Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa
File:                     ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa (raw, json)
Hash identifier:          LLYbdCiR9krFBCFOhIJNnGFjZmnhz/ci3j/6Em8ohT0=
Subject key identifier:   FF:F3:3F:75:5E:45:27:54:AE:36:74:9C:B8:48:57:BB:21:D8:45:06
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584ED431F4017F4AD82D6F8CBBC0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     16839
IP address blocks:        149.96.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f4:01:7f:4a:d8:2d:6f:8c:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=49f0b6ce-c8a9-48a1-b369-d05fbee32eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0a:71:5b:4e:8c:61:ac:cb:63:5f:43:70:22:
                    f8:51:17:0d:2a:1a:b4:af:ab:d7:fd:45:8e:34:a4:
                    3d:51:06:36:aa:5f:30:ef:7c:ae:37:d9:57:6e:ea:
                    c8:0e:72:c8:b9:6f:40:90:ec:d5:e7:16:e7:00:e3:
                    cc:bf:cc:37:a0:14:1e:2b:8b:99:01:0b:ad:23:62:
                    8d:a6:8f:69:92:86:7f:4f:02:6e:f3:fc:e5:1d:33:
                    c3:96:9c:c8:3a:3f:3d:d4:3c:26:ff:28:f9:93:8e:
                    62:8f:fe:e4:e5:37:30:bc:52:8d:20:01:17:9b:ab:
                    43:53:34:e0:77:54:7d:5b:82:11:9d:fb:ab:d6:59:
                    6f:ef:fb:19:98:f5:00:53:c1:f6:48:dd:fa:8d:2e:
                    dd:94:00:57:15:bb:65:df:b2:af:bc:68:e6:ae:52:
                    2b:92:74:19:b5:7e:63:be:bd:fb:14:c7:c1:41:f4:
                    ec:20:ae:3a:69:ca:f5:76:09:a7:d8:70:e8:63:fa:
                    b3:08:eb:df:61:fd:34:e4:ec:b5:ab:65:89:b4:bb:
                    2c:8b:80:cb:b5:71:8f:ce:fa:83:e8:e6:62:fc:55:
                    38:30:eb:cd:43:e3:d1:b8:c8:01:d5:a9:c4:b2:26:
                    13:b2:48:fc:a2:d2:8e:3c:eb:3a:1e:4d:50:10:78:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F3:3F:75:5E:45:27:54:AE:36:74:9C:B8:48:57:BB:21:D8:45:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/ea06a007-a1f0-38c8-bbeb-2b78dbd6b6e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:53:c8:d1:a8:f3:6b:d1:3b:21:57:14:13:33:4c:75:44:11:
         df:31:e3:29:96:a6:ef:4a:2d:7b:d0:e9:38:82:fe:6c:7c:a9:
         b8:ae:e8:be:c8:38:63:7a:94:fb:64:3f:70:b9:e2:fa:9d:bc:
         1f:1e:19:f1:1d:c6:d4:77:de:98:51:34:f8:6f:8b:22:13:1b:
         e7:1a:3f:87:1f:11:8a:89:50:4b:9f:ab:58:df:a6:13:57:18:
         ee:af:90:6e:d7:cb:ff:8d:74:aa:cd:d2:77:9a:9a:7d:ca:6d:
         a4:9a:ba:49:be:0b:df:6a:90:6f:31:94:42:c1:49:bc:b3:7b:
         de:61:ae:66:e8:10:10:b9:e6:a5:ee:cc:b5:2c:c0:14:66:a0:
         92:b4:41:69:21:f5:71:0a:65:d1:72:d6:e5:19:7b:f9:b2:54:
         3d:27:58:5f:69:53:a9:89:c8:ab:aa:30:c3:29:ff:a1:88:9a:
         77:74:00:f9:da:3d:17:2e:80:c7:bb:c4:47:8a:cc:a4:c8:24:
         a3:de:f2:e8:50:88:d1:4e:24:0b:1e:be:e9:e8:35:77:6d:10:
         e2:2e:59:58:b5:0e:ac:3f:40:42:e4:c4:0c:fb:83:56:f8:e7:
         35:c0:a7:b1:b8:4a:c8:dc:e7:cc:34:59:d9:1c:d6:f1:1b:9c:
         b0:4e:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:50 2026 by rpki-client