Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/e2c5f2b5-a6e0-3d19-8f9f-a37dbee569c2.roa
File:                     e2c5f2b5-a6e0-3d19-8f9f-a37dbee569c2.roa (raw, json)
Hash identifier:          DeoV/NRdRgjmx3x/r6IGQWnjqiufsNiIrdTPzQgkk+k=
Subject key identifier:   03:06:C2:6D:1A:48:DB:E5:16:9B:C7:5B:02:B7:CC:A1:2F:45:84:16
Certificate issuer:       /CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a
Certificate serial:       010D0C9F4328584DDA55CCFD1675ED7879D4F480
Authority key identifier: 65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/e2c5f2b5-a6e0-3d19-8f9f-a37dbee569c2.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     32145
IP address blocks:        104.249.184.0/22 maxlen: 24
                          170.39.220.0/22 maxlen: 24
                          192.107.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:cc:fd:16:75:ed:78:79:d4:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=86c1557d-f3e3-4c81-a607-1bafd2469555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:8d:1e:93:cc:11:96:b2:b1:ca:0d:9b:5b:
                    19:2c:82:f4:2c:52:e0:56:62:48:5c:62:da:7c:7d:
                    c3:6b:76:2f:3e:4f:62:18:b6:3a:84:70:d2:b0:88:
                    8f:bc:82:b2:3b:2e:1a:24:70:f7:d6:d1:62:c0:67:
                    89:26:fd:4d:50:33:dd:6f:89:4f:0c:ba:5e:77:ea:
                    5e:42:f7:ab:53:91:9e:ab:af:6c:74:0d:ad:21:d2:
                    e4:26:64:53:e2:17:80:e8:f1:e9:a3:5a:8d:cd:8a:
                    dc:5f:74:c4:4f:fd:f3:22:ed:4e:b4:f5:11:db:af:
                    f2:3a:0e:2f:98:95:70:13:d7:a4:dc:57:e4:b6:82:
                    65:82:49:8a:99:6a:50:87:59:fc:93:32:99:67:3d:
                    fa:bf:b2:f8:d0:8a:c3:d6:29:b9:e0:16:e4:f3:34:
                    fe:31:ae:3c:64:0d:53:57:9f:10:e4:5b:37:cd:a0:
                    b4:f8:e3:09:7e:17:7a:4a:f7:5d:02:ac:e8:84:38:
                    43:26:f0:f0:4e:c5:b3:4c:b6:6b:78:2d:9e:6b:36:
                    cd:2f:01:a9:a6:28:7c:64:6b:e3:9e:0b:cc:65:42:
                    30:03:8a:37:ed:d4:6e:dc:1f:d4:57:7b:a0:af:cf:
                    9d:dd:31:0a:41:0a:49:c2:76:68:af:27:32:2c:01:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:06:C2:6D:1A:48:DB:E5:16:9B:C7:5B:02:B7:CC:A1:2F:45:84:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/e2c5f2b5-a6e0-3d19-8f9f-a37dbee569c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.crl

            X509v3 Authority Key Identifier:
                keyid:65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.184.0/22
                  170.39.220.0/22
                  192.107.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1d:d6:92:5b:51:af:44:76:50:47:a5:39:51:1f:c9:48:b9:
         92:71:be:cc:6e:c0:e0:5f:56:a0:bf:52:aa:1c:7b:12:ec:ed:
         88:c9:79:d2:9f:f2:1c:96:cc:c4:f2:74:3b:2d:fb:17:f5:cd:
         2a:4d:f6:72:7f:ef:45:5a:fe:ff:19:d4:3a:56:1f:74:b3:ed:
         e5:51:a5:6b:04:db:05:9d:20:d3:6e:81:3f:75:58:00:87:40:
         f5:49:72:29:8c:22:83:51:6c:8f:8b:9f:60:52:28:cb:59:83:
         8d:bd:b8:75:23:ea:d2:fe:76:8d:27:1f:92:c0:64:53:25:59:
         ad:e5:14:4f:10:fa:3a:2d:a6:78:d7:1d:49:5a:23:c0:ca:00:
         1a:ab:5d:b7:9a:99:70:f4:29:14:51:9f:fc:af:1f:83:80:74:
         4e:d8:a5:92:20:2a:53:53:2b:90:3e:44:9d:18:0d:1c:50:9c:
         5f:87:89:9a:00:43:10:49:7b:7c:cd:20:47:cd:77:2a:06:62:
         ba:2a:80:f2:9b:bc:fe:d3:73:d5:c5:18:2b:84:3a:66:de:fc:
         3f:d2:b1:60:54:94:b7:f7:6b:c1:5a:25:1e:42:73:69:ff:45:
         02:a5:52:55:a9:9c:4d:b2:13:5e:29:f8:9e:e1:14:0f:e7:3b:
         99:59:23:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:35 2026 by rpki-client