Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa
File:                     d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa (raw, json)
Hash identifier:          hOeWjV+0ktmAn9cPQzam28E+BY8KWmOBWofIyAJ9ScI=
Subject key identifier:   ED:86:AF:E3:A6:26:A8:7F:17:7E:28:49:BF:F2:01:86:55:95:08:F2
Certificate issuer:       /CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Certificate serial:       010D0C9F4328584EA793BE8BB916FCBEB380AD80
Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397735
IP address blocks:        198.175.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:be:8b:b9:16:fc:be:b3:80:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=89560466-77c6-4c82-8fc2-97045da3b275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4b:5a:15:60:f4:4c:83:34:6d:65:31:73:9d:
                    0e:8d:9b:27:d6:c7:51:b1:16:07:7a:bd:d5:c8:79:
                    6a:56:b5:8c:11:a2:22:e9:d6:6c:89:7e:b7:a7:b7:
                    48:f3:03:d2:c9:e3:03:3d:48:d3:fc:38:55:08:0c:
                    ca:6a:2d:9a:21:0e:66:06:58:2b:58:15:d1:6c:9c:
                    21:3c:3e:61:7b:00:ae:ae:8e:5e:d3:51:04:04:f1:
                    4c:9c:62:ae:c6:f5:a5:1a:9a:04:93:9d:c4:b2:e9:
                    ae:f6:f3:df:a1:5f:73:93:82:50:03:69:c2:5c:d2:
                    e3:29:67:c1:4b:41:a1:a8:58:7f:c6:13:b2:05:90:
                    6b:5d:76:64:c9:cc:54:75:8d:6d:b6:ff:ab:fe:80:
                    3b:d5:aa:1e:e1:3f:bf:e7:54:18:d3:4d:9f:86:d5:
                    49:78:1c:b0:79:85:62:70:60:05:47:71:e4:f9:4e:
                    fd:89:e3:f8:93:ad:27:83:6b:ac:e2:a4:59:ee:e7:
                    4d:0c:7a:e3:bd:be:84:cd:e5:18:fd:c4:fb:a5:18:
                    60:29:3d:02:85:89:22:2b:a8:aa:c4:f0:e1:f5:b5:
                    09:75:8c:a7:2d:6f:59:a2:b0:55:92:86:99:73:f4:
                    e9:7d:be:bc:77:0c:0a:39:2f:20:b9:b8:44:05:1f:
                    6d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:86:AF:E3:A6:26:A8:7F:17:7E:28:49:BF:F2:01:86:55:95:08:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:ec:ff:9a:58:29:c9:fd:19:a8:18:35:56:15:c0:db:a0:
         6d:6a:a9:cc:9f:05:9e:91:20:65:63:51:3a:5e:69:7c:6a:43:
         e5:58:74:d5:de:57:40:a0:02:47:f4:33:8d:8d:b8:7f:61:d3:
         cd:6e:1c:b2:88:53:99:82:87:09:5e:4e:e6:0b:7d:4b:80:19:
         c3:e5:26:ba:a3:8c:91:0e:8f:e1:bf:41:5d:f9:4a:68:a7:06:
         cd:b2:55:85:cc:9d:56:77:33:34:fe:06:45:05:c4:8c:57:ba:
         48:70:28:7f:e1:f9:ce:67:65:8e:29:87:17:1a:aa:d9:5e:c5:
         ef:eb:bf:9d:35:5b:b5:97:3a:47:77:00:f6:28:41:44:53:0f:
         7b:71:7d:16:9a:79:51:6e:b3:31:0e:07:38:b3:af:fc:62:60:
         f2:63:da:9a:02:59:a2:88:b9:5a:ef:18:ee:c4:22:cb:a5:01:
         a2:bc:76:20:12:a4:f4:72:7a:68:6a:a4:d0:51:ef:2a:90:fb:
         71:64:ae:c7:5d:2b:c7:6c:83:74:05:12:e6:45:47:36:1d:f7:
         cc:3f:0c:64:e3:5c:71:f1:d1:ec:a1:94:5b:f3:27:b8:ef:71:
         48:a6:e4:f2:85:ea:88:d1:1c:ec:51:13:07:5b:ae:f9:9d:b5:
         0f:a9:e1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 04:33:06 2026 by rpki-client