Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/63de5df0-f8c5-3385-81c4-471e716b2463.roa
File:                     63de5df0-f8c5-3385-81c4-471e716b2463.roa (raw, json)
Hash identifier:          hujISx1YiyGm2LuKuWZUEYVY3pOoekWh1KijHSncOCE=
Subject key identifier:   82:93:34:27:4F:EE:4F:65:06:43:0A:AF:A7:22:74:DA:20:2A:3E:C6
Certificate issuer:       /CN=67961c8b-389c-46be-9541-ceac7d38b9aa
Certificate serial:       010D0C9F4328584DB9CEE7F064CBB37C40290B80
Authority key identifier: 29:47:94:6D:C7:BB:C3:F4:20:E5:58:2D:8F:5A:CD:37:DC:14:BB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/63de5df0-f8c5-3385-81c4-471e716b2463.roa
Signing time:             Mon 04 May 2026 21:23:01 +0000
ROA not before:           Mon 04 May 2026 21:23:01 +0000
ROA not after:            Sun 02 Aug 2026 21:23:01 +0000
asID:                     46455
IP address blocks:        159.117.48.0/20 maxlen: 24
                          204.80.112.0/20 maxlen: 24
                          216.243.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b9:ce:e7:f0:64:cb:b3:7c:40:29:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67961c8b-389c-46be-9541-ceac7d38b9aa
        Validity
            Not Before: May  4 21:23:01 2026 GMT
            Not After : Aug  2 21:23:01 2026 GMT
        Subject: CN=c3acb2e4-092f-407f-957b-d816bc8db2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:95:b4:3a:3f:e4:fa:d8:fa:e2:b2:21:8b:52:
                    c0:f1:85:bb:2a:d7:6c:5d:dd:31:35:d6:91:36:0a:
                    68:21:39:76:57:ef:28:c6:96:74:5f:b3:e4:64:e0:
                    f7:8f:eb:a7:01:07:16:d8:1a:39:3b:15:ed:cd:1f:
                    a9:0f:92:97:56:02:83:98:f1:fe:98:3c:2e:9e:02:
                    1b:f8:53:1b:37:69:01:0b:ca:97:25:82:67:57:50:
                    e0:86:ca:6c:e8:e1:70:63:bf:c9:d6:53:4d:63:07:
                    fc:c5:72:d5:74:d7:d6:fc:81:47:b7:e7:d6:be:f2:
                    91:d1:c1:86:98:49:b1:1c:2f:79:8a:46:c4:a5:30:
                    16:27:51:e8:70:d4:67:21:a9:7d:6e:fc:f5:0b:b6:
                    7f:58:2f:c4:96:6a:69:a8:0f:9e:6b:a2:c4:69:94:
                    44:24:af:b3:cc:b9:14:68:84:cb:05:2d:21:1a:9a:
                    f3:c2:0d:a9:95:80:19:31:bc:03:06:f2:7f:47:16:
                    69:d6:dc:52:ef:ae:82:00:8a:8e:f9:8d:a5:51:28:
                    be:8e:99:8c:11:3f:f5:46:64:71:a3:fe:f2:a1:8d:
                    03:46:82:de:c5:72:2e:14:b3:fe:f5:1e:6f:6f:a4:
                    e9:01:c2:4d:88:f0:e3:a0:a4:19:bd:94:86:6d:7b:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:93:34:27:4F:EE:4F:65:06:43:0A:AF:A7:22:74:DA:20:2A:3E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/63de5df0-f8c5-3385-81c4-471e716b2463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.crl

            X509v3 Authority Key Identifier:
                keyid:29:47:94:6D:C7:BB:C3:F4:20:E5:58:2D:8F:5A:CD:37:DC:14:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.117.48.0/20
                  204.80.112.0/20
                  216.243.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:00:ac:58:c4:7a:09:15:2a:46:6e:10:dd:88:cb:52:f1:
         ef:9d:4f:d6:62:19:a2:9d:83:32:98:17:d9:99:33:be:ac:58:
         2f:b2:47:c2:86:1f:64:bc:7f:a4:90:72:55:2b:f1:df:1a:9e:
         67:32:fb:f5:d6:0c:ad:53:0c:4f:f9:ff:25:1b:46:ed:14:9f:
         f0:40:9e:73:f5:f5:ad:cb:2e:db:46:90:fe:96:2f:bb:e7:bf:
         09:e4:74:9c:a8:67:35:6c:dd:c9:67:d0:31:0e:07:fa:5a:47:
         88:08:ea:17:16:cc:ab:7f:0b:8d:9b:6f:3f:4b:27:52:b9:8a:
         bf:5c:35:23:24:49:2e:54:ee:81:d8:9e:14:3b:a2:09:5b:f3:
         2e:80:bd:00:f0:72:94:40:35:51:09:05:6c:d7:98:86:c0:bd:
         71:2a:34:e4:c8:65:ca:9d:60:53:3a:b3:63:4a:e3:f2:c5:e2:
         15:29:d5:cd:b2:3a:21:1b:40:76:c6:63:b7:e4:d9:d9:47:2f:
         36:c6:6d:fc:0d:3c:76:3b:f7:eb:a4:4b:7e:c9:32:ad:b2:66:
         a0:29:52:2f:50:54:03:2c:71:59:f3:fd:50:95:8b:94:40:20:
         49:dd:fe:39:15:94:c2:19:09:66:dc:d9:b1:eb:35:97:7a:1c:
         08:a8:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:46 2026 by rpki-client