Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/b0ec175b-098d-3374-a654-a890d9f9f81f.roa
File:                     b0ec175b-098d-3374-a654-a890d9f9f81f.roa (raw, json)
Hash identifier:          fiDDrCCKa0j+bF7eCRf8G57oCf07VDHt9EJtR92LEJ0=
Subject key identifier:   87:6A:91:C8:F6:8D:64:6D:FA:61:0E:9F:9B:BB:46:5F:02:01:5E:51
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F4328584EB6E1A0E49E3E57BE9AD3CE80
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/b0ec175b-098d-3374-a654-a890d9f9f81f.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     21519
IP address blocks:        69.55.80.0/20 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a0:e4:9e:3e:57:be:9a:d3:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=e636656b-ed7e-49f4-896c-dd99f5188e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4b:f5:86:31:78:6e:bb:7b:63:c2:16:60:e8:
                    ed:6d:fc:ee:4a:29:08:49:de:08:df:62:ad:db:7f:
                    a2:7b:60:d4:d1:2e:09:11:24:68:0b:16:42:05:3b:
                    a5:6b:47:72:6d:0f:c5:73:23:a7:e4:8b:60:9f:f3:
                    19:b1:45:a7:dc:ee:82:98:fc:4c:cb:09:46:85:dc:
                    91:c0:e8:17:49:d9:41:59:58:e8:59:a9:1d:67:6c:
                    b1:92:ca:47:b2:d2:6f:90:f6:12:b9:4d:68:87:9d:
                    0b:16:52:60:44:b4:45:04:c2:d1:e0:51:47:b8:6a:
                    aa:7a:c1:15:94:6b:23:4e:45:28:a8:67:bb:1d:ad:
                    2b:3b:45:bd:bc:e6:77:4b:bf:02:11:09:47:db:16:
                    11:cf:0a:7d:5c:02:7e:be:11:21:8f:d6:6a:ad:83:
                    17:66:38:18:2a:8c:a2:e5:90:42:f8:b3:5f:41:20:
                    e3:97:c0:e2:ce:d0:94:f7:04:fb:45:d5:f2:20:f7:
                    ee:19:a4:ce:28:cf:7f:cb:ec:39:08:26:04:fd:d4:
                    94:da:f3:14:f9:a6:0f:7d:79:07:b9:35:38:56:2e:
                    93:da:2a:73:9b:f7:72:b3:95:cf:a9:3f:f1:95:f1:
                    6c:26:3e:91:e1:c5:eb:38:b1:b5:0f:11:d0:fc:11:
                    c5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6A:91:C8:F6:8D:64:6D:FA:61:0E:9F:9B:BB:46:5F:02:01:5E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/b0ec175b-098d-3374-a654-a890d9f9f81f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:03:96:eb:d2:c5:4c:30:df:0c:9f:e3:50:45:b8:ba:5c:04:
         cc:d4:99:e2:5c:54:55:00:9f:97:c1:57:95:2e:c6:f2:fa:ab:
         81:b4:61:56:81:a9:fc:bc:13:5f:9d:52:87:b1:0d:85:ea:33:
         8a:3a:05:fb:5a:0a:2b:77:36:55:16:3b:9c:82:d5:db:db:54:
         0e:91:9f:b1:5c:bf:dd:6c:a6:78:a2:e0:44:76:a7:83:74:e7:
         41:9e:36:fc:4d:e1:d2:ce:32:d3:2a:53:8c:0f:e2:4e:b9:37:
         7b:1d:3d:57:bd:93:86:e8:00:0d:9d:b4:1d:e9:39:82:e4:6c:
         95:2b:44:67:0e:5a:72:72:6d:2d:98:ed:f1:aa:10:e8:f6:16:
         e3:39:2b:72:d4:17:5f:5a:ec:dc:7f:f9:29:93:55:48:ce:df:
         23:1d:89:fd:a5:fa:13:e7:41:0b:60:79:01:69:63:f7:c0:4e:
         bd:40:79:d6:b0:bd:99:98:6c:46:21:e0:ce:f2:3f:60:45:46:
         14:8b:02:07:7f:6d:d1:d5:a2:8b:08:94:c5:6e:08:90:6a:88:
         bc:09:aa:b0:8f:27:40:85:5e:e7:15:c7:de:25:70:0e:59:c8:
         71:83:12:93:4f:f8:0b:3a:c4:45:fb:a3:36:80:6a:48:3d:ab:
         66:46:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:08:03 2026 by rpki-client