Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/9ba52e2b-162c-30b7-85e3-d3e25718e98e.roa
File:                     9ba52e2b-162c-30b7-85e3-d3e25718e98e.roa (raw, json)
Hash identifier:          g+JMS66x20foMq1ouhOTOs4os3BRlK0kwnA896L/x0c=
Subject key identifier:   2B:7C:C8:3E:68:0B:90:B4:F8:73:27:7E:4C:2C:2F:9D:BE:8F:FE:1F
Certificate issuer:       /CN=55452ee1-697d-484d-b971-7a8c75820ecc
Certificate serial:       010D0C9F4328584E66DA1A8BE78792E7C7A61280
Authority key identifier: B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/9ba52e2b-162c-30b7-85e3-d3e25718e98e.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     32391
IP address blocks:        69.49.208.0/20 maxlen: 24
                          74.120.128.0/21 maxlen: 24
                          130.51.0.0/22 maxlen: 24
                          2604:7100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:1a:8b:e7:87:92:e7:c7:a6:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55452ee1-697d-484d-b971-7a8c75820ecc
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=97365932-5135-42f3-9b33-2967e4756640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:ce:12:55:90:85:45:9d:de:26:2d:22:6f:
                    57:df:25:b1:68:40:bd:c6:cc:6c:44:49:53:c0:e4:
                    ea:27:28:2a:92:ae:05:cc:4d:12:da:09:56:40:b7:
                    d6:5a:a0:d8:1a:16:68:04:b4:10:9d:7e:51:7b:11:
                    f6:db:67:83:e2:6e:6a:ca:59:10:10:a6:13:a7:d3:
                    16:08:12:60:03:b1:c9:b9:cf:77:ac:ea:f6:44:4b:
                    ff:ca:a6:6a:57:45:69:2e:6a:d4:a9:7d:9b:1c:e7:
                    6b:5b:e0:b7:1b:ea:4c:2c:d2:b4:2c:06:cd:a5:e8:
                    89:7b:31:29:22:04:c2:83:0f:44:aa:25:9d:56:70:
                    11:c3:ea:02:39:00:89:3b:92:99:af:ad:2c:2b:f3:
                    b3:f2:65:46:8f:0a:20:33:3c:31:4e:8d:9d:d2:22:
                    4e:00:fd:ef:32:5c:67:8b:36:0e:fd:32:66:dc:15:
                    21:a9:ab:83:9e:cd:56:7d:60:39:f8:65:7c:02:64:
                    d5:ec:22:42:d0:d8:28:a8:5b:40:38:9b:cc:cf:52:
                    d5:af:d5:44:e6:ad:47:24:b5:8f:0a:33:90:c5:18:
                    f9:5d:af:32:90:ba:e4:1b:9c:3f:14:17:be:95:a0:
                    3e:7f:71:e8:eb:cd:57:51:27:e2:d1:59:41:a9:de:
                    d6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7C:C8:3E:68:0B:90:B4:F8:73:27:7E:4C:2C:2F:9D:BE:8F:FE:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/9ba52e2b-162c-30b7-85e3-d3e25718e98e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.crl

            X509v3 Authority Key Identifier:
                keyid:B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.49.208.0/20
                  74.120.128.0/21
                  130.51.0.0/22
                IPv6:
                  2604:7100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:57:16:cf:c6:06:7e:ee:1b:73:78:55:c8:86:35:05:2c:
         07:da:81:8e:bf:4f:36:9f:af:20:26:92:6d:38:31:41:9b:fc:
         19:27:08:51:dd:32:e4:8c:ff:3e:ea:70:1e:dc:e9:e3:e3:c9:
         13:9b:14:bc:c5:4a:16:ac:22:57:ff:09:f6:e3:18:be:99:0e:
         f1:2e:98:9a:a0:de:ca:78:83:50:36:50:0b:d9:1c:a6:ca:ca:
         1c:49:59:61:d3:df:fb:8f:f1:33:fc:7c:55:6b:2e:59:67:d6:
         9a:09:f4:3b:aa:92:19:a1:22:52:30:1c:77:6d:b6:88:60:1e:
         5a:41:56:21:91:78:5e:15:66:ae:5c:ee:c1:0b:ef:76:b9:0b:
         06:12:a4:ad:9d:97:30:d7:97:80:f2:a9:1e:6d:27:c2:0f:9b:
         0b:3b:3e:45:be:c0:04:f5:78:01:4d:0f:4d:b3:0c:f8:ac:f7:
         a3:69:75:2a:e1:a0:88:6a:ba:6b:ed:aa:af:37:f6:e2:4d:84:
         15:01:29:d9:69:2b:3f:77:10:b1:41:8e:65:eb:3b:0a:78:df:
         d8:8e:5a:60:34:c4:a4:8d:d1:8a:26:b4:1a:5e:b2:dd:25:65:
         56:05:8c:e9:dd:d5:a5:f6:01:c5:c6:c1:9a:90:b2:c9:47:c5:
         a8:5b:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:12:11 2026 by rpki-client