Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa
File:                     0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa (raw, json)
Hash identifier:          jhKOJ+mXszzObTaKlg/iDHaAsVYw8OllP23eC+3asQ4=
Subject key identifier:   2F:EB:06:D5:31:91:E4:56:7E:58:13:77:A6:4A:CA:7F:C3:22:3C:B9
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584ED431F3BD3993E5FDAC91D800
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     16839
IP address blocks:        149.96.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f3:bd:39:93:e5:fd:ac:91:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=cd534cb4-597e-40ed-891b-36640615c376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:fe:87:8e:7f:02:2f:29:e7:f0:cf:fe:52:
                    e5:fb:61:fc:bc:0b:9d:12:b3:fb:3f:83:ce:65:89:
                    5f:2e:c9:88:f7:b5:a2:72:13:3e:59:79:be:f5:f3:
                    a4:41:01:d1:08:fa:96:89:59:fe:50:6c:ea:08:20:
                    1a:92:7f:ce:f5:66:3a:fd:d0:81:48:ad:b1:8a:46:
                    ee:bd:10:83:ac:9b:b5:99:81:98:39:7b:3a:30:08:
                    dd:75:8b:55:ec:f8:d9:82:c8:06:12:e7:c8:64:7d:
                    89:d5:77:ba:51:5c:4e:3c:fa:00:ed:8c:dc:fe:72:
                    60:94:f8:3f:a7:03:5f:47:cd:c3:c1:bd:9e:d7:ee:
                    e8:32:94:ea:0b:74:4b:f5:5d:0e:68:ef:3c:05:74:
                    b3:bd:ae:0c:39:60:88:87:27:f5:86:ce:13:88:f1:
                    d3:65:9f:8a:3f:d7:34:c6:3b:91:08:c7:90:be:53:
                    65:f4:13:7c:8c:73:d6:90:d7:96:3c:8f:cf:1d:b9:
                    28:1a:16:37:ec:86:1a:34:1e:36:0a:d1:fb:28:69:
                    bf:3c:e4:19:0f:94:ab:36:4e:f7:98:85:24:55:87:
                    1e:ae:2b:33:fc:4a:f0:be:cd:4b:3e:1e:8d:be:0c:
                    13:ba:f6:10:e0:d1:2b:24:f1:08:bb:ab:ed:63:a9:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EB:06:D5:31:91:E4:56:7E:58:13:77:A6:4A:CA:7F:C3:22:3C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0da8ea64-ae4e-3e75-a7fc-62b6f449d4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b8:a4:9d:dc:8f:03:3a:7a:7d:24:a2:b0:db:60:d9:31:ca:
         cc:93:d9:91:29:51:db:87:eb:c8:a4:fc:04:cc:be:a0:35:c3:
         09:a9:89:e8:cb:b4:7e:cc:47:9e:80:7c:ed:46:21:16:cb:24:
         cf:b0:f7:b8:53:55:e1:aa:ae:2a:59:aa:66:4a:c6:72:ac:26:
         28:29:26:73:0d:16:b2:6b:ec:84:be:40:e0:48:ee:26:86:29:
         61:11:10:1d:d5:b1:1d:c8:45:5e:0e:d2:29:2a:31:93:55:c0:
         82:b3:2e:16:da:39:ba:27:af:76:13:93:c1:f0:f0:2a:09:3d:
         61:f4:68:4e:cc:0f:6e:49:0d:21:05:f0:4b:b4:f8:bc:bc:cb:
         17:54:64:ce:ab:64:1c:4f:26:04:46:99:15:99:7f:ba:bb:fd:
         fc:7a:08:01:d1:32:00:e7:36:99:9d:b1:a2:27:1b:15:ce:c5:
         8c:21:12:59:a7:da:22:8f:45:2c:ac:04:3e:ff:f0:f7:09:9f:
         ea:16:ca:f0:a8:c7:87:44:3d:fa:86:d9:6a:4d:c3:8c:ed:fb:
         bb:b4:26:e0:44:86:4e:5e:64:3f:04:11:8d:26:52:68:db:1a:
         d4:cf:a1:cb:f8:b6:12:c0:bc:bd:29:3a:fd:b5:4c:86:3b:ef:
         e6:c2:3e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:34:33 2026 by rpki-client