Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa
File:                     f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa (raw, json)
Hash identifier:          UqSsWgs8+qtZ9QNYIeu18u2sUtiugj3+GaeE/qnGIw4=
Subject key identifier:   4D:57:B8:DB:04:79:68:9B:C2:A1:9B:F3:01:83:C5:29:2E:E1:04:22
Certificate issuer:       /CN=39fdcce5-d149-4129-97c3-c60e86600fb8
Certificate serial:       010D0C9F4328584DBBA04CF46F53FB431B113340
Authority key identifier: 8F:0B:2C:52:90:1D:CB:1B:44:B4:FB:46:01:71:70:9C:29:22:8B:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     15121
IP address blocks:        66.102.144.0/20 maxlen: 24
                          198.105.28.0/22 maxlen: 24
                          2604:a780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:4c:f4:6f:53:fb:43:1b:11:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fdcce5-d149-4129-97c3-c60e86600fb8
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=28e31427-03c5-42a1-b0c8-2e33c1eff936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:74:55:de:72:34:31:79:e1:e4:bd:49:7e:
                    44:1a:89:43:77:3a:16:83:59:e6:ed:60:f4:29:fa:
                    ad:3e:94:63:12:ba:10:02:35:33:e6:28:d1:19:75:
                    6d:43:75:d2:40:5c:8a:27:05:66:fd:d5:d1:d3:13:
                    21:32:8c:0c:40:da:32:a0:d0:a6:b3:cb:03:70:c6:
                    25:60:2c:a1:bf:86:6e:a0:64:59:f4:d2:94:f9:49:
                    de:e9:0d:b4:da:4d:b1:d2:99:38:df:5b:1a:5d:15:
                    2c:95:53:aa:e6:a5:5c:58:e8:39:a9:f7:9c:d0:05:
                    21:1e:dc:01:5f:7a:80:b9:da:2d:d8:72:04:df:4f:
                    f0:59:f1:8a:d8:24:27:80:20:ad:c8:9b:fc:a9:f2:
                    8f:97:57:f3:ba:3e:7b:5c:d4:9f:5f:39:b1:41:12:
                    a7:37:9e:f2:25:01:2a:46:63:a7:70:0f:86:b4:45:
                    b1:8b:47:11:e9:02:87:47:c3:bc:71:04:c6:92:fe:
                    42:48:57:5a:6c:aa:24:b1:31:7f:f4:4e:20:0c:90:
                    fc:62:30:82:be:f7:0e:18:4a:f4:e2:96:20:f9:32:
                    d7:e0:35:b4:bf:b9:aa:72:32:2c:1a:6f:21:ce:5d:
                    0d:17:34:58:7c:5d:fd:82:c5:2e:20:a1:b8:9e:c2:
                    42:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:57:B8:DB:04:79:68:9B:C2:A1:9B:F3:01:83:C5:29:2E:E1:04:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/f99b3c43-4b33-30fb-80aa-989f3e39ae49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8/39fdcce5-d149-4129-97c3-c60e86600fb8.crl

            X509v3 Authority Key Identifier:
                keyid:8F:0B:2C:52:90:1D:CB:1B:44:B4:FB:46:01:71:70:9C:29:22:8B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39fdcce5-d149-4129-97c3-c60e86600fb8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.144.0/20
                  198.105.28.0/22
                IPv6:
                  2604:a780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:32:1f:01:67:7b:54:66:e2:9f:b6:85:92:f3:8d:5a:0d:69:
         2c:94:13:5e:ef:31:bb:6d:ad:ba:8e:8d:95:81:44:bd:92:e4:
         c7:e9:01:eb:90:f1:75:43:a2:fc:e2:09:0b:f0:d7:17:4e:03:
         c0:11:43:4a:ee:3b:51:44:90:78:d8:fb:08:d2:c9:dd:b4:ec:
         15:ea:08:6c:65:d0:8b:b1:21:ae:ad:15:84:1e:74:36:ef:b0:
         48:25:dc:b0:a9:ae:5d:a3:d4:0a:3b:8c:1e:26:98:bd:88:8a:
         54:b1:13:73:6b:77:39:98:ef:6b:ad:30:c8:13:64:74:35:c8:
         37:9c:1f:78:20:93:71:d4:8c:87:c4:7b:43:f4:e9:b5:8b:5a:
         16:83:da:80:69:3e:60:a5:2c:16:4d:4e:c1:06:bb:0c:04:50:
         81:f8:ac:33:b6:85:83:cf:b5:31:fd:d3:d4:03:21:21:e0:4c:
         90:09:48:b0:ce:f9:35:d8:d7:a0:1d:cc:e9:d8:f2:71:55:70:
         bd:c9:f3:05:2d:9f:c5:fe:f8:5c:12:c9:54:21:89:a5:af:5b:
         d8:cd:25:c4:c9:78:f2:5d:75:6f:88:9c:99:26:3f:27:76:fd:
         fa:1b:33:dc:b1:4e:6d:92:c5:59:4a:2b:84:e8:39:49:15:81:
         c5:aa:a6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:09 2026 by rpki-client