Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/ffadb939-b6c6-3c57-bc5d-21bd26b7f4c9.roa
File:                     ffadb939-b6c6-3c57-bc5d-21bd26b7f4c9.roa (raw, json)
Hash identifier:          LalhxdFwBTyBPo2POhSC2z6WQPAAi1lTh4/vi4Cu/WY=
Subject key identifier:   3B:5A:5A:7C:38:1A:D4:6F:36:42:AF:A6:1F:56:A5:CE:CE:55:07:75
Certificate issuer:       /CN=d2b7de7b-98de-4c9b-a37c-d7ecb88cf422
Certificate serial:       010D0C9F4328584DD09052C68775255AA6E71780
Authority key identifier: B4:2C:83:EC:68:8A:F5:F3:27:A8:AB:B7:2B:A5:E1:78:35:A1:2B:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/ffadb939-b6c6-3c57-bc5d-21bd26b7f4c9.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     399252
IP address blocks:        140.106.80.0/20 maxlen: 24
                          207.66.80.0/20 maxlen: 24
                          2606:3240::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:52:c6:87:75:25:5a:a6:e7:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b7de7b-98de-4c9b-a37c-d7ecb88cf422
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=b6b45b6f-8259-4f85-b275-c6b43d1b6ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:70:03:34:58:95:fa:ce:ad:96:da:4a:68:
                    f2:0e:01:fa:1b:8b:1e:7f:96:d3:21:47:b0:a2:a6:
                    e6:68:7d:d4:4d:b3:6e:6e:e9:3a:9a:ed:fc:c3:68:
                    2d:ea:77:91:ac:78:4b:4f:57:62:a0:2b:13:b8:79:
                    03:49:03:ea:db:c0:2c:11:dd:f1:94:ac:f7:f3:35:
                    62:a0:2a:67:42:c3:df:a2:84:ae:07:5b:36:8f:d1:
                    f5:1b:fc:5b:2c:92:8c:f8:d5:f6:5d:ef:db:40:6b:
                    39:12:ee:76:1f:86:d4:67:84:f1:13:f8:39:16:06:
                    77:83:fc:82:4a:4a:df:c2:7d:24:96:8c:49:05:30:
                    47:c2:25:2b:69:f2:87:dc:ba:2c:71:37:56:d9:2b:
                    5c:d0:3c:e5:5b:11:c3:99:19:21:dc:69:6f:43:cb:
                    42:f7:32:ac:ea:cf:2b:00:dc:36:62:b0:b3:2d:ba:
                    81:ae:99:bc:77:9f:60:76:3e:33:22:8d:c2:da:e9:
                    d4:66:22:ba:03:23:53:d6:22:46:82:66:a2:59:32:
                    55:59:eb:47:3c:63:c9:59:4c:eb:27:64:fb:b6:63:
                    3d:66:42:a8:b4:89:6e:8e:fb:db:8b:cd:eb:9d:73:
                    55:7d:f3:15:68:38:4d:38:31:6e:cf:ff:ec:04:b2:
                    3d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5A:5A:7C:38:1A:D4:6F:36:42:AF:A6:1F:56:A5:CE:CE:55:07:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/ffadb939-b6c6-3c57-bc5d-21bd26b7f4c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.crl

            X509v3 Authority Key Identifier:
                keyid:B4:2C:83:EC:68:8A:F5:F3:27:A8:AB:B7:2B:A5:E1:78:35:A1:2B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.106.80.0/20
                  207.66.80.0/20
                IPv6:
                  2606:3240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ad:f7:c2:9c:b7:a9:52:3b:0a:7b:18:f2:f0:2b:2d:24:3a:
         f2:2d:9c:c2:51:cb:30:b7:c5:df:12:99:0b:99:81:00:e4:a2:
         84:2d:ab:76:1f:a5:8c:b2:2f:22:0b:05:7c:1b:38:a2:16:e7:
         d9:c1:47:e3:cc:09:a4:b8:99:53:de:c6:02:07:9e:6d:bc:72:
         55:b1:b5:32:6d:5b:bf:21:92:a1:ee:55:be:64:9d:b1:60:6a:
         a4:03:a9:28:c4:42:6d:cf:4c:4e:f1:38:2e:6f:de:47:47:ec:
         0f:8b:fd:05:e0:c0:01:23:35:15:96:a4:f1:45:33:c8:a9:c9:
         80:a7:cc:1d:cf:77:49:b4:0f:14:40:07:bc:85:90:06:13:3b:
         43:39:95:36:9e:0d:90:83:73:f3:26:64:b8:23:f8:9e:c8:15:
         63:e9:65:ef:06:67:17:60:ec:80:67:1c:58:c3:cf:50:e4:9f:
         8e:eb:fc:6a:b5:38:84:5a:a7:4f:61:15:74:6c:ad:de:c8:74:
         9b:69:4a:c3:83:4d:ba:11:77:57:39:28:1b:0e:ea:ef:16:80:
         e2:e6:e5:80:29:71:15:d5:00:36:4e:4e:12:ee:63:2b:89:f5:
         d1:2f:22:e9:91:0c:2c:ee:83:14:07:49:01:bd:05:bb:3a:c2:
         86:00:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:16 2026 by rpki-client