Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/a95379b5-6d42-39ad-802a-afc32f163143.roa
File:                     a95379b5-6d42-39ad-802a-afc32f163143.roa (raw, json)
Hash identifier:          6MRFihDRc21geXsHPclRVQfwErubZIQFJ1wXevClydQ=
Subject key identifier:   79:2E:F7:7B:90:25:83:25:FD:FF:77:66:79:90:19:28:2C:40:D6:C3
Certificate issuer:       /CN=de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b
Certificate serial:       010D0C9F4328584E0700A80EFC2E3F9F4ECD0180
Authority key identifier: 6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/a95379b5-6d42-39ad-802a-afc32f163143.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     40838
IP address blocks:        168.151.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a8:0e:fc:2e:3f:9f:4e:cd:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=6dc31519-7d02-4b01-be03-601b74415bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:53:ec:cb:2d:c8:41:77:5d:c2:30:2e:5d:
                    0a:b3:dd:c7:05:a0:b9:1b:4c:7f:25:37:64:3c:9c:
                    47:19:b6:e7:a0:89:8c:ee:aa:b5:09:ea:2c:3a:87:
                    08:25:74:b9:17:bb:c8:f8:fa:87:a4:f9:f8:35:cf:
                    89:56:1b:4e:e3:72:c8:0f:ba:1e:81:39:84:da:81:
                    0f:8d:dd:5b:22:41:33:8a:41:ff:9d:f2:33:dc:0b:
                    34:c5:1b:26:c9:40:ea:10:95:f8:d2:c0:a4:c2:de:
                    2d:ad:d8:67:44:4f:4b:b0:b2:47:4f:0b:88:07:c6:
                    eb:5d:56:a1:61:5e:90:b4:4c:c4:03:b3:91:18:32:
                    63:8b:5b:19:c4:98:0b:11:8b:d5:1b:07:13:b3:8c:
                    3e:3c:05:1e:15:84:bc:fd:da:17:eb:3a:2c:fd:bc:
                    a2:1b:bd:95:eb:b8:73:b9:98:fb:99:c3:20:34:3b:
                    03:61:b9:3b:cc:c6:f9:3a:e1:19:95:2d:c7:91:60:
                    36:b9:c3:8a:4b:66:af:7a:3d:cf:6c:39:0d:63:ad:
                    cb:b1:e6:56:09:7a:4c:4a:25:7b:21:b3:14:f9:e7:
                    7e:e3:eb:53:11:b0:db:c0:09:99:2b:e4:6a:5f:57:
                    5d:87:86:e8:3d:67:da:43:0c:4f:86:1f:d7:9c:b3:
                    c6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2E:F7:7B:90:25:83:25:FD:FF:77:66:79:90:19:28:2C:40:D6:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/a95379b5-6d42-39ad-802a-afc32f163143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.crl

            X509v3 Authority Key Identifier:
                keyid:6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:67:d7:0f:e4:7a:f6:b0:49:e4:0a:8b:cb:61:e7:67:e8:d0:
         78:8c:fb:52:bf:5e:46:3e:fe:8c:f6:d1:a9:b8:55:69:d4:01:
         40:70:e9:c7:40:63:98:93:8c:b8:7d:7e:71:10:30:99:e3:db:
         6d:8c:b2:e5:24:b0:2a:54:57:08:31:38:b4:89:86:8e:ef:60:
         bc:9c:c3:51:68:b2:b4:a4:dc:32:b9:13:d0:30:b3:c2:d8:1e:
         34:c7:93:2c:ad:9c:0b:fd:72:73:4f:59:73:d5:b7:1b:3e:1f:
         8c:82:0a:be:1a:e3:58:89:03:cd:61:10:57:83:f8:c7:58:38:
         4a:63:bb:3e:25:a2:ef:0b:03:22:ed:64:29:cb:5f:25:16:c0:
         18:29:23:db:35:21:84:70:99:34:f5:c1:e3:66:b8:91:38:73:
         51:4c:c2:3e:ca:d1:4f:35:2c:ee:cd:f8:f1:ff:f6:41:3d:9e:
         3f:c9:9d:be:40:6a:b8:63:9b:e6:58:bf:61:f4:b9:50:61:ff:
         91:bd:b8:3b:ef:65:e7:8c:b1:a8:d8:fe:53:02:28:23:e2:fc:
         21:1b:9a:73:bd:e7:e6:c8:cd:f5:d5:3e:b2:43:0e:92:cd:1e:
         17:23:fc:34:ec:11:06:00:29:94:88:c4:bd:fa:f4:36:2a:16:
         b2:49:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:26:03 2026 by rpki-client