Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5bf2ab81-bf2e-33c9-94ce-94b9c5e1c449.roa
File:                     5bf2ab81-bf2e-33c9-94ce-94b9c5e1c449.roa (raw, json)
Hash identifier:          VVmQtY7R7IyquVbcAUDBffezDuA2ekOVIm4k7+4u3UY=
Subject key identifier:   6B:89:E6:0D:ED:F5:0B:99:B4:75:07:1B:A9:CA:33:FC:30:88:A5:47
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584EA788783DA45156EA319F9980
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5bf2ab81-bf2e-33c9-94ce-94b9c5e1c449.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        162.215.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:78:3d:a4:51:56:ea:31:9f:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7c36eaf2-98ef-4d1d-935b-9a18ca1f7e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:a2:a6:15:88:85:be:a8:f8:9d:86:cc:53:
                    e1:99:5b:32:69:d4:9d:4b:b5:41:68:2c:a6:0c:d6:
                    d9:77:bc:12:d2:a5:f9:64:79:7a:e3:5e:86:05:09:
                    96:12:85:e5:50:63:0d:68:ea:5e:54:3c:a8:7e:69:
                    ad:a1:fe:d8:59:5f:31:d9:a6:3c:25:02:88:9f:f9:
                    ec:7e:b9:ea:ca:d6:67:d1:13:03:b5:c7:d9:64:4b:
                    c2:68:c2:4f:e0:1c:8e:90:69:40:e2:1d:1d:b6:7e:
                    35:89:7a:ba:49:2b:63:b7:82:90:59:43:f0:f7:02:
                    46:46:c0:a3:5b:1d:d3:ee:9a:b8:09:fe:98:64:a0:
                    50:43:ce:f6:05:6e:1d:54:22:bb:9b:41:50:f6:70:
                    68:62:89:57:27:3a:fe:66:55:c8:97:e1:e9:f8:95:
                    02:a6:0d:99:1d:1a:a6:6c:d7:2b:24:32:24:92:bc:
                    93:01:ad:43:39:b6:f3:41:0e:1f:90:a2:01:7c:ee:
                    11:16:52:0b:b9:72:9e:bc:a6:49:a0:29:8c:1f:bc:
                    ae:f3:ce:31:76:be:05:97:42:8b:fe:c3:0d:45:13:
                    14:ef:9f:0a:9e:e1:7b:a5:85:5a:dd:9e:4f:f9:3d:
                    23:ae:f4:3d:ae:32:36:4f:c4:b4:bd:8d:43:c3:11:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:89:E6:0D:ED:F5:0B:99:B4:75:07:1B:A9:CA:33:FC:30:88:A5:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5bf2ab81-bf2e-33c9-94ce-94b9c5e1c449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.215.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:02:9f:00:5c:02:e6:49:6c:26:68:6c:fe:2e:fa:29:fa:28:
         42:76:74:14:46:b8:cd:6b:32:4c:dd:6c:98:db:c8:94:61:1e:
         a7:6c:63:df:ab:db:95:0a:d2:11:0f:86:fb:7a:0c:89:3a:19:
         91:6c:51:db:0b:a6:47:db:72:53:e2:ae:01:b8:06:d4:63:76:
         66:7a:4e:b2:70:ff:90:df:05:73:91:b3:ec:e1:bd:22:52:be:
         27:d0:a7:bd:76:c7:43:21:68:ff:2a:a6:2e:f5:c9:ce:45:a3:
         73:dd:e7:1e:c2:95:af:7e:78:12:7e:29:ca:01:d7:2d:f2:24:
         f5:4e:12:6b:f0:f4:24:92:27:d8:5c:6b:23:f6:0e:b2:cd:cd:
         24:bd:5c:4b:65:d1:12:1f:05:9d:25:14:c5:5a:21:62:3c:25:
         19:0d:3e:43:9d:cd:d0:b1:46:c5:c3:1d:c5:bb:be:83:5b:f2:
         82:81:e5:53:35:54:ca:a6:c2:87:0f:d4:eb:cc:9b:ab:c5:7b:
         16:19:f1:25:ea:4d:ef:96:1a:e2:fd:f6:99:5c:4f:06:b5:fc:
         b8:ac:9b:1b:b7:b3:76:db:d0:f0:da:ac:20:53:6d:87:aa:74:
         01:f0:c5:86:7d:af:c6:b5:eb:21:1c:9d:b6:0d:0a:25:94:19:
         41:3d:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:10:32 2026 by rpki-client