Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
File:                     ec968a43-a3bc-35cd-9cae-298d0643c351.roa (raw, json)
Hash identifier:          uL56zEoQjeXC4/QH0IAex/FrpE+vawdT5IdB8/a/xlE=
Subject key identifier:   24:C4:4E:92:7C:7A:1E:42:7F:AC:35:80:37:66:83:AD:B4:95:C9:DE
Certificate issuer:       /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
Certificate serial:       010D0C9F4328584E4AEF4D4C03283A1192E11F70
Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     21693
IP address blocks:        170.152.0.0/16 maxlen: 24
                          192.234.136.0/24 maxlen: 24
                          192.234.137.0/24 maxlen: 24
                          192.234.138.0/24 maxlen: 24
                          192.234.139.0/24 maxlen: 24
                          192.234.140.0/24 maxlen: 24
                          198.179.151.0/24 maxlen: 24
                          198.179.152.0/24 maxlen: 24
                          198.179.153.0/24 maxlen: 24
                          198.179.154.0/24 maxlen: 24
                          198.179.155.0/24 maxlen: 24
                          198.179.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4d:4c:03:28:3a:11:92:e1:1f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=7bdec131-18e0-4e19-8337-7e419b0b290c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:c7:f7:83:a6:c2:9f:d0:28:73:05:f1:e5:
                    95:2b:7a:71:db:06:7f:1f:84:f9:f4:c1:98:93:65:
                    8b:64:cc:8c:ef:19:5d:53:d5:21:f2:49:13:be:4f:
                    9c:c9:32:cc:c8:15:86:e5:07:54:d7:48:1f:71:a2:
                    3d:fd:2b:d3:fc:a4:2e:68:ba:6c:a4:f7:2d:b8:f4:
                    c1:d0:67:20:ef:63:a6:d2:34:22:f3:99:24:5e:48:
                    99:d7:c0:76:a3:66:07:49:ac:8f:fa:3a:6e:36:8a:
                    f2:c8:4f:c9:6e:87:88:7c:8a:ac:55:48:f5:a1:55:
                    54:10:92:21:46:ab:c7:bf:98:e1:f9:89:3e:62:c5:
                    6c:7b:d3:5c:e0:3a:cd:5c:f4:73:14:c1:4a:cd:e9:
                    41:1e:94:6c:82:24:2a:37:7f:78:dc:9b:e2:8a:01:
                    20:c5:1e:75:24:63:da:cc:34:e9:92:a0:94:5a:40:
                    e3:cf:8c:f1:71:da:b5:7f:3e:88:e0:46:03:46:20:
                    f1:ba:41:77:d9:92:3e:2a:05:a5:c4:4a:b0:15:da:
                    19:e1:63:9b:46:8b:ca:5c:d1:4a:93:4b:ad:61:e0:
                    1d:50:bd:ee:91:a2:32:79:a0:61:f1:6c:57:b1:36:
                    4e:fd:f8:1c:c0:54:68:1a:c3:d5:34:90:ae:01:3e:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C4:4E:92:7C:7A:1E:42:7F:AC:35:80:37:66:83:AD:B4:95:C9:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl

            X509v3 Authority Key Identifier:
                keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.152.0.0/16
                  192.234.136.0-192.234.140.255
                  198.179.151.0-198.179.156.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:0c:fc:54:a6:65:be:70:07:c7:fa:7b:0c:9f:56:83:42:e8:
         79:a0:a9:c9:ac:a2:63:ae:64:06:e5:f6:d4:3a:51:a4:e5:cc:
         9f:a8:0a:2b:b3:89:c8:1f:e5:64:9e:39:15:39:59:c0:07:cc:
         a2:31:6d:a7:92:4a:57:f2:9c:ce:c0:04:08:26:33:9f:a3:a6:
         75:7a:da:8e:1e:67:3c:19:59:64:95:cb:90:28:41:eb:fd:1c:
         68:49:01:c4:41:61:2e:ca:9f:76:84:55:90:f8:f3:cf:6f:96:
         58:69:1e:44:fd:2a:9a:9b:d3:28:e5:86:0a:bb:51:35:c8:ec:
         df:c5:8c:6c:ba:ef:e2:24:5b:71:1d:ac:65:ef:86:ba:5d:df:
         97:41:f5:51:f7:35:af:7e:6b:74:26:b6:c6:fa:7a:07:27:13:
         68:b4:8e:ba:ef:88:15:7a:1f:c6:90:29:f7:f7:e2:55:af:26:
         74:1b:7d:7d:a6:3c:0e:5c:10:0f:b0:23:ae:c2:21:4c:55:59:
         eb:ef:7a:c8:93:7a:ee:37:bb:db:03:29:35:f8:8f:43:09:cd:
         84:20:5f:07:e8:9b:a3:00:37:02:43:6c:c3:83:f3:67:c0:44:
         75:cc:8c:8f:4b:be:8c:c3:bd:63:2c:72:b5:ea:83:8b:57:5d:
         96:74:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:21 2026 by rpki-client