Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b311e3e-074c-43b6-822b-88cce7188d8b/13150f46-1fa5-37df-8e40-aecd7e6d7021.roa
File:                     13150f46-1fa5-37df-8e40-aecd7e6d7021.roa (raw, json)
Hash identifier:          FDhHrVGd40JJ1C8csePZSigPe5P7rfuMQHXuTnaS5uQ=
Subject key identifier:   3B:DE:66:58:E9:0D:17:82:97:6F:08:FC:94:B1:30:71:EA:E6:D6:45
Certificate issuer:       /CN=1b311e3e-074c-43b6-822b-88cce7188d8b
Certificate serial:       010D0C9F4328584DC995B04B505F06683D940800
Authority key identifier: 1B:A7:D2:A0:EF:6D:F1:5F:67:F0:4E:81:81:8D:30:6C:C8:EE:65:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b311e3e-074c-43b6-822b-88cce7188d8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b311e3e-074c-43b6-822b-88cce7188d8b/13150f46-1fa5-37df-8e40-aecd7e6d7021.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     26327
IP address blocks:        104.219.80.0/21 maxlen: 21
                          209.209.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b311e3e-074c-43b6-822b-88cce7188d8b/1b311e3e-074c-43b6-822b-88cce7188d8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b311e3e-074c-43b6-822b-88cce7188d8b/1b311e3e-074c-43b6-822b-88cce7188d8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b311e3e-074c-43b6-822b-88cce7188d8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:b0:4b:50:5f:06:68:3d:94:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b311e3e-074c-43b6-822b-88cce7188d8b
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=8e205346-a596-4fbf-b7c3-fb7809a16ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:fd:b9:3a:25:cc:43:93:04:b5:a5:37:fc:
                    b5:04:be:ee:08:65:59:8e:11:a7:22:7f:14:e4:67:
                    ea:73:37:0f:30:e7:36:8b:2d:49:a0:c2:c3:45:8b:
                    8d:9f:9c:21:c6:df:64:c0:85:a1:65:9e:97:11:1d:
                    b5:1d:66:1c:54:7a:0e:61:6b:c3:8a:d1:94:a2:4a:
                    e7:a2:50:ae:96:79:55:ce:a0:80:91:36:9e:55:64:
                    98:f0:52:b3:35:7e:25:3a:7c:59:88:1d:e6:4a:62:
                    cb:bb:69:5b:26:55:9a:9c:64:ed:e3:15:d0:ca:06:
                    83:22:84:40:4c:57:79:d7:98:f5:48:c0:a9:0d:fb:
                    d6:49:a1:9f:67:07:77:30:6e:a2:31:bf:1f:ee:b7:
                    e1:31:78:3f:26:81:28:e7:5c:b3:08:c9:09:f7:7e:
                    50:66:2a:d3:e2:60:ed:7e:9a:78:da:4d:17:ce:e7:
                    e4:1c:63:e7:a5:84:71:fa:78:7f:dd:92:8a:8a:f0:
                    49:a9:ff:89:45:83:46:79:d9:89:37:50:20:5c:b7:
                    e8:ed:99:90:fd:bb:02:41:58:56:14:15:7c:eb:22:
                    93:e3:24:93:00:d4:e6:2c:e5:ae:ff:c7:e4:3e:4a:
                    32:af:91:db:1d:aa:69:bc:2b:e2:dc:e6:91:48:11:
                    7d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DE:66:58:E9:0D:17:82:97:6F:08:FC:94:B1:30:71:EA:E6:D6:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b311e3e-074c-43b6-822b-88cce7188d8b/13150f46-1fa5-37df-8e40-aecd7e6d7021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b311e3e-074c-43b6-822b-88cce7188d8b/1b311e3e-074c-43b6-822b-88cce7188d8b.crl

            X509v3 Authority Key Identifier:
                keyid:1B:A7:D2:A0:EF:6D:F1:5F:67:F0:4E:81:81:8D:30:6C:C8:EE:65:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b311e3e-074c-43b6-822b-88cce7188d8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.80.0/21
                  209.209.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:58:1e:97:db:a8:2c:6c:05:ee:81:20:d7:a8:fc:da:42:1b:
         a7:b6:97:3b:76:61:89:01:40:4f:16:13:8b:53:65:23:2a:8b:
         07:ab:a8:0e:b4:18:ae:9d:4a:61:d6:c0:17:95:ed:d0:e4:50:
         0e:c0:2f:f4:7f:d8:41:5c:0f:a7:76:aa:57:3f:e8:41:05:8d:
         04:ec:5b:be:c9:bf:3f:67:4e:8f:4c:87:df:f5:7c:81:c6:b3:
         ec:13:00:89:2b:55:d4:3e:db:ef:78:35:e2:7f:2c:a8:71:85:
         a3:ee:4f:03:12:38:a9:9b:1d:ff:01:fe:2a:e7:86:69:87:33:
         59:aa:2d:c9:ef:8b:fd:66:3f:81:9f:12:08:65:33:24:fa:6a:
         1b:e7:46:b1:9a:43:57:f0:08:09:85:aa:34:bc:58:88:a5:9d:
         87:3a:06:bd:df:d8:52:34:19:24:c6:fa:45:bc:63:cc:2f:e5:
         41:ca:24:20:31:bf:b0:07:b1:75:4d:0b:9d:74:a5:a1:0b:c6:
         6c:51:70:81:65:91:e2:4a:76:4c:ac:48:43:5c:a2:cc:c1:ff:
         c1:fc:2b:ed:71:7e:3a:0d:17:0c:52:4d:f7:4d:61:0a:a5:a4:
         f5:7b:b0:c4:ca:e2:2a:29:db:26:3d:f0:65:68:5c:69:01:29:
         9c:09:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:10 2026 by rpki-client