Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b669b545-6455-356d-9552-6f650359ccf1.roa
File:                     b669b545-6455-356d-9552-6f650359ccf1.roa (raw, json)
Hash identifier:          Y4qHAaD+NpNficenIQg90kiT2v7ur61kDE//hr5AHh4=
Subject key identifier:   1C:58:08:33:E8:47:6C:10:97:2C:CB:34:FA:63:25:54:67:64:3A:6A
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584D8EF552C71442ECC84D8E0280
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b669b545-6455-356d-9552-6f650359ccf1.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     12189
IP address blocks:        209.51.128.0/24 maxlen: 24
                          209.51.134.0/24 maxlen: 24
                          209.51.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:52:c7:14:42:ec:c8:4d:8e:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=cad7e9d0-35b6-4ce9-bc58-6205bb813d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:ae:6e:79:a7:3e:7e:9f:5b:21:61:e4:36:
                    07:60:3f:bb:6f:07:1b:9c:25:cd:61:d0:35:4b:50:
                    b1:a9:db:27:aa:30:0a:cc:78:cd:89:68:3e:da:e9:
                    aa:f1:ca:96:f5:9c:d9:02:32:34:64:04:3a:dd:60:
                    9d:35:6e:dd:7c:b6:82:58:29:ab:17:72:2d:ab:ed:
                    57:e4:fb:f8:56:54:63:0e:27:2e:76:1e:06:ff:39:
                    08:fb:80:5a:b4:7f:d6:87:49:35:72:e3:c5:5f:d7:
                    91:19:85:b4:f0:16:19:75:a5:09:1e:ef:b9:01:2a:
                    f7:78:26:4d:d9:d6:83:42:cd:7b:72:7c:a1:d5:b6:
                    c0:6d:2a:98:11:8b:0b:ef:82:1f:94:2f:02:6f:60:
                    d6:c4:1c:34:03:55:f3:71:7e:83:26:78:53:b8:13:
                    eb:5d:12:49:2e:0d:2f:2e:7c:04:d5:61:64:9a:1b:
                    40:e6:6a:46:76:69:3f:c9:2e:a4:ae:85:77:e4:65:
                    70:55:07:de:58:e4:b6:38:12:f5:e4:7b:9c:ce:61:
                    58:5e:be:ea:66:db:f6:88:6f:c0:8e:5a:3f:b7:5c:
                    c2:3a:ca:4d:86:ed:0e:41:90:15:a1:27:14:7a:01:
                    1e:7b:17:24:c5:4c:99:d8:32:31:6c:a6:97:9b:31:
                    ac:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:58:08:33:E8:47:6C:10:97:2C:CB:34:FA:63:25:54:67:64:3A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b669b545-6455-356d-9552-6f650359ccf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.128.0/24
                  209.51.134.0/24
                  209.51.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:84:3b:41:84:7d:aa:0b:0f:a5:f0:f4:2d:1c:29:d6:45:da:
         bd:ef:d6:05:c3:fb:c6:42:9f:e6:d5:9f:6d:38:0c:85:5c:c7:
         d4:9f:d5:41:f5:f2:9a:55:2d:b5:a0:d5:87:d8:82:e3:85:52:
         4d:8c:9e:56:8e:aa:17:76:1b:8e:cf:6a:59:78:8e:fa:f4:bb:
         1b:00:b5:a3:fb:d0:72:74:2f:cc:71:85:29:36:01:39:e1:21:
         05:4f:51:06:c3:f9:08:cd:32:4c:63:a0:e9:90:e6:a9:33:bb:
         99:6a:f0:14:bf:a9:15:7a:08:0e:e0:9d:8f:f6:80:da:eb:60:
         10:98:e8:09:b0:d2:bb:52:0c:3f:20:89:b1:8d:b2:e8:a2:bb:
         cc:dc:36:6b:86:72:9e:7d:d8:e6:c6:43:e7:c7:e3:7f:2f:11:
         bf:fb:66:69:ec:b9:ac:7c:d3:27:10:3b:c7:7c:cc:10:6e:73:
         46:28:ce:82:97:1e:72:37:6f:bd:75:5f:a3:19:b2:94:02:a6:
         43:d4:65:56:20:c5:93:c0:e2:d9:8c:d5:4c:54:ed:94:26:88:
         52:b9:47:13:44:2d:15:dd:65:53:56:c2:d3:3f:b7:da:d9:7a:
         a5:a1:70:d9:8f:c9:ce:0e:5d:f6:19:d1:d6:36:2a:41:b5:65:
         b2:9e:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:39:06 2026 by rpki-client