Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa
File:                     6ac34efc-b417-35c3-8e9e-422402db22ca.roa (raw, json)
Hash identifier:          u1rFrvMLqXDHLW1AxZhWFtu20QTDqjtWL7D/btWvefY=
Subject key identifier:   9C:CF:5D:E8:CB:00:C2:F2:B9:2F:77:CB:25:61:B0:F2:FB:16:69:59
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584D3DFF9D5B325665FB17A7E780
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     138699
IP address blocks:        71.18.227.0/24 maxlen: 24
                          101.45.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:9d:5b:32:56:65:fb:17:a7:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=22573dbe-5921-46db-a111-1dff92d963b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:4b:6c:a5:ac:a1:58:57:15:6a:12:51:73:
                    a5:27:2e:04:00:c4:11:85:ce:8b:43:04:6d:97:3d:
                    0a:9b:c3:2d:7a:f1:81:a1:35:26:9f:61:1c:8f:d0:
                    5b:aa:85:da:94:4e:e3:02:ff:5d:a0:f6:47:22:0f:
                    35:20:a7:a1:7c:2a:b1:37:8f:75:f0:a4:29:9e:a3:
                    a3:11:1a:04:6d:7b:ab:13:99:07:06:64:13:76:e2:
                    b9:94:e6:f4:b3:96:af:2e:05:34:c1:2d:55:ce:23:
                    20:75:ac:8c:cc:9c:bf:86:10:86:f9:49:a2:15:75:
                    d3:07:96:84:df:4e:fe:0f:f5:45:3e:c9:7f:95:1b:
                    71:5a:6e:18:31:5c:3a:b0:0b:c4:c8:c3:05:14:61:
                    75:06:e0:49:09:bf:bf:62:d6:e1:d3:cc:cd:65:b5:
                    aa:6e:e1:7a:7d:39:ac:8a:22:30:0e:24:cb:48:c1:
                    83:a7:b7:76:75:25:e3:fc:6b:6a:3b:0e:9e:ef:23:
                    68:cc:5b:45:dd:1b:38:23:c9:7b:07:20:70:b6:6c:
                    6d:a1:db:26:bd:7b:40:59:c9:1a:ab:fb:71:dd:40:
                    2b:8b:d3:07:46:94:c2:30:a2:1b:2d:22:93:80:df:
                    c1:16:f2:e8:b0:fb:dd:c3:70:bd:ed:75:b9:b8:da:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CF:5D:E8:CB:00:C2:F2:B9:2F:77:CB:25:61:B0:F2:FB:16:69:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6ac34efc-b417-35c3-8e9e-422402db22ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.227.0/24
                  101.45.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:fa:d3:f9:ac:55:67:4e:21:72:24:44:d6:00:fd:c6:34:5b:
         c9:fd:f1:c7:c5:bb:5f:b9:2d:ec:06:74:e8:63:7b:3f:fb:77:
         c5:81:50:0b:08:56:f3:42:90:f5:46:0f:a4:a8:17:f3:30:28:
         2d:b6:6f:c3:eb:67:d5:5f:32:e4:3e:bf:47:f7:7f:3e:c2:23:
         76:d5:f0:99:07:77:ab:82:4c:1f:e0:c2:ba:23:84:c3:72:c9:
         56:2d:e2:e1:e8:6e:25:68:47:e9:66:f7:0a:bc:53:ff:66:7b:
         26:88:51:43:6e:cb:9a:46:db:4e:a1:ec:40:91:58:6f:cf:95:
         ce:07:df:10:82:3f:00:80:a9:40:40:89:8e:25:3c:f4:1e:13:
         a7:75:44:23:49:9c:93:08:18:fe:95:7a:6e:ae:b7:8e:0b:40:
         13:d1:c2:24:c5:4e:4e:c8:45:de:c3:c0:0f:c5:e7:2a:4a:11:
         9f:8e:19:37:4e:76:6e:85:de:bb:2f:81:b1:96:cd:46:ce:86:
         b5:0d:5b:ed:83:86:f7:2c:b8:dc:92:c9:dc:6d:6d:c8:c6:25:
         f2:51:59:ad:06:22:39:7f:7f:70:d2:3d:cc:0e:cf:35:6b:fa:
         80:6a:a4:0b:a2:06:3f:7c:96:d8:c2:03:f0:70:9f:de:12:04:
         d6:0c:b2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:47:59 2026 by rpki-client