Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa
File:                     f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (raw, json)
Hash identifier:          B9AhvM1S2lz2EAZK1hrQFQWoirShYBZCrcf11+eih8Y=
Subject key identifier:   7B:78:90:34:BE:7A:7F:C9:EF:57:BF:8D:D5:BF:AC:93:38:9A:33:3E
Certificate issuer:       /CN=de111c10-2de5-41fa-a9e4-1e49a0479199
Certificate serial:       010D0C9F4328584DC5659759CAE9176644741D88
Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     26793
IP address blocks:        69.5.128.0/19 maxlen: 24
                          162.216.76.0/22 maxlen: 24
                          173.240.192.0/20 maxlen: 24
                          205.237.160.0/19 maxlen: 24
                          206.127.176.0/20 maxlen: 24
                          2604:2800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:97:59:ca:e9:17:66:44:74:1d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=43afc4c9-83b1-4b29-bbfd-1a5270e39e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:07:1d:fd:11:66:34:09:e2:9c:e4:c5:bf:
                    d8:53:02:f8:39:3a:2a:ac:c8:55:a0:63:28:34:f8:
                    f2:e0:be:c2:c1:ce:d4:19:ba:ad:84:c7:30:ed:8d:
                    ff:45:4f:3b:db:e6:fe:a6:dd:98:72:e2:92:dd:75:
                    0b:4b:02:48:3a:62:6f:96:ee:c0:8d:28:e7:e1:6c:
                    92:b3:41:9d:81:c6:c0:f5:c1:8e:4e:06:73:21:e4:
                    74:f1:53:51:a2:36:3c:f9:2f:8e:a6:48:a6:8f:f4:
                    1d:28:88:db:f0:93:60:e0:8f:2e:7a:a6:6b:38:6e:
                    e9:c7:34:f5:b8:a6:0d:e2:49:16:e8:db:23:50:2e:
                    d3:8f:77:da:bb:ce:60:1e:cf:d1:7d:f2:41:3e:a1:
                    20:c0:2e:34:ef:65:72:ad:5d:a3:4b:19:b7:e2:de:
                    d2:ad:1e:07:f4:30:78:d8:d9:a5:c4:7c:28:1b:a2:
                    1a:59:08:f8:36:9c:b0:c7:6c:71:98:c6:4e:44:e1:
                    e9:c2:95:8f:98:09:c7:2a:09:62:95:51:b8:1b:df:
                    6b:99:c0:22:c4:6a:a8:fb:ac:07:07:12:ef:ca:97:
                    c0:88:1f:5b:25:f8:58:64:fd:cd:af:98:25:59:9e:
                    f6:0b:02:0d:fc:dc:44:e2:c5:22:43:fe:56:4e:73:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:78:90:34:BE:7A:7F:C9:EF:57:BF:8D:D5:BF:AC:93:38:9A:33:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl

            X509v3 Authority Key Identifier:
                keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.5.128.0/19
                  162.216.76.0/22
                  173.240.192.0/20
                  205.237.160.0/19
                  206.127.176.0/20
                IPv6:
                  2604:2800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ef:a5:6f:03:de:60:56:64:f9:1b:24:1c:96:28:66:af:47:
         86:a5:e3:6b:8c:b5:de:02:34:b6:86:76:70:57:a5:7f:dc:27:
         f4:4e:48:50:67:0e:f7:3b:88:7a:ba:41:54:2a:74:1f:12:fa:
         0e:12:82:ea:26:2f:73:07:7d:f3:30:f9:44:41:4b:f9:ff:3f:
         96:73:cb:d7:18:b9:25:5f:cf:29:00:3a:92:63:c8:fa:57:e5:
         39:35:2a:cf:08:b5:ee:cd:c9:62:c0:32:28:9c:e3:64:33:e0:
         ad:94:71:2c:a7:39:7c:25:cd:79:fb:d8:02:a9:34:18:fe:8f:
         af:62:67:1e:93:95:e1:03:34:b9:40:03:fd:54:b2:1e:82:61:
         07:3e:77:52:4f:bb:75:35:89:d8:45:83:dd:57:d7:87:2a:f2:
         68:68:53:e3:ba:2e:b9:c2:10:3f:d5:c0:64:c3:a9:e9:19:aa:
         41:93:69:0a:95:75:77:4e:25:1a:87:03:ea:a1:52:0b:0a:05:
         20:44:54:ca:71:eb:fd:b5:65:c4:d9:24:b5:69:7b:61:5d:89:
         75:1d:f0:55:78:41:80:cd:67:c1:17:44:e2:47:94:e6:77:8a:
         c4:cf:36:1f:85:85:d1:f6:1e:c0:72:25:ec:b8:ec:1f:0e:4b:
         ac:12:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:16:14 2026 by rpki-client