Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f51e65-acbc-312a-bbd6-7456d5d1206e.roa
File:                     65f51e65-acbc-312a-bbd6-7456d5d1206e.roa (raw, json)
Hash identifier:          Oezx2BwNQ9MzmYVkQbI7cJMCoKiIWI3Z2hb1I9uzq7k=
Subject key identifier:   EF:9B:F1:4F:2D:9E:A2:C6:26:60:49:6A:A9:1E:E1:BF:74:9D:82:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F067260E6E23FDAABF9718800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f51e65-acbc-312a-bbd6-7456d5d1206e.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        184.28.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:60:e6:e2:3f:da:ab:f9:71:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=b446c4b8-25d4-41bc-8661-6badcc9a4f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:0d:81:65:84:be:21:f5:cf:9a:88:14:5d:
                    aa:cb:fc:d2:c7:48:f3:09:3f:0d:a6:3d:3c:f5:bf:
                    3f:35:c8:9f:83:98:6c:06:03:be:c7:e8:b3:b6:88:
                    0a:cd:3b:7b:fc:a0:27:68:3d:c1:de:e8:16:4b:e9:
                    86:ac:a5:70:04:d5:d5:f2:57:1d:d0:5f:77:25:57:
                    15:cf:e7:62:7d:8e:51:cf:ec:0c:2f:0b:34:e5:82:
                    74:70:e2:37:c8:3e:8b:0c:ed:ab:1b:85:e0:44:5e:
                    80:a3:79:fd:b1:70:b9:8d:89:28:85:8d:66:8f:45:
                    37:ba:a7:0f:91:c6:4e:2e:3d:a9:b2:a1:c8:eb:73:
                    e2:da:1d:14:e5:8f:9b:13:fa:f4:8d:a5:18:20:d0:
                    d3:f6:26:2c:6f:8e:d6:02:f1:6a:1a:05:f3:49:5f:
                    3f:d1:a4:a6:69:76:57:5c:2e:38:83:72:15:16:1f:
                    5e:15:5c:27:4f:75:5c:c7:0b:66:24:5d:3c:56:46:
                    a7:6d:26:2e:ab:e9:d4:20:4c:b2:e0:4d:26:17:ca:
                    10:cd:52:b6:05:b0:ae:6c:a1:0d:a6:ef:e4:14:49:
                    05:e4:ca:a6:e6:0f:69:51:7e:41:59:eb:49:03:4b:
                    3c:d9:2c:86:fe:80:fd:77:81:73:ba:67:1a:0c:00:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9B:F1:4F:2D:9E:A2:C6:26:60:49:6A:A9:1E:E1:BF:74:9D:82:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f51e65-acbc-312a-bbd6-7456d5d1206e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9a:f9:cd:18:a9:ef:f8:72:c9:0e:0f:51:1a:d1:d4:02:22:
         86:42:41:35:48:54:ef:bb:f4:c7:7d:4d:1a:c4:a3:9c:73:c5:
         1b:b2:cd:05:03:de:2a:85:58:c9:7e:9a:7f:07:09:a9:f5:d2:
         fd:0a:f1:75:a3:43:76:23:a1:f1:97:1f:e2:32:e9:c2:cd:c6:
         90:ee:43:90:82:c9:4d:4b:c2:59:18:4f:9f:43:c4:ef:c7:70:
         92:55:37:9f:43:40:be:a4:85:75:14:9c:79:70:a9:54:9a:6c:
         4f:9b:f5:84:f5:1f:fc:b6:62:48:f3:6c:24:92:3d:f7:79:29:
         fd:30:e2:83:3b:d8:71:5d:a4:0a:c1:ec:82:90:0b:ac:3b:94:
         9d:6a:72:de:84:76:1b:01:c8:2b:63:61:ad:35:dd:e4:0c:65:
         59:19:59:44:25:e2:e9:31:ee:23:e1:86:69:d6:f1:a0:19:fc:
         43:f0:83:94:4e:ea:43:3e:81:cb:50:91:2d:61:38:08:df:88:
         8e:f6:66:92:c4:49:14:67:69:c0:cd:ac:a4:3e:45:b4:f1:32:
         91:a0:fd:c4:82:7d:d8:f4:29:bb:5c:a7:26:b9:2e:08:42:48:
         f8:3a:0e:bf:c0:74:a4:51:a7:b9:3c:9a:6a:07:61:06:f3:34:
         9f:72:29:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:51:45 2026 by rpki-client