Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/06819075-300b-33ec-ba63-9e81b352b7e1.roa
File:                     06819075-300b-33ec-ba63-9e81b352b7e1.roa (raw, json)
Hash identifier:          bqIyfs7zWg4NCUd1sPRYZYE0m2YJsxCMVcWGMtkcXC4=
Subject key identifier:   62:EE:CB:7E:DF:29:9C:7D:E3:16:50:3A:B5:E6:05:60:81:BB:9D:7B
Certificate issuer:       /CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
Certificate serial:       010D0C9F4328584D3DFFB1C732C24C8F1B858B80
Authority key identifier: A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/06819075-300b-33ec-ba63-9e81b352b7e1.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     26548
IP address blocks:        169.197.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:b1:c7:32:c2:4c:8f:1b:85:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=4780b3d2-c607-4d0c-8779-71eb2dda6b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:46:8d:fb:88:da:35:a5:93:f9:c0:3b:c2:
                    4b:59:1b:fb:ac:06:c8:8e:5d:96:6f:b0:7c:cd:ef:
                    4e:b7:e3:af:c6:22:fc:4a:e9:68:68:28:45:59:47:
                    7d:b6:33:04:82:59:4c:e6:88:30:00:59:d5:5a:fa:
                    8c:c6:ec:ab:28:ab:23:24:54:a4:36:85:c9:9a:77:
                    04:d4:e4:ec:d1:22:27:ec:27:4b:fb:a1:d5:bb:72:
                    ca:ab:58:40:03:52:95:0e:c5:d1:cb:ec:90:85:6b:
                    f6:91:8e:4d:ea:83:62:67:51:5f:4f:53:06:36:d2:
                    62:55:12:d7:23:82:46:0b:bf:ad:f9:48:4c:03:e9:
                    86:24:09:52:14:88:0d:f6:24:2d:5f:1f:e6:2e:9b:
                    51:f2:0e:a5:0a:38:59:f7:78:ba:26:56:0a:58:50:
                    31:18:bb:0a:b7:8b:ef:dd:2c:bf:d5:31:dd:c1:7b:
                    1c:18:f6:b0:b0:b8:be:db:d0:fd:97:1b:65:bf:a0:
                    2e:8f:be:06:0f:9e:87:87:f6:82:e1:22:a7:68:fc:
                    71:a3:57:36:e7:21:49:3c:da:6d:71:42:d0:96:fa:
                    91:22:3a:a8:c5:e7:0b:a3:f3:e3:f0:c4:57:98:8f:
                    b7:a6:f4:cf:f3:09:c4:59:c1:26:b8:47:b8:03:e8:
                    50:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EE:CB:7E:DF:29:9C:7D:E3:16:50:3A:B5:E6:05:60:81:BB:9D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/06819075-300b-33ec-ba63-9e81b352b7e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f4:3d:d9:f3:98:2c:f2:c6:06:52:f7:45:0d:0f:99:dd:6f:
         12:2d:69:ed:7e:24:88:57:ab:ea:04:43:90:e3:11:91:f3:b7:
         df:63:f4:64:a7:e1:74:36:06:58:52:1a:78:95:ab:80:55:ec:
         51:5e:08:d1:5d:0a:dd:e3:c5:57:12:62:2e:7b:3d:73:57:5e:
         43:c1:b2:f8:e6:92:a5:be:70:6a:65:9a:6a:75:27:26:d1:22:
         88:9f:4c:03:91:2b:fc:a8:74:ad:c8:9b:a8:c5:dd:96:88:d2:
         be:5c:2a:32:eb:d4:34:d2:b9:f2:b9:1e:67:cf:5d:46:fb:85:
         96:f0:d9:9d:1b:4d:7a:96:2e:54:cd:4f:87:81:37:e9:a4:7a:
         6e:3c:df:8e:e4:4f:aa:fa:34:cb:02:f4:70:7b:0d:1f:fa:1b:
         08:fa:f5:3e:2b:44:78:53:a4:48:eb:d9:45:67:2d:23:3e:c2:
         ee:73:48:33:d7:68:0d:d2:0b:76:70:0d:e3:29:67:52:c4:2a:
         65:b2:b8:58:ea:16:8b:ad:cf:62:36:0c:f2:1b:32:c7:35:6a:
         51:a4:fe:72:17:9d:a7:1c:df:81:d3:27:e7:5a:80:70:6a:27:
         94:d9:74:33:0d:a7:10:7a:77:02:de:b0:f3:e0:81:09:ef:05:
         40:ca:31:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:46 2026 by rpki-client