Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa
File:                     e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa (raw, json)
Hash identifier:          YgHJDcrCWkcQbx2wGTo6PP18Kyn6o724qjL0PVshcHs=
Subject key identifier:   0E:CD:21:EA:3D:99:04:FB:C7:E0:8C:8C:FA:9E:F6:18:1D:86:E8:15
Certificate issuer:       /CN=2605899c-3814-40b2-905e-c31be23847a7
Certificate serial:       010D0C9F4328584DBD05904BED27A1E8714C2840
Authority key identifier: 52:68:86:EF:DA:BA:3A:C8:EC:C1:BA:9F:D2:65:39:72:8A:D2:FA:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     4385
IP address blocks:        129.21.0.0/16 maxlen: 16
                          192.77.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:90:4b:ed:27:a1:e8:71:4c:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2605899c-3814-40b2-905e-c31be23847a7
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=b237b65e-c6f9-4974-aaef-3ec6e29abd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:e5:45:08:99:ef:df:35:ef:f4:e0:0d:62:
                    30:61:f4:b3:21:35:1a:48:d7:ff:b2:b9:b8:f1:f3:
                    a1:51:00:09:24:83:af:85:d2:9c:c3:79:1d:d4:56:
                    5d:51:c9:82:dc:c9:79:48:2c:dd:5d:72:07:49:2f:
                    ca:df:a4:72:47:0e:30:64:d9:e8:e5:65:4c:bf:74:
                    84:21:ac:ad:e0:c4:08:cb:ac:9c:ef:6f:fd:7e:d6:
                    a5:8e:58:26:99:1e:b1:a9:ba:a4:b0:79:b7:84:5a:
                    c9:81:69:f6:1e:3c:50:d0:04:95:2f:6f:36:e5:b7:
                    d2:28:77:36:37:a1:5d:48:ff:46:e8:87:d2:bc:b3:
                    cc:f5:da:04:ae:16:4b:16:2c:c1:f9:63:c3:0f:a2:
                    20:07:8e:e3:51:84:61:5c:37:9d:92:96:8c:16:e9:
                    1d:e4:39:fc:df:59:88:31:fa:80:1c:1e:00:ee:31:
                    75:9c:1a:3e:48:2f:85:9d:be:84:87:ac:5c:8d:aa:
                    bf:44:c6:d9:50:a8:ee:69:f0:f8:d8:27:74:5b:db:
                    d8:44:12:23:6b:af:40:69:27:f9:e1:ac:04:1f:c1:
                    48:51:24:8e:ba:a3:66:f0:1b:0f:f8:32:77:be:8b:
                    ee:f0:2c:3d:09:f8:01:61:e3:00:8e:5a:19:77:1f:
                    da:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CD:21:EA:3D:99:04:FB:C7:E0:8C:8C:FA:9E:F6:18:1D:86:E8:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.crl

            X509v3 Authority Key Identifier:
                keyid:52:68:86:EF:DA:BA:3A:C8:EC:C1:BA:9F:D2:65:39:72:8A:D2:FA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.21.0.0/16
                  192.77.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b1:ee:f2:49:3c:59:37:fa:76:73:b3:ea:05:9a:e0:69:20:
         d9:10:fb:6a:46:97:49:1a:dc:aa:3b:3b:f9:51:28:43:d1:f8:
         fd:a6:fb:f1:95:0d:bf:d8:87:7c:80:37:26:02:f5:a7:4f:b7:
         f8:17:87:a3:95:16:ea:a2:b0:d5:0a:d4:9a:a2:f7:c9:6f:79:
         1f:94:1a:ef:63:cd:6e:ad:cf:55:b9:92:48:f8:2f:3d:70:f6:
         21:8a:ff:d9:ca:b3:87:b4:15:e8:ec:fb:8b:70:96:b2:26:5b:
         60:50:37:38:60:77:54:37:8e:60:b7:08:20:7d:df:73:e7:bc:
         1d:4f:ec:12:cb:b6:a1:a1:28:73:48:92:8c:90:b8:9e:9b:22:
         c1:05:fb:fc:e9:68:00:d4:26:2d:70:5c:ae:c2:72:19:13:9c:
         b5:05:49:42:c9:38:12:e9:d2:f4:4f:d4:a9:f7:9b:11:e1:7f:
         06:d0:69:2b:4b:28:e0:b7:0f:be:23:67:bf:7c:12:05:dd:96:
         91:21:db:d4:cb:b9:b0:dd:5e:bc:e1:00:7f:1d:dc:a1:31:3d:
         f4:e0:01:64:7d:b2:56:a0:af:69:54:5f:38:4d:48:87:b0:ea:
         36:22:78:51:39:86:cd:16:54:06:73:79:7f:74:55:0b:7f:81:
         16:2e:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:43:11 2026 by rpki-client