Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa
File:                     e5299180-b70f-3125-a781-6b51c883c759.roa (raw, json)
Hash identifier:          4pRbvW8u27xa4aYUOSuEFGaC9yk37G/wSqS9l0n9byU=
Subject key identifier:   0D:CA:8B:D2:76:3C:53:A5:1F:49:41:D8:36:D6:B1:D4:4D:7E:76:DC
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EC0A72B2593E8D953AFDED0C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     204670
IP address blocks:        128.121.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:2b:25:93:e8:d9:53:af:de:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=a9bb722f-4dce-4eef-be59-a9a00d297197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:b8:92:1b:a6:36:3b:76:99:fd:28:ce:5f:
                    45:43:f9:d2:80:ef:45:02:9c:4c:51:3b:d3:6f:1a:
                    ec:c6:f8:02:45:f2:e7:38:ce:bf:52:2d:07:8c:a7:
                    dc:b6:5f:99:6f:27:3f:67:3a:8d:03:1b:a3:eb:4e:
                    87:7c:82:e4:e7:29:a0:18:a7:77:ea:c7:46:36:88:
                    53:18:51:71:8b:7b:3a:92:db:80:96:46:e8:e5:91:
                    fd:d0:f2:9c:da:04:37:ea:ca:8c:d5:f1:93:16:fa:
                    94:61:8a:9c:71:a2:23:2d:ad:d2:1b:af:3f:65:64:
                    30:c0:1b:ed:50:7e:06:e3:b1:92:b5:f3:31:e1:08:
                    56:31:d3:2c:7d:3f:9d:1a:e8:10:ec:77:52:fd:00:
                    20:d9:fd:42:c0:1a:df:ba:9d:95:4e:62:3f:48:84:
                    55:d6:9f:be:2b:65:97:44:6b:16:d6:49:f3:f3:ec:
                    86:5e:e8:66:18:16:d7:90:5a:65:0f:6f:ee:a3:47:
                    74:2e:10:03:f3:50:8c:ce:82:21:fc:6a:68:18:ab:
                    e7:88:8c:51:91:5e:5d:18:03:98:8b:62:7d:51:6c:
                    f7:1a:19:4f:82:69:e7:3a:57:a2:6a:7f:8f:86:97:
                    ed:2a:00:f5:a5:09:11:9c:99:96:46:0d:6e:26:96:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CA:8B:D2:76:3C:53:A5:1F:49:41:D8:36:D6:B1:D4:4D:7E:76:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.121.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:34:4c:af:6b:14:04:15:c3:01:01:eb:40:a1:4d:3a:df:46:
         8a:b1:c3:d7:ce:8a:e7:69:8c:7e:0e:c5:ee:be:5e:52:eb:a9:
         cf:13:22:68:46:7b:8a:18:63:67:18:36:a8:cf:60:12:11:c4:
         e0:89:79:a9:4d:72:5d:ef:d3:c0:00:fc:8c:37:a3:e2:fc:2d:
         5c:5a:f2:5d:02:85:07:b3:ba:53:65:2d:78:a0:21:5f:4c:3d:
         ee:ab:60:ee:27:ac:d5:09:c2:29:17:de:6b:69:f4:d2:a3:09:
         d9:bf:50:6a:a6:03:28:46:89:2d:8b:ab:ef:0a:7f:3c:31:db:
         60:95:a8:9f:03:ed:a4:11:0d:96:24:25:33:ca:a3:39:6c:f0:
         c4:19:11:ce:69:d5:8f:05:27:62:16:90:d1:8f:31:02:3f:1c:
         3c:2c:01:29:0f:d9:39:ea:6a:25:65:28:82:9d:0e:dc:5e:d3:
         a4:8c:ee:f3:f3:3b:53:0b:c2:60:4f:5a:46:8e:b7:7a:66:09:
         49:88:40:7b:8b:ba:f2:5f:be:e6:87:2d:f9:d3:32:ec:1d:82:
         5a:df:0d:f2:10:06:11:ff:5e:3e:b7:74:8d:74:7c:a0:a4:9a:
         2b:67:e0:d8:c2:3a:db:9a:a0:e8:02:23:08:9b:f6:35:88:83:
         c0:7e:47:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:02:43 2026 by rpki-client