Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/066c6246-b5fd-3b0e-8433-62fba46d7e33.roa
File:                     066c6246-b5fd-3b0e-8433-62fba46d7e33.roa (raw, json)
Hash identifier:          Si0OF9L/6sq2xj66l5bAp7xoyUAzo6WwrONtE24Rn2k=
Subject key identifier:   52:9D:86:09:E3:57:88:76:75:A1:9C:F9:56:F8:AF:7D:2D:86:32:D4
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584E1E4453EC1983D1DB11EBFE70
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/066c6246-b5fd-3b0e-8433-62fba46d7e33.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     13807
IP address blocks:        199.182.136.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:53:ec:19:83:d1:db:11:eb:fe:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=e65efa78-3a62-435a-bd85-f3127fe29b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:98:54:ae:1a:aa:9c:ed:c9:d2:78:96:0a:05:
                    9f:dc:c5:26:a3:7f:af:99:23:54:1d:66:19:94:ab:
                    10:02:2e:a0:00:ab:c8:d2:a9:cc:35:f6:27:a4:cc:
                    46:ce:30:95:47:b4:b8:64:86:8a:67:36:df:f9:cf:
                    aa:ef:59:a0:a9:e3:ae:b9:da:9a:78:db:55:ce:ff:
                    ea:a2:64:3c:40:e6:77:fd:8d:f5:f1:29:70:7b:ad:
                    2f:46:47:d1:f5:e9:f3:62:be:81:d9:66:58:e9:d2:
                    73:29:9c:bc:76:37:08:0d:46:15:06:c9:92:df:c1:
                    51:f4:bc:fc:59:7b:c8:5e:a7:65:ee:fc:5a:2a:bb:
                    9f:76:aa:ff:8b:05:85:0e:25:55:c7:35:fd:b4:e5:
                    22:3a:65:85:9e:24:9f:a1:4b:82:be:0a:29:12:8a:
                    16:3e:73:e6:d7:33:df:83:05:10:fe:79:2f:24:9d:
                    50:02:38:f4:a5:33:48:d0:ef:8f:07:09:6a:c4:1d:
                    f7:59:7c:0a:b8:f4:c9:f1:dc:10:a0:ea:7a:d6:86:
                    f7:6f:01:79:dd:05:f8:b4:fe:70:c5:f1:22:8b:99:
                    15:3f:b3:4f:eb:ed:ed:d3:85:94:5b:e3:3d:89:74:
                    9b:6a:6c:59:99:ff:29:81:4f:83:36:82:04:cd:50:
                    32:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9D:86:09:E3:57:88:76:75:A1:9C:F9:56:F8:AF:7D:2D:86:32:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/066c6246-b5fd-3b0e-8433-62fba46d7e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1b:94:07:87:15:5f:aa:5d:da:3e:c1:e0:2f:d4:16:41:4e:
         7d:1d:8b:e1:c2:9c:ca:2f:b7:c1:ad:54:41:6c:f5:61:32:4f:
         12:3a:4b:7d:7c:b3:d6:9d:64:3f:b9:81:f9:0b:e8:80:5b:14:
         94:54:16:e2:7f:f8:1f:ca:e2:dd:93:51:b5:94:5f:bb:f4:43:
         cc:05:ff:1b:63:e8:da:4a:33:a6:41:b9:68:ce:05:d0:42:52:
         02:aa:15:ba:39:40:17:78:55:62:d7:7f:f2:bc:85:fe:46:8e:
         ca:ce:88:8f:10:8c:26:09:58:1a:c5:70:61:d1:03:2f:96:67:
         cd:5f:61:ec:09:df:6c:bf:2a:44:21:f2:19:b3:8e:1c:dd:10:
         33:75:9f:ec:9a:40:fd:86:4f:ca:1b:57:a8:12:8a:e8:6d:ae:
         59:f3:6b:b7:73:f6:a1:bd:b0:f2:fa:d4:1c:45:48:d7:2c:0d:
         30:dd:3d:eb:76:2e:b8:08:2e:e6:a0:0c:6b:59:53:71:18:e9:
         fa:b8:3c:c7:58:f3:93:39:78:1b:2c:5a:0d:ff:b9:84:0a:1d:
         99:4e:df:f3:08:95:9f:fb:0a:09:11:6f:fd:4e:05:4b:2c:aa:
         13:82:05:7b:ac:f8:2d:7d:a1:d0:66:b9:4c:28:62:f1:0a:ee:
         41:e4:89:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:31:53 2026 by rpki-client