Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/1b4dff2a-63c9-30f6-b23a-1cdd4e1f4f26.roa
File:                     1b4dff2a-63c9-30f6-b23a-1cdd4e1f4f26.roa (raw, json)
Hash identifier:          G6lTZ6c6S9f3HfzlfQ6wQWo++Netr4+guGfvV/QGuwM=
Subject key identifier:   85:6B:2D:03:3A:D8:5F:F2:FA:AD:E4:19:17:A7:40:33:A0:2C:9C:D2
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F4328584D2A74DF3BB6BB3D390402C080
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/1b4dff2a-63c9-30f6-b23a-1cdd4e1f4f26.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     6994
IP address blocks:        204.153.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:df:3b:b6:bb:3d:39:04:02:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=6f976406-d510-4311-98c9-150c1a309d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5f:77:92:9b:0f:a4:ba:ed:34:d4:57:ec:87:
                    3b:af:e8:55:39:7e:1b:66:e4:ef:58:1e:fd:19:99:
                    c9:da:86:f3:71:d6:65:98:6d:ab:d7:b7:e5:71:37:
                    46:bc:f3:fa:9a:e8:2d:f5:20:31:24:6d:7c:64:7c:
                    21:22:58:37:05:38:0a:4f:5f:31:61:25:cf:26:57:
                    6f:cf:16:0d:ec:a7:f0:94:0b:33:40:da:a9:15:04:
                    97:fc:d2:57:17:79:f5:b2:3c:ca:52:74:48:01:fb:
                    13:a1:57:b3:4a:0a:74:64:17:3d:b4:77:2c:28:d4:
                    d0:48:1b:eb:a5:b5:ff:5a:79:e2:d8:e7:e4:51:2c:
                    79:20:3e:21:f6:8f:0f:10:99:9b:d8:5a:fd:53:c9:
                    41:19:a6:e4:35:aa:dc:77:91:8e:7c:99:05:53:23:
                    69:48:b8:0f:bf:15:5d:33:54:76:2b:16:42:d3:f5:
                    41:e0:48:9b:c5:72:8e:c3:7a:68:fe:9b:f1:0f:ec:
                    aa:11:50:81:92:52:b9:af:49:9d:2a:7b:af:b0:2b:
                    ce:56:a8:5f:53:2a:6d:86:d9:a3:d3:db:9b:02:c6:
                    21:5f:cc:8b:94:a6:f8:e1:be:19:54:1d:03:ee:0d:
                    8f:b6:9e:3c:0f:2c:53:74:0e:5b:19:c0:38:6d:17:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6B:2D:03:3A:D8:5F:F2:FA:AD:E4:19:17:A7:40:33:A0:2C:9C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/1b4dff2a-63c9-30f6-b23a-1cdd4e1f4f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a6:51:47:64:07:3b:b1:60:4b:fb:af:60:7a:02:b9:8b:7f:
         e8:40:14:83:e9:83:15:05:c8:c2:f4:c6:27:49:e9:1b:9b:7d:
         b1:14:6e:63:84:7a:f6:f8:7f:3f:50:12:6c:be:71:a0:8f:a9:
         1e:0d:87:b8:20:e8:b7:1f:f6:68:c0:ca:26:99:50:4d:62:b0:
         5b:d5:01:bf:fe:9f:22:5d:ca:f1:93:96:1b:49:82:66:57:7d:
         dd:b8:b1:9d:95:72:d7:d2:3a:d1:0c:ed:15:e7:1f:a7:a4:2e:
         a6:cd:e8:46:d4:b9:d8:d2:56:ee:11:e8:47:81:c5:b8:5d:90:
         bb:ae:93:73:95:99:a9:55:42:36:77:b6:59:6a:f1:15:25:dd:
         01:1a:9a:07:a2:82:7d:2b:97:7d:40:ff:51:4e:5e:8f:4a:a6:
         0c:57:af:e5:b2:f0:75:c0:00:45:21:96:9e:a5:31:06:ad:ae:
         5d:29:89:88:71:06:86:64:9f:4b:5d:23:dc:25:00:7b:4c:7b:
         f6:95:38:c9:82:2d:27:ec:6b:fa:32:a4:f4:64:a7:08:a6:c8:
         fb:86:d9:83:d1:8b:66:d7:03:c4:19:d5:58:4d:d1:b1:ec:4e:
         ee:b1:dd:12:d3:d1:4d:69:5e:17:63:1d:ba:f7:c7:22:36:f8:
         c7:ad:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:24 2026 by rpki-client