Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6cfb3d2f-b1bc-3bd9-9faa-fbfbb79a8b26.roa
File:                     6cfb3d2f-b1bc-3bd9-9faa-fbfbb79a8b26.roa (raw, json)
Hash identifier:          N84aqJy4/gpIn1sfCrIrUmH/X7haPNx06wimtp4JvKc=
Subject key identifier:   6E:9A:35:ED:74:E5:62:E1:A3:27:42:2D:75:4B:16:2F:65:E1:F1:E5
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DBFD05243075C7E472F32EF00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6cfb3d2f-b1bc-3bd9-9faa-fbfbb79a8b26.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     6079
IP address blocks:        173.0.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:52:43:07:5c:7e:47:2f:32:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=792ccd0f-5507-4796-886a-a1df7d093dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:19:43:5b:c2:7e:cf:bf:f4:02:a2:eb:d0:
                    f3:ba:f9:73:50:f5:b0:94:ea:37:d6:fe:71:e1:89:
                    4c:7d:3f:97:39:6f:8c:8e:c0:65:34:e4:98:36:21:
                    3a:e3:63:76:25:61:d0:3c:ba:60:c5:a4:5f:5f:30:
                    27:a5:c5:0c:2e:ff:74:43:e5:15:ee:b2:44:6b:40:
                    bb:92:dc:ec:96:86:2a:04:07:11:f9:10:c7:59:0e:
                    8d:d8:29:ab:16:29:ec:19:04:e5:6e:09:53:d7:77:
                    9a:0b:41:6d:3d:71:73:0c:e5:54:dd:99:f9:76:6c:
                    cd:65:f2:92:36:70:7b:a0:4d:cd:0b:f7:6a:70:95:
                    d6:b6:eb:85:fa:d3:e4:72:43:37:b9:50:f7:38:f8:
                    d1:96:d3:b6:27:96:34:e6:f5:47:e7:82:98:8f:39:
                    39:82:d3:4b:be:43:5e:f3:96:b9:57:e6:52:0c:93:
                    d2:84:7e:73:84:65:9e:5e:59:73:ee:f5:6c:69:8e:
                    01:fc:b0:15:54:20:a7:c3:21:2b:f7:c8:4a:0d:31:
                    8b:d2:a6:11:94:53:1b:33:ca:ef:25:ce:c6:ac:d3:
                    c1:c9:13:fa:b9:68:f1:92:9d:85:85:d4:bc:c7:07:
                    b8:ed:80:1b:aa:ff:d3:14:fa:17:1a:01:22:6f:30:
                    4e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9A:35:ED:74:E5:62:E1:A3:27:42:2D:75:4B:16:2F:65:E1:F1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6cfb3d2f-b1bc-3bd9-9faa-fbfbb79a8b26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:31:72:1f:de:f8:1c:3a:33:07:09:a8:6c:4f:fb:18:2a:7f:
         8b:b7:bf:5b:bb:1a:76:48:4d:1f:77:20:10:45:29:9d:02:02:
         2c:ee:df:e6:15:52:b8:3f:4f:40:65:2f:bc:cd:f7:59:76:68:
         2c:25:7d:b0:78:91:00:8d:bc:91:c5:8b:66:46:88:ae:c7:67:
         32:0e:fe:d6:2e:5c:00:f0:3a:56:b3:fd:dc:0b:6f:86:58:27:
         df:70:8c:16:36:aa:5b:e6:c3:51:3a:0d:ea:70:50:db:08:2a:
         e6:96:7f:b6:c0:9c:a3:a2:6a:25:d0:13:de:41:1f:5b:32:70:
         d2:18:20:a9:9e:33:d1:5a:61:8f:32:69:31:26:2c:f2:2a:f1:
         a8:8e:97:16:e5:dc:f7:50:33:be:e9:e0:f5:6f:a8:da:eb:bd:
         97:ea:cd:eb:87:52:9e:9f:55:9e:c4:1a:c2:a6:98:fd:7a:17:
         88:4e:d4:3e:28:ca:c8:64:e2:f4:1a:45:fa:3e:f3:be:f0:52:
         1a:b4:e6:c9:db:0e:83:cd:40:a9:1e:cf:16:2d:0a:77:26:f6:
         e9:21:a4:2d:8e:57:ba:ff:91:ce:87:7a:e8:dd:c9:fe:55:f4:
         a8:58:60:ac:05:7c:9f:7e:28:83:ad:7a:06:da:ee:9c:db:fb:
         1f:a6:23:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:30 2026 by rpki-client