bb:24:c9:59:c6:
                    5e:2c:34:e5:03:72:3c:b4:19:44:4c:ae:28:1a:71:
                    bc:d2:81:ab:82:71:1f:50:1d:cd:39:a6:22:fd:a8:
                    c6:ff:b3:a1:33:bd:e2:1a:db:6b:80:36:79:74:8d:
                    db:15:54:c3:0b:a5:68:26:e9:93:0b:c7:a7:dc:ac:
                    1e:80:de:37:13:19:71:90:71:57:90:7f:24:79:77:
                    1d:d9:04:47:94:39:ae:80:54:28:09:d1:b7:2e:fb:
                    65:b9:5f:12:e5:d2:84:29:5a:35:a0:94:8e:82:b1:
                    8c:9f:d3:4e:b2:37:2d:71:04:de:c0:31:fd:fc:68:
                    41:ab:2e:2b:b2:00:44:3d:11:96:8a:6f:fe:1b:b8:
                    0a:01:07:1c:02:9c:08:05:62:99:f7:63:6b:e8:ac:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F8:8A:28:15:4A:50:5E:4A:E8:0C:9F:04:62:37:AB:F1:14:AE:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/dd9388eb-93e3-3f6e-b57c-9ee6f9aff8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.crl

            X509v3 Authority Key Identifier:
                keyid:1B:4E:F9:6F:A3:67:CD:DA:19:D7:FE:34:2A:24:AF:1F:5A:FE:6E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.192.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:a8:38:de:ba:d4:fc:c9:d2:c7:c1:f4:de:c2:fa:6a:d1:
         b8:c5:8a:8c:19:db:3a:76:18:dc:01:9d:f7:f1:b8:ac:2e:f3:
         e7:43:25:3f:f4:a9:63:28:09:a0:29:fc:c0:91:02:31:19:66:
         78:2d:dd:5d:a3:e7:59:0e:f1:6f:80:6e:a4:57:2f:bf:0f:a4:
         f5:c3:3d:c2:1c:b1:b5:b0:a2:c6:4c:b9:6c:e5:85:a2:9b:52:
         54:aa:1f:65:76:b4:c5:ea:da:5b:fe:28:4e:bc:b3:76:08:cc:
         e9:c7:b3:c3:b4:18:35:8f:29:13:4c:4b:56:c0:8e:20:c6:b8:
         47:ae:81:23:e0:61:63:48:26:af:bb:41:8c:e9:6e:cb:9b:04:
         0e:d9:c3:15:3d:38:8a:8c:16:19:5c:ff:94:09:48:fa:54:9a:
         43:38:84:49:63:1e:8a:8d:a5:51:e3:17:62:87:d3:7d:59:a9:
         4d:d4:b4:5b:f2:2a:ef:9a:04:83:8e:8a:a7:52:5f:f8:e6:17:
         c1:7a:c3:56:d5:ca:8a:a3:f5:3c:62:c9:36:39:98:2d:2c:81:
         b6:e3:28:6e:d9:cc:fd:a3:08:36:79:c8:e4:17:4b:d7:28:66:
         6e:e3:f8:91:08:16:29:cd:d9:1c:2f:ba:0c:61:f4:7f:32:0c:
         33:d0:2c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:42 2026 by rpki-client