Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/d5182fee-7a81-304a-a9e9-fe231156848b.roa
File:                     d5182fee-7a81-304a-a9e9-fe231156848b.roa (raw, json)
Hash identifier:          a0nZ+e78Tzt1aN1Fi3PnIKpu2blgo7okGU6014INegE=
Subject key identifier:   AE:B2:A4:5E:CE:CC:4B:8F:EB:FA:1D:B5:09:08:E8:A0:58:47:5F:C8
Certificate issuer:       /CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
Certificate serial:       010D0C9F4328584EA7874678F166B90F36CCDA80
Authority key identifier: 26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/d5182fee-7a81-304a-a9e9-fe231156848b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10974
IP address blocks:        208.79.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:46:78:f1:66:b9:0f:36:cc:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=54ea3159-9a37-4eb0-af69-a51bc31e5910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:60:02:88:61:42:fe:e5:bd:d7:16:18:73:
                    2b:f7:86:6c:de:d5:3e:17:1d:c4:28:bd:df:ca:09:
                    94:cf:f2:3a:61:d5:de:42:d5:84:9d:a0:7a:45:28:
                    ca:e9:f6:88:cc:8e:21:ec:03:a2:d1:eb:c4:6e:74:
                    29:54:a5:66:ec:03:fd:2e:67:65:11:43:18:10:67:
                    96:87:16:90:3d:75:be:ba:e3:6a:f9:f9:f0:ae:50:
                    a0:5c:dd:3b:68:3f:f3:77:cf:0e:c3:8c:bd:a7:63:
                    0b:72:bb:5b:73:25:aa:43:3c:e5:56:39:49:f5:c3:
                    92:db:ca:cd:fc:2b:2b:d4:c9:04:9f:eb:88:04:2a:
                    44:b7:ab:02:c7:4b:bd:c8:34:ac:19:34:61:f4:9c:
                    f4:5c:12:1b:04:f9:11:8d:89:9b:96:44:b4:65:01:
                    13:c2:34:b5:a5:47:8c:5b:cd:03:43:1b:48:e0:ad:
                    36:94:1f:4d:d3:8b:64:c8:d6:d8:f4:47:04:44:b2:
                    31:96:e2:57:4c:ff:a9:0f:9c:a2:b6:64:a3:3f:77:
                    af:6f:7a:89:4c:6b:b1:e5:27:45:07:9f:ec:34:ee:
                    9d:d9:82:7b:92:de:1a:4b:c9:e7:1c:e6:7c:2f:63:
                    1a:f5:d0:13:01:d3:88:74:6c:fb:b5:ec:96:b6:b8:
                    c1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B2:A4:5E:CE:CC:4B:8F:EB:FA:1D:B5:09:08:E8:A0:58:47:5F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/d5182fee-7a81-304a-a9e9-fe231156848b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl

            X509v3 Authority Key Identifier:
                keyid:26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:ad:41:fd:46:73:f2:5d:e1:77:19:83:d4:56:5e:71:d0:
         fd:98:ec:99:4a:84:60:17:86:b8:83:64:20:92:7e:c6:42:12:
         84:17:89:5d:45:89:cb:1f:29:c4:1a:5d:77:89:f3:a1:02:82:
         5d:64:5a:56:ba:60:4c:68:7c:db:1e:22:d9:e8:7b:58:96:1b:
         7c:b9:7e:e6:f4:b4:2c:29:2b:01:27:3d:c4:b7:83:02:13:7c:
         da:ba:2f:de:1b:ff:f1:31:f5:79:f3:be:5b:13:9b:dd:59:40:
         57:2e:93:73:04:23:24:44:b4:c0:f7:6b:48:2f:61:74:91:ac:
         8d:6a:fd:bb:dc:80:b3:96:18:22:c2:5e:e0:ab:07:c4:0b:63:
         33:67:e9:51:c4:5b:ff:dd:53:9c:33:d6:bc:c4:0e:a9:c0:9c:
         3b:9c:97:bc:4d:b1:8a:b5:98:fa:e0:bf:f4:d5:41:63:be:cd:
         1f:41:21:d6:83:be:08:cf:c9:62:3c:df:ed:97:85:0b:6a:87:
         f2:aa:41:af:dc:63:2e:da:78:40:07:d3:e5:1b:41:1a:34:2c:
         af:09:04:e9:55:e7:33:59:dd:d5:97:b7:fc:49:50:96:da:60:
         58:93:a0:e7:01:ed:8b:2b:b5:a7:da:28:45:64:71:b8:bb:90:
         26:fc:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:48:39 2026 by rpki-client