Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a152d8c4-2eed-362c-b195-c5f6e1880722.roa
File:                     a152d8c4-2eed-362c-b195-c5f6e1880722.roa (raw, json)
Hash identifier:          uOKTtnGwKumPNJd1M9/jASdU8LbTmMtc9WvpsV+szCg=
Subject key identifier:   30:80:79:16:1D:EE:B2:77:EA:5A:5C:9E:86:7D:E5:C7:D0:1E:96:42
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584E104EE9AA3E65D07EA8058800
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a152d8c4-2eed-362c-b195-c5f6e1880722.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     393336
IP address blocks:        216.73.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:e9:aa:3e:65:d0:7e:a8:05:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=b48797a3-c616-4279-871c-6b49f462f182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:43:33:b0:ab:d5:ef:9a:5b:f9:90:9f:7e:cd:
                    bc:3d:48:fe:2d:07:0b:98:d2:eb:b3:a7:ee:f4:ee:
                    8e:47:4e:d7:1d:dc:fc:3c:78:6e:5b:a8:5a:58:1e:
                    d5:4b:7b:6e:82:46:97:d9:f7:01:12:36:36:3a:01:
                    ee:70:1d:3e:6e:60:ae:f0:3b:39:a8:22:aa:13:6e:
                    5a:c4:be:16:59:a9:46:67:ec:2c:28:f2:69:da:6c:
                    fc:01:57:ee:9a:09:ea:1a:d6:ec:07:e1:34:83:99:
                    ba:8c:80:45:e7:25:6a:5b:d4:d1:2f:1b:fa:fa:b5:
                    c4:6f:5c:4b:a2:90:9c:48:e6:59:77:80:9e:98:f3:
                    bb:67:5e:e0:e1:e2:c7:82:39:af:de:1d:79:fc:40:
                    47:1e:f2:8e:e6:af:54:f3:98:6f:5b:e4:2b:cf:d6:
                    e9:3c:9a:9b:ea:1c:dd:4c:e4:d2:a2:f2:3e:d8:fa:
                    9a:76:20:59:b2:36:28:3e:cf:61:6e:88:ae:ca:e4:
                    5f:a4:85:97:94:44:3c:c4:3a:ea:ba:ea:05:15:df:
                    b1:2c:c3:60:75:f0:a8:70:99:f2:be:72:71:e2:bb:
                    82:94:7a:9f:4c:0a:85:45:1c:cd:8c:be:0f:15:95:
                    80:83:9d:59:c7:13:2e:f7:db:fe:4c:9e:40:ff:be:
                    39:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:80:79:16:1D:EE:B2:77:EA:5A:5C:9E:86:7D:E5:C7:D0:1E:96:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a152d8c4-2eed-362c-b195-c5f6e1880722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ad:66:27:4f:2a:c8:d0:14:3c:ce:bf:52:be:96:62:81:03:
         2f:ec:ad:fd:b0:48:f8:c6:4c:3a:05:a9:3c:5a:af:3f:1e:af:
         1b:4c:32:f1:bc:47:36:ae:5c:4d:bd:49:db:32:1c:e8:d0:34:
         b0:44:16:c3:9c:9a:9f:65:cd:e4:34:d1:29:8b:70:97:b2:de:
         6e:3b:b2:99:45:c1:92:10:c5:20:f2:69:54:f2:73:7b:ac:ce:
         a9:47:17:5e:06:b4:34:2b:5d:2c:1c:04:d6:cc:68:8e:aa:37:
         ef:94:d2:45:55:12:25:6f:e5:9f:b5:9a:d2:49:dc:6a:44:52:
         cc:9d:81:ac:c1:32:6d:22:62:a1:db:dd:42:ac:ea:8e:a2:37:
         e0:98:27:5b:ac:5b:de:5c:8f:12:d6:5f:0b:4b:0b:76:67:f0:
         4b:5f:78:b4:63:33:ec:8b:39:cf:2d:02:59:5b:a6:d0:80:24:
         8e:f2:5b:60:00:81:d9:01:9b:6f:3e:77:d5:33:22:e2:28:51:
         a3:63:e9:cd:e7:17:b1:15:6f:a1:68:51:96:3a:4e:d6:43:fb:
         28:b3:1b:bc:49:4a:c9:00:14:79:ff:62:ad:a1:24:69:b7:44:
         92:dc:49:7a:3c:47:75:fc:11:1f:ec:a3:db:8d:2c:6a:d9:88:
         a4:1d:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:24:17 2026 by rpki-client