Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ef6a8651-0491-3fd6-9da0-31d7e19cba42.roa
File:                     ef6a8651-0491-3fd6-9da0-31d7e19cba42.roa (raw, json)
Hash identifier:          OgFmXH/2nMI9kcK7fFq9Ma1Pu9tCxa/NYs7tsZXmhR4=
Subject key identifier:   7E:FE:C2:45:93:0F:6A:28:46:DD:9A:22:E6:F6:F7:EE:77:F5:10:0F
Certificate issuer:       /CN=ce6a531d-4e38-485d-9236-07a5daf2b689
Certificate serial:       010D0C9F4328584DCC606332FF1BB2265EDF0E80
Authority key identifier: D3:70:F0:32:C2:57:29:75:8C:88:0C:74:C6:54:99:05:AF:ED:13:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ef6a8651-0491-3fd6-9da0-31d7e19cba42.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        192.34.32.0/23 maxlen: 24
                          2620:11b:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:63:32:ff:1b:b2:26:5e:df:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce6a531d-4e38-485d-9236-07a5daf2b689
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=b608367c-3074-4f7d-ae0a-50631208e37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:8c:f9:73:ac:a5:db:55:7c:8d:38:83:95:
                    28:ed:76:89:03:ec:2c:ca:8a:ae:57:b6:5b:ce:5a:
                    5d:b1:12:e1:87:8a:c7:e5:fb:e9:c0:f9:34:dc:8a:
                    bb:f4:49:41:7e:82:99:9f:c1:e9:03:33:09:26:f7:
                    09:e2:3a:ed:31:93:9b:c4:15:e3:98:c7:4a:2e:7e:
                    2a:8b:98:f0:9c:23:16:1b:54:7d:03:dc:a8:10:9a:
                    06:0c:9e:47:32:eb:db:9f:6a:c0:56:e3:9b:21:bc:
                    a9:f8:65:99:32:30:e4:2d:71:dd:36:6c:1c:37:16:
                    95:40:ee:49:4d:a3:a5:fd:82:0d:bc:1a:4a:ee:96:
                    2c:6c:43:50:0e:6c:7a:85:1b:b2:47:b4:ca:8a:70:
                    57:e4:3a:56:cb:a5:3b:63:3c:20:3f:95:5d:2f:b7:
                    86:9c:68:50:f5:43:51:ed:98:fe:26:fc:0f:31:49:
                    2c:55:50:31:aa:1c:43:bd:00:f4:38:aa:42:3c:a0:
                    de:56:59:12:0b:25:02:5c:44:41:83:ce:f4:9b:16:
                    d5:ef:a0:d5:35:a5:9f:b7:04:ef:e4:dc:54:e3:eb:
                    f1:5b:cb:27:77:35:52:28:93:c9:04:6c:c4:54:f6:
                    cc:76:8f:27:06:27:d9:e9:6b:17:97:e2:c5:1a:c8:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FE:C2:45:93:0F:6A:28:46:DD:9A:22:E6:F6:F7:EE:77:F5:10:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ef6a8651-0491-3fd6-9da0-31d7e19cba42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.crl

            X509v3 Authority Key Identifier:
                keyid:D3:70:F0:32:C2:57:29:75:8C:88:0C:74:C6:54:99:05:AF:ED:13:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.32.0/23
                IPv6:
                  2620:11b:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:bf:df:3b:04:17:13:ff:a8:ab:d8:54:64:30:51:fc:83:c3:
         f4:2b:f7:52:74:50:7f:00:9c:04:c2:2e:c4:9f:b7:0d:b5:2d:
         c5:90:60:92:47:46:f4:49:2b:2c:45:a6:75:93:2c:5c:9c:0c:
         e2:95:57:ca:20:0e:f3:76:44:f9:28:d1:26:39:ef:e5:9d:6c:
         3f:ab:79:d8:0d:7c:53:b1:95:6f:b8:e5:13:49:94:83:60:6a:
         28:b9:ce:12:60:17:07:cb:6a:6b:4c:96:7c:1a:e2:60:59:ee:
         b3:51:ac:96:61:b1:02:57:d1:52:ba:b2:32:e1:e0:72:91:ed:
         16:06:19:e3:e8:f8:87:d1:3f:07:76:06:00:53:1b:b7:04:60:
         9f:54:40:3a:bc:8f:2a:c7:5d:0c:b5:0e:a8:25:22:a9:80:43:
         03:5e:08:02:65:46:d5:58:42:66:a0:8b:7d:91:8e:5a:9c:50:
         5b:d9:32:15:12:f9:a7:15:f2:13:2a:3e:cd:59:c5:e6:ac:3e:
         c0:88:29:fd:ee:b0:45:e3:f9:10:52:f0:0a:10:e3:5b:de:b9:
         68:4c:03:45:13:93:ae:c7:5f:5c:10:6b:db:00:53:85:ce:7a:
         89:53:d3:63:64:57:a7:5b:e2:b7:d3:fd:c4:f6:3e:4a:71:8f:
         66:c3:38:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:13:00 2026 by rpki-client