Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/f5743c7b-a6f2-3440-a47a-7577398443dd.roa
File:                     f5743c7b-a6f2-3440-a47a-7577398443dd.roa (raw, json)
Hash identifier:          8+91DhkFw08885AKEnlWic1j5NAB7wQPoOW4po1OJdE=
Subject key identifier:   9E:65:E3:12:F0:D3:52:95:A5:72:DD:ED:91:D6:21:90:E7:9A:DC:34
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584EE38C8F8F2181B74B6B95EA80
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/f5743c7b-a6f2-3440-a47a-7577398443dd.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     812
IP address blocks:        162.212.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:8f:8f:21:81:b7:4b:6b:95:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=32c3c617-b4f5-4d38-831e-0e23c45369fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:30:e0:9d:b5:4f:b8:6c:2c:3b:a3:1e:02:88:
                    42:e8:dd:c2:6e:38:65:b7:a2:d9:43:e6:7d:c0:1b:
                    7f:53:20:25:2a:f8:29:2b:0b:77:2a:17:53:aa:a7:
                    20:41:01:a9:b3:5b:1e:a6:a5:7c:56:3f:b5:b4:dc:
                    f0:0d:1d:3d:a4:68:65:3a:d2:af:ed:3e:db:9d:da:
                    81:6f:f9:af:9e:19:de:d4:2a:76:35:ce:ab:b5:bd:
                    5c:69:cd:24:ec:0f:0e:1a:2f:d1:a9:16:a2:30:cd:
                    53:42:ca:ea:30:41:e6:06:f8:d8:0c:f6:9b:5c:02:
                    b8:da:d2:83:0f:f1:09:5c:14:14:c0:9d:47:ee:ea:
                    33:08:d8:74:e4:79:f0:69:b9:21:02:6f:05:3a:fb:
                    24:3d:f8:3e:03:3d:26:e2:20:f2:07:0a:75:f5:2d:
                    e9:30:c0:c5:18:39:bd:c1:57:e0:9c:e1:c1:71:48:
                    e8:56:b5:9e:47:8f:9c:a4:38:9e:fa:54:66:53:62:
                    fb:72:7f:58:07:4c:c5:57:17:17:52:ee:ba:a9:6c:
                    b8:c4:24:ac:52:c9:ef:2b:45:69:ad:76:e4:47:8a:
                    6e:40:2b:80:d6:f3:48:6f:ca:3a:5d:05:58:7f:8d:
                    69:e5:72:8e:35:28:cf:47:41:b1:db:8d:e5:d0:7d:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:65:E3:12:F0:D3:52:95:A5:72:DD:ED:91:D6:21:90:E7:9A:DC:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/f5743c7b-a6f2-3440-a47a-7577398443dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d2:1a:be:7b:29:5d:86:eb:a2:7c:15:6c:9d:d7:67:e1:6c:
         2f:59:5e:8d:8b:7f:46:54:f8:9c:18:ec:77:9a:41:16:42:14:
         8c:c6:e6:7d:4b:d8:92:04:46:75:a9:68:14:9a:03:e9:d7:6b:
         91:d1:3a:c9:d5:ce:5e:49:85:00:dd:8c:6f:42:5a:b1:36:f4:
         a6:20:fa:21:65:8e:ff:0b:80:8e:47:eb:cc:9c:96:a3:95:e9:
         91:9a:6b:38:85:9a:1d:18:2c:a3:b2:a7:cf:1b:3a:78:68:3b:
         fd:b3:b1:05:52:ec:bd:fd:7d:c1:d0:45:93:6f:bb:36:92:31:
         3c:24:a6:fa:74:46:ba:00:00:d2:f9:37:24:41:d0:bf:77:fe:
         7f:1b:c1:ea:74:25:23:87:fc:d1:d3:8d:7e:da:8f:07:02:28:
         cf:b7:50:ca:56:c7:72:db:8b:2b:db:cc:77:cd:05:88:7e:a6:
         c2:55:51:d0:ef:4c:f0:8a:8c:63:6b:62:1c:c1:24:59:ef:34:
         ca:d6:07:16:44:07:6a:5d:8c:31:12:fd:68:c7:36:da:89:1a:
         e5:1c:eb:21:e9:1f:00:45:01:78:ff:d0:15:68:ce:5a:f4:a7:
         c2:53:9e:1d:0b:ea:75:e6:74:dd:99:d9:f2:f4:82:90:c2:af:
         27:2f:01:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 15:56:27 2026 by rpki-client