Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa
File:                     6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa (raw, json)
Hash identifier:          hdm/ZNhj7JPcpyjTy1QDPPdWh+NfbftG86QG4cgqJc8=
Subject key identifier:   4E:8E:AB:4C:03:E6:DA:3D:97:F4:E3:40:EE:8D:6F:8F:01:2D:16:E6
Certificate issuer:       /CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
Certificate serial:       010D0C9F4328584EAA51A04E3C4E1A9826890180
Authority key identifier: 1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     198949
IP address blocks:        167.32.0.0/16 maxlen: 24
                          2605:d840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:a0:4e:3c:4e:1a:98:26:89:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=da05a9c0-a782-4723-b758-dcf632a8a5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:9a:c6:f4:c2:3d:e8:d8:30:f0:32:d1:db:
                    a1:0c:67:20:6f:0e:e6:9d:90:1f:33:36:e4:1f:48:
                    dc:fd:a6:92:af:8b:4d:b5:4b:06:4e:ec:fe:3a:1e:
                    72:06:f7:26:bb:20:3c:e0:b0:03:84:55:dc:6f:69:
                    2c:a5:79:c4:1e:42:cd:b0:ca:b7:02:1a:98:88:39:
                    ec:2a:51:84:9b:ed:06:af:44:2e:9b:98:a3:dd:38:
                    7d:9a:ca:06:3d:b1:96:9e:a8:a4:86:ab:8b:5b:17:
                    33:69:63:96:f2:db:e4:21:48:cd:32:31:a2:a2:27:
                    63:ea:80:3b:52:41:c9:0e:8c:04:f0:9f:48:99:98:
                    84:14:27:c3:f5:51:34:75:8b:ac:60:ae:1d:2a:86:
                    a8:fe:94:82:f9:6a:3c:69:ea:6f:24:3b:97:7d:ce:
                    ca:32:78:e5:78:5d:cf:be:e4:64:ee:74:8f:38:d2:
                    91:3c:2e:1d:15:3e:cf:b1:27:c6:cb:15:d7:af:91:
                    7c:a9:8f:d8:ef:9e:86:5b:73:18:ad:f0:82:e3:60:
                    66:bc:9d:a0:77:51:0f:c5:ad:e8:6a:30:4d:1b:60:
                    0d:68:1f:cb:bb:49:5e:9b:0e:76:1c:16:e4:a0:0a:
                    29:f6:df:3a:b7:41:7b:d2:a0:9f:9b:35:f6:5a:6b:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8E:AB:4C:03:E6:DA:3D:97:F4:E3:40:EE:8D:6F:8F:01:2D:16:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/6eee25a3-6d63-3335-afd1-b64c1dcd1946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl

            X509v3 Authority Key Identifier:
                keyid:1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.32.0.0/16
                IPv6:
                  2605:d840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:47:1f:15:52:15:27:9a:92:09:bf:28:59:2c:8b:b8:fc:a7:
         d1:d1:5b:04:7c:89:f5:d1:62:52:b5:53:4a:85:f7:97:e5:97:
         b9:2e:d1:7f:ea:d2:52:ba:04:1d:15:df:31:e3:28:4a:da:7a:
         19:4f:98:bc:11:4c:a5:22:c8:11:61:a1:b3:89:3b:f2:b8:67:
         d6:0b:e6:66:26:0c:a2:45:90:05:7a:bd:df:3a:b5:e3:1b:b8:
         a3:b0:d5:3e:39:c5:17:a0:ca:c3:0d:18:b5:0b:15:59:0c:e8:
         e7:47:c1:d4:a2:59:b9:db:94:b8:3b:0b:21:1a:c4:ab:e1:6c:
         1b:ef:f1:30:70:6b:4f:e7:c0:e5:b0:36:c2:b7:2c:d0:c9:fb:
         08:b8:43:ec:7c:bd:43:4c:d5:f5:3e:fa:c2:01:a9:3d:a7:08:
         70:1a:db:39:0c:b2:1c:ab:0f:c9:8d:fd:41:93:8f:14:d2:53:
         72:6a:f7:41:6e:7b:dc:57:af:56:70:86:af:30:f4:57:13:69:
         bd:19:95:48:b9:87:5a:77:c8:01:fd:ed:2b:b3:14:1c:45:22:
         c6:61:34:5e:5f:f4:51:ff:78:dd:ff:7c:c6:77:59:06:7e:e3:
         96:27:96:de:f3:55:17:08:73:9d:ad:ca:dd:e5:c8:3e:0c:bd:
         8e:0e:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:08:41 2026 by rpki-client