Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621/6e6d18ba-5736-3d15-89e8-3d7e8e45a3f2.roa
File:                     6e6d18ba-5736-3d15-89e8-3d7e8e45a3f2.roa (raw, json)
Hash identifier:          RlzXQJ8DOggynrD/pMFd7O5FGQ/gUcEr2+mah8COxL4=
Subject key identifier:   B0:2E:70:D0:E0:D2:DE:50:E0:6B:07:D9:F7:DA:CF:47:39:98:1C:41
Certificate issuer:       /CN=aecee1ad-59f3-4a6e-ad86-3feb38be6621
Certificate serial:       010D0C9F4328584E18AEEBD1A9341DF2F7365FA0
Authority key identifier: 00:BD:0F:80:46:A8:D3:DE:BB:E1:46:75:07:45:F8:66:B5:ED:59:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621/6e6d18ba-5736-3d15-89e8-3d7e8e45a3f2.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     52041
IP address blocks:        130.12.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621/aecee1ad-59f3-4a6e-ad86-3feb38be6621.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621/aecee1ad-59f3-4a6e-ad86-3feb38be6621.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:eb:d1:a9:34:1d:f2:f7:36:5f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecee1ad-59f3-4a6e-ad86-3feb38be6621
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=b3ea6874-7d52-4967-b130-b802edb53dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:4d:0b:8f:2d:55:cd:75:3e:ec:51:a2:b0:
                    6f:68:15:58:25:1e:e6:c3:a6:ce:4c:1d:5f:84:cb:
                    b2:74:91:12:35:61:a7:99:41:fe:40:ba:e3:9a:a3:
                    39:8d:51:c9:00:05:b6:dd:dc:e8:71:2e:e5:41:b5:
                    d5:ac:e6:a6:a9:c1:01:47:29:fd:9f:da:91:14:4c:
                    2e:9c:b7:69:b9:64:5c:cb:d7:9c:bf:2c:e4:38:28:
                    e3:1d:b7:85:fa:e9:16:99:78:13:0e:54:cf:dd:60:
                    2c:37:4d:6e:2a:2b:eb:f0:0d:cc:cf:a1:2f:ae:6d:
                    57:4d:44:69:1b:83:67:9b:44:d9:2f:66:d1:c1:b8:
                    c2:ea:6e:3d:97:bb:26:44:39:30:d8:f5:cd:48:88:
                    16:db:38:64:be:8f:f9:58:1d:9f:7c:04:32:4e:25:
                    76:7b:c3:83:3a:9a:4c:71:3f:df:2b:7c:81:ac:b6:
                    10:f1:31:46:b7:48:ee:d8:a0:33:56:ff:47:04:ba:
                    cd:3d:b7:09:82:10:ec:21:b2:52:97:91:0c:d1:c9:
                    69:1b:16:be:53:ba:a8:30:fb:e2:99:aa:fe:8d:20:
                    0e:aa:a4:86:7d:38:f0:20:7f:90:ad:22:8c:33:32:
                    b3:65:31:c7:66:84:2e:e7:c3:48:85:77:c5:0e:ac:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2E:70:D0:E0:D2:DE:50:E0:6B:07:D9:F7:DA:CF:47:39:98:1C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621/6e6d18ba-5736-3d15-89e8-3d7e8e45a3f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621/aecee1ad-59f3-4a6e-ad86-3feb38be6621.crl

            X509v3 Authority Key Identifier:
                keyid:00:BD:0F:80:46:A8:D3:DE:BB:E1:46:75:07:45:F8:66:B5:ED:59:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:91:df:cd:e7:65:49:48:a1:53:96:87:10:ac:df:87:f2:c5:
         07:01:60:30:b1:af:d6:ec:97:9f:f9:6a:22:7a:01:41:2e:5f:
         a8:c4:f8:5d:76:42:3d:87:52:6e:a3:7b:ef:2c:17:34:1d:4b:
         8f:31:25:8c:c6:4b:6b:fe:af:e2:84:9f:67:f5:c7:69:d5:6e:
         01:51:e6:02:cf:0e:69:35:80:41:11:6e:29:ad:f1:dd:82:ea:
         95:95:25:14:a3:c1:a5:b1:5b:2c:b2:55:e5:07:eb:e9:09:05:
         94:f3:d6:98:b3:dc:74:f3:41:7a:84:b4:cc:71:2d:a5:45:07:
         5d:7a:95:51:77:8a:ee:53:be:c1:56:e6:2b:be:c3:14:07:77:
         12:af:61:0f:3c:3a:da:1c:00:86:e3:42:38:c7:48:6f:cc:79:
         a8:86:b5:7a:7c:8d:57:69:e1:ae:a9:35:de:24:c5:76:d7:7d:
         52:fe:5e:0b:3b:59:cf:43:4b:f6:96:c8:af:44:3b:f4:5e:96:
         f6:8c:b7:70:34:45:54:b8:bf:f9:d0:68:bf:a5:bf:b3:d3:63:
         cf:2c:59:14:62:c5:f3:4d:a1:ce:8c:28:6d:a6:f9:05:09:0e:
         ea:0e:cc:61:a2:e9:99:6e:4b:80:17:f0:e4:ed:2d:e5:c1:8a:
         df:8f:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:35:44 2026 by rpki-client