Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa
File:                     a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa (raw, json)
Hash identifier:          8PIxN6ZR66lBfOyTWHyLqumiV6XJDfDozQ7G5f1s0ts=
Subject key identifier:   08:D4:DB:40:C5:4E:C1:D1:B3:84:3C:A7:CB:09:83:76:91:D7:A6:30
Certificate issuer:       /CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b
Certificate serial:       010D0C9F4328584EC0A7233BC31EC4F035C81680
Authority key identifier: 9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     12059
IP address blocks:        216.223.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:23:3b:c3:1e:c4:f0:35:c8:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=24d43347-fe27-46b0-a501-6a320632469f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:40:2b:a0:3b:cf:cc:7f:e3:39:3b:ca:76:5c:
                    6f:20:82:9a:ee:db:9a:a1:14:9e:c7:df:0d:e5:b4:
                    49:dd:e3:3e:2b:f4:b9:38:1a:26:d2:a7:9d:a0:b0:
                    46:76:94:36:32:1a:19:44:c4:17:92:d4:2b:cb:fc:
                    bc:e7:66:d1:9d:2a:8f:06:93:2b:a9:42:a6:52:bd:
                    d7:47:5d:8e:5e:1d:c1:48:ee:4a:9f:47:6e:3f:23:
                    42:47:6a:73:5e:2a:37:40:27:5d:2d:39:9c:60:9a:
                    c0:fb:51:e6:60:73:e7:cb:c5:2d:20:13:5e:3b:f3:
                    1f:04:69:f7:ac:d0:47:8f:7c:57:1e:81:c0:f0:9b:
                    9d:80:89:e8:1a:0a:18:04:c6:b1:1a:fb:20:0c:9b:
                    97:84:e8:03:05:53:43:16:04:1f:b3:d3:d7:9b:3f:
                    16:2b:f6:6c:17:30:ec:ea:e8:e4:f5:b7:3f:c4:07:
                    4e:7e:b2:f1:53:43:30:20:27:c6:c5:84:7d:57:a0:
                    c0:7b:8a:14:01:91:23:d0:c6:28:cd:34:82:9b:62:
                    07:4f:8d:a9:54:f8:17:f2:35:56:4e:c4:c6:4b:aa:
                    3d:22:e7:3e:3c:1c:26:cc:2b:0b:3a:75:2c:6a:56:
                    f3:40:5b:6c:8f:b8:ed:36:46:3a:75:f3:f3:ac:3d:
                    de:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D4:DB:40:C5:4E:C1:D1:B3:84:3C:A7:CB:09:83:76:91:D7:A6:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/a249e7e7-73ea-3686-b26a-51f444f9b6c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.crl

            X509v3 Authority Key Identifier:
                keyid:9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a6:ee:9a:9d:54:3c:57:ee:04:a5:cc:c4:b6:d0:85:41:24:
         6e:09:e7:3a:25:3e:75:f1:97:ea:93:ea:25:d4:b4:30:e6:e1:
         b2:d6:47:93:30:f4:0e:6e:8c:65:8f:a8:06:e9:ac:72:0e:29:
         0b:e7:f2:bc:63:28:45:ab:04:23:b9:9a:a3:4e:65:bc:92:29:
         0a:65:70:4d:64:6b:3f:04:6a:6d:13:e1:d3:42:67:ad:df:f9:
         6a:4a:24:ff:10:46:4c:26:2a:99:8a:ba:9a:35:e1:1b:46:5a:
         14:8c:ee:e3:94:76:81:ec:d6:e1:74:c2:cd:99:e5:ed:30:12:
         8c:d5:6a:7c:d5:da:73:fb:0d:38:c4:21:ab:c1:74:71:4b:cd:
         f2:d6:f4:d7:a7:16:b5:37:87:44:ea:b4:03:22:54:51:66:d2:
         fd:39:0b:99:5d:d7:f1:53:1d:0e:b8:ab:b5:f9:3f:ff:78:1b:
         b3:ca:87:86:64:18:8d:79:f4:fd:53:b2:8e:ef:dc:eb:ed:90:
         67:56:1b:b9:dd:d7:b4:6a:8d:6c:6b:95:53:3e:8e:05:b8:3a:
         f9:95:b0:78:86:33:ec:01:c3:35:11:30:d2:3f:5d:cf:b9:f6:
         52:dc:58:d0:97:8e:64:52:83:36:75:40:f6:b7:3d:1f:38:73:
         8d:48:71:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:07:56 2026 by rpki-client