Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e0f13160-9c37-3768-a2a8-bfb424bf8264.roa
File:                     e0f13160-9c37-3768-a2a8-bfb424bf8264.roa (raw, json)
Hash identifier:          SUtDE3Ps6W+uMGZWJ7LS9HQ5+jNk19sLD8I/tmz4DsI=
Subject key identifier:   5B:E5:55:E2:63:33:46:9E:D5:83:6D:07:36:1E:37:63:D7:8B:92:63
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584F0242296AA1F26937F3A76F80
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e0f13160-9c37-3768-a2a8-bfb424bf8264.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     7979
IP address blocks:        172.85.109.0/24 maxlen: 24
                          172.85.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:29:6a:a1:f2:69:37:f3:a7:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=7cbedc6a-56a4-4d43-abe3-163b391e4dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:0e:ad:7c:e7:61:34:62:dc:aa:f9:a4:a5:
                    fb:36:7b:ea:32:8e:7a:00:50:0f:1a:c9:fa:92:e2:
                    2b:c7:94:93:72:16:ce:07:27:5b:d4:92:38:85:37:
                    e8:7e:66:30:1f:68:e5:5b:ca:be:35:2a:cf:b8:ec:
                    13:7c:2f:97:64:07:e3:c5:5e:00:5e:af:1a:8f:5e:
                    02:a3:a9:cb:06:24:a0:19:82:4c:16:1e:40:ff:cd:
                    f3:96:db:0f:9c:24:9d:8e:16:64:86:54:71:5f:8b:
                    09:65:f0:24:7d:4e:91:4f:e4:36:e9:e7:d3:a8:be:
                    9e:b7:b4:ad:43:b0:19:9d:d3:0c:b7:46:c9:6d:cf:
                    c1:38:0c:2d:99:54:f7:50:00:dd:1c:37:d5:75:3a:
                    f2:8d:a2:6a:01:45:b5:b7:ce:62:d3:ee:be:2c:6b:
                    d8:22:9d:55:60:3d:bc:e9:61:d3:cf:93:6b:48:57:
                    0e:6b:e0:69:fa:cd:f3:6b:5f:e6:15:b0:52:87:01:
                    aa:56:37:26:51:14:70:5b:73:75:f0:a7:20:f5:35:
                    f6:25:69:65:ed:94:64:41:bc:c9:a2:fb:fa:32:91:
                    b3:dc:d6:82:dc:b7:ab:3f:b6:6b:05:a6:08:45:80:
                    1b:8e:d0:5b:98:54:a0:35:22:7b:16:80:a7:fe:b6:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E5:55:E2:63:33:46:9E:D5:83:6D:07:36:1E:37:63:D7:8B:92:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e0f13160-9c37-3768-a2a8-bfb424bf8264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.109.0-172.85.110.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fc:82:43:d5:1b:5c:eb:87:51:06:0c:47:7e:ab:ba:b2:6e:
         bc:ea:6f:c7:2a:62:b9:5a:9e:2a:7f:4a:c9:ef:a3:4b:73:49:
         8a:cb:c5:b3:e4:f8:50:62:58:65:4c:9c:c6:ec:b8:00:2a:7a:
         92:62:e4:5d:97:db:59:67:4c:b2:95:46:74:b1:93:ea:c7:d1:
         6b:92:ba:33:bb:d2:0f:50:55:59:33:8a:1f:8f:89:9e:b9:62:
         fd:1d:59:b7:48:64:6d:b3:f8:ac:ff:62:36:fe:91:e0:cd:6f:
         8b:33:fa:35:f5:a5:a7:c5:09:d3:af:dc:61:31:17:64:14:4e:
         94:7a:dd:27:1e:04:5b:b0:a4:63:6b:e6:8f:5a:47:74:27:f5:
         41:bc:b9:7c:42:a6:76:d3:f6:9f:98:18:ca:d4:f5:63:be:18:
         03:37:5d:bb:c4:b5:4e:e7:93:cc:51:ae:1f:d7:a1:84:49:95:
         0a:ec:90:73:59:f2:e0:32:b9:09:f4:b2:e4:0b:b6:da:64:9c:
         9c:6c:d2:21:02:18:f6:e7:5c:0e:16:36:62:c6:1c:06:0e:46:
         66:bd:15:d3:ee:c0:5c:51:36:37:3a:cc:ac:5a:01:d4:c2:61:
         e1:de:c7:4c:f4:18:4c:21:e2:6c:50:d1:f1:87:fb:bd:c1:31:
         4b:c6:72:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:53:33 2026 by rpki-client