Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1547f7d9-75c1-36b6-a001-79ba03620e56.roa
File:                     1547f7d9-75c1-36b6-a001-79ba03620e56.roa (raw, json)
Hash identifier:          mhcwUb0YbgHRb7jxyPa4dCHhnj2yPRQiSS9rl7WWiOA=
Subject key identifier:   B4:30:4A:00:D2:9F:0F:55:74:0D:FA:F4:CA:5A:24:73:EE:B2:EA:DE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EFCACE00CCE5A93A20F04EF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1547f7d9-75c1-36b6-a001-79ba03620e56.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     16625
IP address blocks:        184.31.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:e0:0c:ce:5a:93:a2:0f:04:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=e44f5c11-e221-4dbe-9298-d53589ccc06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4b:55:f9:24:d4:47:7c:d0:1f:f7:fe:10:a3:
                    42:73:c2:44:f2:a0:a7:b6:ad:50:71:7f:e2:48:4f:
                    dc:47:c9:e3:82:5a:22:b6:9e:b6:c7:87:1e:59:a8:
                    ca:f4:e0:8a:22:47:cb:8c:7d:a0:46:8d:c4:43:25:
                    d5:f0:5c:f3:c4:9e:f9:d9:36:34:20:0c:17:34:8b:
                    36:fa:c8:e6:bf:5a:26:1e:2f:0e:78:d4:7c:ef:4f:
                    10:d4:0c:90:07:3e:f7:9e:da:a7:86:26:10:e5:12:
                    16:23:0d:60:8f:df:60:f2:c6:dc:4e:cb:d6:f2:2c:
                    4b:00:e7:67:19:94:60:a8:d3:40:ea:0a:a4:30:4b:
                    9f:3f:66:49:8e:f0:48:6f:a8:f0:7a:09:1e:a4:99:
                    b8:5d:97:24:26:38:40:da:7d:bd:c6:3a:9a:a9:bf:
                    09:3c:bf:78:90:2f:c0:aa:f0:04:e7:45:7b:76:70:
                    64:8c:1a:21:51:71:0c:04:06:2b:e0:7d:7c:34:2f:
                    2f:ff:a8:36:12:96:74:87:53:2f:99:44:26:77:df:
                    5e:36:a5:c8:bb:a0:40:7e:bb:84:23:f0:50:a5:99:
                    f9:21:fc:e9:18:8a:b2:c7:d6:33:32:77:30:fb:bf:
                    d4:ca:f0:9a:29:a7:59:7d:04:fd:b1:c7:7e:d0:0e:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:30:4A:00:D2:9F:0F:55:74:0D:FA:F4:CA:5A:24:73:EE:B2:EA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1547f7d9-75c1-36b6-a001-79ba03620e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.31.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:5a:57:b3:20:54:45:a1:e2:af:46:85:7e:e0:5d:50:70:82:
         dd:84:e3:a4:2c:ea:b9:f8:66:62:f6:b2:1b:3f:d8:09:58:31:
         f7:45:b4:3e:89:75:08:82:4c:09:3c:72:25:85:3a:b6:ca:29:
         24:be:4b:e0:05:3c:c6:cb:8c:a8:97:36:18:81:84:2b:3e:29:
         30:d6:02:b9:1b:b8:3d:e0:ff:42:b4:c7:36:73:fc:7a:9b:1b:
         3c:e5:d1:4e:db:0d:48:fc:70:94:5e:fa:0b:4a:9f:4d:5c:32:
         8c:6e:be:67:19:66:27:b0:cb:87:7f:c4:ff:f1:9d:be:45:b4:
         65:77:1e:b8:40:15:b7:22:94:3d:40:62:8b:07:47:1e:b7:d5:
         66:a5:29:87:59:45:18:09:f6:32:13:18:4c:7a:ce:a6:35:1c:
         b1:88:fc:42:b4:aa:85:db:a5:ee:73:97:2a:ff:ac:3d:50:bc:
         55:8e:a0:75:88:37:bd:51:7e:82:a8:a6:58:f0:2c:cc:ff:91:
         92:5c:94:86:f3:e2:c9:e7:a1:3e:26:1d:16:d6:bd:b6:e5:21:
         63:4e:8d:2f:cf:61:b3:8d:b8:20:ee:4d:07:a9:a4:77:a0:aa:
         98:2c:a4:b9:d0:2d:7b:22:27:87:6e:60:c6:a5:e2:bb:4a:83:
         e0:03:24:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:04:19 2026 by rpki-client