Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b3ae037a-93d7-379e-94a3-ef8de4f644db.roa
File:                     b3ae037a-93d7-379e-94a3-ef8de4f644db.roa (raw, json)
Hash identifier:          aY0FKCC9ka2PC2qpMyKS7Ii2Bq4S3FcdfDXRsAG4tSg=
Subject key identifier:   E0:1F:03:E4:3F:08:20:79:67:DE:3B:69:A9:D9:FA:3B:5F:51:00:B2
Certificate issuer:       /CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a
Certificate serial:       010D0C9F4328584DD4C0633D674BC7F4BE7B1C20
Authority key identifier: 65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b3ae037a-93d7-379e-94a3-ef8de4f644db.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     14325
IP address blocks:        104.249.184.0/22 maxlen: 24
                          170.39.220.0/22 maxlen: 24
                          192.107.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:63:3d:67:4b:c7:f4:be:7b:1c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=ca66e1c8-416c-4694-a81d-c465f5030f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:22:09:80:ae:d1:6e:0b:85:99:d9:16:16:57:
                    15:48:9a:1a:04:54:fe:95:57:35:0c:ed:b3:d4:bb:
                    bf:78:33:af:84:7b:1c:9a:a3:bd:03:e2:5a:06:6a:
                    2a:11:f6:bf:4d:43:23:5d:b3:af:79:3d:a6:66:a3:
                    6d:a1:d6:74:bd:f6:4b:93:1f:89:08:cd:fc:31:ff:
                    a7:00:6f:80:9e:81:f8:0d:cf:b1:76:70:b7:23:6d:
                    e7:47:fb:79:33:6a:15:26:f1:44:17:3e:b2:df:87:
                    24:d7:95:21:3c:a2:11:ce:d1:7e:e0:ea:59:b4:85:
                    20:90:db:30:e9:9f:15:49:21:84:43:29:da:b0:b0:
                    7a:71:93:df:ee:9b:ce:c8:eb:b3:af:3d:16:63:ea:
                    17:a2:18:07:a8:55:d7:a5:84:b2:44:de:a6:a0:b9:
                    29:10:d2:38:81:0b:e2:f3:4f:a1:49:86:ad:9f:53:
                    e5:dd:3f:36:92:51:ac:f6:57:b8:a8:dd:20:2d:f4:
                    45:73:64:64:65:04:3e:e2:14:71:44:32:fb:b8:6d:
                    bd:1d:1f:58:98:2a:28:36:47:31:ff:e4:0a:7d:7b:
                    80:b4:8e:83:12:6b:38:32:72:06:aa:42:5b:c7:f3:
                    3b:99:4c:81:55:6d:b8:47:92:d1:44:40:e7:23:19:
                    ac:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1F:03:E4:3F:08:20:79:67:DE:3B:69:A9:D9:FA:3B:5F:51:00:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b3ae037a-93d7-379e-94a3-ef8de4f644db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.crl

            X509v3 Authority Key Identifier:
                keyid:65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.184.0/22
                  170.39.220.0/22
                  192.107.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:80:37:19:25:e9:de:ad:93:57:5f:a6:e8:07:2a:9e:91:b0:
         cf:b8:cc:3e:a4:7a:5f:ff:19:40:3c:53:da:ec:e2:22:92:4d:
         58:3f:44:8a:fe:9d:12:0f:43:d1:cb:fe:ed:49:72:86:5d:26:
         57:84:e8:df:09:03:67:69:cb:1a:08:4c:f0:2d:d2:8c:5f:d3:
         79:13:8b:c1:d0:b2:a9:7a:3e:6d:ea:48:7c:b0:30:2e:41:4d:
         1f:2c:d0:79:1a:90:89:7b:31:82:ce:d9:5d:0e:ef:a0:1c:f9:
         86:66:5b:ea:63:8d:00:ef:37:20:4f:21:cc:30:81:d3:2a:61:
         9b:8a:09:32:0a:28:c9:19:ea:c8:e9:af:57:ce:21:6e:ac:39:
         d5:ed:fc:3b:ec:f4:c5:1d:65:2a:22:d0:1b:c5:59:b0:bf:10:
         38:ee:c6:94:5b:ef:2c:b4:29:88:70:a8:db:21:92:b9:9f:96:
         3a:20:d1:91:31:6e:6a:09:a9:ca:09:8c:15:d2:63:1c:8d:11:
         b6:2a:98:ce:c8:32:15:27:15:80:96:5c:4c:8c:db:09:5b:fd:
         b8:08:5e:df:dd:01:2e:91:3b:74:6d:5d:89:c1:50:ab:24:5d:
         0e:74:ac:3e:fe:72:f2:3e:73:f2:90:6c:7a:5f:7b:bb:a3:30:
         2c:8b:48:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:10 2026 by rpki-client