Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa
File:                     65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa (raw, json)
Hash identifier:          EvB3jIYr+NarSa/KaGQQvoa2v4Uf4hm7wtNnRHxWq/s=
Subject key identifier:   69:5B:AD:B6:21:C5:6B:5E:63:BF:A2:F8:18:32:4F:0D:1D:77:5F:E5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4C5497BC1E57B1D246130080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        96.16.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:97:bc:1e:57:b1:d2:46:13:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=eae5515c-44b4-4b0e-b758-003380232d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:19:9d:a1:9a:aa:a3:d1:af:06:1d:62:01:
                    96:7c:15:fb:2f:83:42:cb:b4:50:63:1e:3e:cb:64:
                    9e:26:d2:aa:a5:78:c2:7a:11:37:1d:4e:bd:40:91:
                    cb:be:eb:5a:47:47:54:00:dc:86:b6:ce:3d:23:f4:
                    54:58:81:65:39:39:6a:39:a2:b5:1d:ab:3b:11:fc:
                    51:2a:1f:d4:7c:73:c3:84:99:a4:4c:6a:83:b6:11:
                    cd:06:09:19:58:96:24:c6:8c:fe:c5:69:af:8f:1a:
                    78:4e:9c:10:fe:56:01:16:f5:d2:6a:16:e1:92:13:
                    f5:6b:ed:7d:bc:8c:1d:41:6e:9a:4c:cf:d0:6c:c2:
                    30:0a:f2:34:64:f7:0f:1a:2a:30:83:f3:d9:1a:e8:
                    4f:87:53:29:3e:5f:b0:f5:16:2e:0f:6c:a8:3f:c3:
                    78:2d:a9:9e:6b:2a:10:a2:8e:f5:6f:26:2c:f9:fb:
                    ff:83:18:c7:cf:22:71:99:95:ef:e7:bb:fd:03:26:
                    38:fc:84:5b:e8:fb:88:06:5a:72:11:b8:9f:98:0c:
                    9c:75:0a:33:ec:1e:0c:28:ea:7f:8a:b9:d9:2a:1e:
                    f6:59:63:7a:52:6c:0c:b3:72:e5:27:66:37:22:a4:
                    1d:fd:c0:88:e8:77:f0:d3:52:85:89:d2:fd:28:08:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5B:AD:B6:21:C5:6B:5E:63:BF:A2:F8:18:32:4F:0D:1D:77:5F:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.16.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:01:2b:05:b7:ce:de:b3:18:f7:ec:1e:0d:9b:38:c8:08:a4:
         37:e3:d1:cb:a8:8a:46:d7:a8:aa:4a:86:7a:ce:63:80:90:f8:
         60:9d:de:d1:2a:a3:0c:3f:9d:66:ec:b5:3e:da:d0:80:85:1b:
         50:c4:dd:ea:05:b5:20:eb:3d:7a:20:e2:b2:50:dd:9e:29:97:
         48:b4:fe:a6:ff:55:72:ae:a8:f1:24:e4:cf:ae:6f:85:ae:d1:
         46:23:e4:b8:ea:c5:01:95:2d:f2:9c:22:f6:17:65:8e:c4:9a:
         09:e5:4a:ed:aa:74:e8:12:0e:5c:3f:54:e1:9c:85:a2:e8:a2:
         0a:3e:e0:30:21:5d:14:18:99:7b:f2:1e:c8:e4:6c:72:a6:97:
         73:6a:28:6a:f6:b4:18:3d:88:3f:27:16:10:f5:25:f5:b1:5c:
         8f:65:05:bf:9c:1b:48:3b:e0:bd:bc:ee:7e:97:42:bd:ce:12:
         02:4b:f6:d5:f3:1e:e7:65:17:9d:01:79:08:31:8d:55:66:a4:
         e8:82:0e:6f:46:45:54:be:e9:b5:e3:74:44:31:a5:b9:c6:35:
         c0:85:ea:73:2d:a5:80:b0:27:e5:25:d5:7d:81:a5:f1:57:74:
         bd:5f:9a:6d:88:32:68:e8:fa:78:eb:0b:46:e8:f6:1e:5c:87:
         53:89:39:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:54:07 2026 by rpki-client