Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa
File:                     6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa (raw, json)
Hash identifier:          zDdx9RgPoazmIQm3GZp5QshzUm8S0EeJsWzHZntijRY=
Subject key identifier:   35:3F:D2:B1:77:4C:EB:D8:FF:8B:6B:9C:4D:6A:F5:8F:39:DF:DB:D6
Certificate issuer:       /CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
Certificate serial:       010D0C9F4328584D3DFFA5E00CF9B8432D0E16C0
Authority key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     53429
IP address blocks:        199.180.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:a5:e0:0c:f9:b8:43:2d:0e:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=b07dbb79-d614-430d-a520-c246a3a68d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5a:bb:24:6d:00:b2:67:1c:47:5b:84:04:4a:
                    84:da:e4:24:0a:c9:58:4b:77:80:e3:9e:97:cc:98:
                    b5:51:0a:13:1c:ef:66:4f:7a:ef:5a:6f:9f:a1:37:
                    66:93:11:08:ac:a6:42:24:77:91:b6:de:74:2d:41:
                    0b:6c:cb:8e:3b:3d:31:4f:84:f2:f5:9a:55:62:d5:
                    7d:a9:51:90:e8:b3:19:72:0f:b3:ab:14:5a:cb:61:
                    12:bd:ae:f9:59:f7:06:18:89:86:4a:0e:e5:7b:1e:
                    e2:6a:0f:ea:42:4c:16:29:09:b8:55:88:ae:30:dd:
                    a5:7e:b9:8f:8d:bb:90:47:6f:b6:74:de:4d:72:d2:
                    a9:1d:e8:1b:2b:5a:23:16:62:15:32:10:db:4e:bb:
                    3d:a7:83:9b:6e:95:83:fd:86:33:e0:55:07:f1:b0:
                    a5:a9:29:58:73:f0:77:2d:8f:00:fa:83:89:72:fe:
                    b4:17:2e:20:14:d9:b6:aa:48:96:53:f0:0a:fa:e2:
                    70:2f:00:15:72:7e:84:7a:fd:b3:0f:43:75:57:5d:
                    59:57:8b:44:69:8f:24:ed:bf:dc:fb:7e:f2:5d:ec:
                    b5:60:73:50:5e:db:5f:03:23:d7:09:79:cd:80:35:
                    73:41:bd:a8:e3:19:d1:4c:91:09:1e:b3:5e:9f:9c:
                    a3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3F:D2:B1:77:4C:EB:D8:FF:8B:6B:9C:4D:6A:F5:8F:39:DF:DB:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/6c1fd14a-e860-399a-a7cf-7f5ce5544531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl

            X509v3 Authority Key Identifier:
                keyid:ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:d7:6c:9b:32:46:f2:b3:86:12:6b:c2:22:fe:35:fd:11:6e:
         72:6a:e3:94:9f:97:45:0b:fc:9f:f2:a6:f1:ad:2b:78:48:46:
         6e:60:01:86:b0:c8:09:f9:5e:0f:dd:d7:e2:9a:e9:9b:00:99:
         77:2a:64:a8:66:4f:89:e8:7c:5e:6a:57:e1:fe:8b:99:97:fd:
         ef:16:20:c1:fd:65:cb:2a:52:0e:17:fa:4f:46:d3:51:30:94:
         6a:27:8b:87:f7:27:17:ea:c2:f5:b5:b4:f2:93:6e:f2:f3:79:
         98:39:b1:ff:8a:0a:c1:f0:23:18:9a:37:e9:80:00:5d:cb:4d:
         32:b9:6c:72:de:9d:d6:12:b4:96:fa:b4:89:15:e0:76:20:e8:
         eb:7f:fe:0a:af:11:e8:d3:3d:6f:bf:68:b1:00:b9:5f:10:86:
         fe:82:8f:95:5b:2a:74:d0:f7:8b:09:d9:bd:a1:20:9a:fb:19:
         d6:2c:a6:b2:f6:8b:67:a5:03:72:4b:3c:ad:90:79:53:ce:50:
         a0:44:c7:36:c6:df:f2:74:5e:09:3d:ee:5b:55:3b:48:68:d0:
         a8:c9:3e:6a:0f:f6:01:77:75:d9:a1:55:ca:f0:60:af:56:95:
         d9:88:12:a0:a4:e9:1c:c7:1f:3e:8c:36:d3:02:c6:a2:93:b4:
         8a:da:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:09:43 2026 by rpki-client