Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/5966b84f-0cc6-37d7-8957-3f769b8fafd0.roa
File:                     5966b84f-0cc6-37d7-8957-3f769b8fafd0.roa (raw, json)
Hash identifier:          7KlIhdbCxbFIEVUTksmKPd15/V/HwC+YhtuWgAMKLL4=
Subject key identifier:   5A:82:6C:A9:28:5C:CC:70:BD:C4:55:97:40:5F:E9:B2:D1:70:D3:22
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584DBFD05CAAE54EF9960BF1DE80
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/5966b84f-0cc6-37d7-8957-3f769b8fafd0.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        164.153.131.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:5c:aa:e5:4e:f9:96:0b:f1:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=52c90974-2751-4993-b505-da3fa2dd00d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:30:83:c6:1d:eb:ed:c5:d6:2e:49:d4:b3:
                    b6:7b:b5:28:a6:d5:d2:21:d4:ee:4e:b2:8f:18:11:
                    e3:08:f7:a5:cc:b9:09:32:d6:92:5a:ac:2e:9a:54:
                    05:58:10:36:b3:3a:64:53:3b:b9:84:b6:ed:14:e8:
                    e1:36:1d:4f:86:56:cf:fb:9d:b8:ce:1f:38:c1:5d:
                    fa:6a:c3:f4:62:41:d7:75:f4:b6:0d:6b:56:8d:5f:
                    90:f7:4c:ce:bb:0e:db:c1:32:47:b3:22:94:0b:f6:
                    cf:e0:20:f8:28:9c:47:a8:40:66:bb:cb:a4:37:13:
                    f7:20:b7:9b:c0:91:f4:3c:ab:94:fa:aa:1f:cd:68:
                    9b:0b:3b:cc:7a:56:39:31:14:96:04:e4:ca:04:4f:
                    f3:ad:6a:75:2a:66:e9:05:b4:30:1d:79:97:33:d8:
                    1d:1e:4c:a1:d9:8d:1f:5e:71:61:7a:32:9c:57:9c:
                    71:00:ba:1a:4c:63:0d:d0:ec:c1:ae:73:0c:b1:a6:
                    d7:c0:4d:5d:d8:1e:c5:e3:64:d1:1b:3e:a8:d0:ce:
                    7d:28:c2:8d:97:b5:26:26:a4:ff:88:d6:61:3a:8c:
                    14:70:98:bf:8e:2e:24:8a:25:e6:a4:1e:5b:ee:48:
                    0a:7b:33:ec:91:f7:69:6b:a4:3e:ec:b0:4d:8a:b3:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:82:6C:A9:28:5C:CC:70:BD:C4:55:97:40:5F:E9:B2:D1:70:D3:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/5966b84f-0cc6-37d7-8957-3f769b8fafd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e6:4f:bb:58:31:21:dc:a1:3a:4b:96:59:73:6c:4d:bc:e5:
         4e:b5:0d:8e:df:ce:45:ae:12:79:d3:e7:9b:81:86:ec:28:c4:
         ad:c3:38:f6:e8:55:ee:0f:3d:3c:20:a9:d0:4a:89:ac:12:b8:
         20:01:d8:d6:ad:b3:97:66:49:2d:54:98:bd:f7:93:3b:11:b7:
         99:a4:4f:54:3f:50:3a:fe:17:7d:75:97:99:c1:5d:22:ce:19:
         a9:da:1b:66:c0:16:7b:cc:37:12:87:86:2a:e4:3b:e7:79:58:
         4f:f3:57:e0:8a:09:09:0b:0b:70:1d:64:b8:b6:92:c3:cb:34:
         97:78:dd:67:e3:bb:23:4c:4e:df:06:d7:8a:07:4e:1e:65:c7:
         01:67:69:72:4b:70:c3:d4:69:24:68:0b:a0:2d:c9:f5:54:86:
         fe:4d:b7:4a:45:42:17:c5:a6:38:bd:93:7e:c8:ac:8e:df:fd:
         34:25:fe:08:87:4c:59:b4:f5:73:d7:9a:f1:66:1d:ee:07:e0:
         c7:f4:1f:54:6a:81:d8:3b:94:82:ea:1d:9c:9b:57:5f:4a:68:
         08:e9:8d:fc:a6:91:4b:6c:c3:fe:0d:60:b2:31:ca:2c:58:b3:
         12:e0:1f:d2:62:40:60:25:5b:99:ca:77:9d:2d:c2:ba:b6:6b:
         b3:7b:de:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:36:59 2026 by rpki-client