Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa
File:                     8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa (raw, json)
Hash identifier:          D5PSW+kmTdjjSV6c0cEBTOQdVa75kDE2m2qdF3wOL1k=
Subject key identifier:   CB:F3:CC:A3:D1:A2:46:CB:C6:59:33:72:3A:6F:C7:EC:B3:D0:78:C4
Certificate issuer:       /CN=83f6fec3-836a-47ca-a671-0112eb9c74dd
Certificate serial:       010D0C9F4328584EC371BD1432403F1BC36C7600
Authority key identifier: 52:BF:B6:F7:53:D0:73:5D:A2:C9:26:04:82:F0:72:88:5B:CE:2C:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     63300
IP address blocks:        192.70.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/83f6fec3-836a-47ca-a671-0112eb9c74dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/83f6fec3-836a-47ca-a671-0112eb9c74dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:bd:14:32:40:3f:1b:c3:6c:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f6fec3-836a-47ca-a671-0112eb9c74dd
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=f40142f0-a730-4856-bd2d-f8921a0920e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:83:ea:90:8b:87:a0:af:aa:b8:5a:fe:35:
                    75:31:cc:5b:53:d2:cb:a7:90:bc:3f:fd:6b:1f:25:
                    56:f4:10:44:a3:21:09:c8:c7:d6:f1:ed:17:ad:b4:
                    61:76:c7:d6:20:cb:27:72:96:de:66:11:66:e7:79:
                    6c:50:c5:6a:6f:ae:fb:36:00:d8:ab:c4:92:f6:09:
                    f8:41:23:af:1f:85:59:82:10:23:23:2f:d1:2d:5e:
                    47:cb:e5:36:d1:f8:60:c5:0b:86:45:0a:a4:8d:49:
                    65:b9:8e:1d:25:47:44:03:bb:3a:7a:72:1f:42:ee:
                    bf:05:2b:31:c9:17:74:4a:9c:6b:1b:1b:e8:2e:6a:
                    ae:4d:83:23:e4:f8:17:c5:3d:19:39:51:64:cd:87:
                    65:30:ac:59:18:c2:1d:be:70:f1:59:58:76:84:b9:
                    71:8d:c2:97:57:9c:9f:a0:24:c0:93:04:4c:61:6c:
                    05:4e:b9:6f:29:ad:e0:4a:c6:91:cd:f0:4e:b6:e0:
                    d5:8c:84:c5:79:d7:d9:3f:35:de:9c:a0:a6:86:95:
                    39:cb:2b:70:9b:76:54:41:41:d2:1e:1f:65:14:60:
                    79:f8:46:e0:c1:84:61:2f:2f:24:5f:8e:21:a2:3b:
                    aa:ba:c4:1b:e5:e9:16:38:4d:f3:eb:0b:5c:c7:2a:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F3:CC:A3:D1:A2:46:CB:C6:59:33:72:3A:6F:C7:EC:B3:D0:78:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/83f6fec3-836a-47ca-a671-0112eb9c74dd.crl

            X509v3 Authority Key Identifier:
                keyid:52:BF:B6:F7:53:D0:73:5D:A2:C9:26:04:82:F0:72:88:5B:CE:2C:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:7c:be:fa:d0:d6:3b:32:44:72:1b:da:2a:38:75:4f:ee:4f:
         18:4c:73:1b:47:64:c1:57:22:6c:2a:12:94:08:00:bd:3b:38:
         59:27:0c:5f:52:36:5f:89:1b:ab:b7:75:b6:98:d9:75:9d:fe:
         4f:99:9c:9b:1f:3a:0a:24:03:d9:29:c2:19:e6:0b:9e:e1:ec:
         14:a2:91:84:f2:0f:bb:ca:0a:f5:3d:31:b2:f6:54:af:38:b3:
         f7:aa:a6:f0:a0:81:c9:86:3a:8c:09:2d:f3:8c:03:cd:2e:1f:
         2c:5f:6a:5b:88:78:fe:0e:38:f6:84:5d:e6:f8:56:de:54:be:
         f2:dc:73:d6:76:83:d9:fa:ed:72:88:de:ff:e7:10:d3:71:13:
         6b:d2:bb:3b:35:07:81:d1:0c:be:3f:da:55:77:b7:a6:ea:ae:
         58:b2:7d:f6:05:a8:e0:bc:90:f4:a9:84:0a:c6:78:9d:60:86:
         ac:da:d1:ec:57:3a:01:29:91:fe:b8:cb:91:a9:5d:89:f4:56:
         1d:8a:05:34:e7:e2:c2:1d:45:73:74:cc:44:13:33:72:4c:ea:
         0d:e1:73:0b:cf:84:6b:58:f2:32:14:2a:5f:fc:d1:68:e9:24:
         8d:56:09:86:b2:bc:f8:42:6a:fe:9e:c2:ad:8d:86:07:bb:df:
         4e:34:01:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:10:43 2026 by rpki-client