Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a646c31c-2719-3146-9260-c40f59eb735d.roa
File:                     a646c31c-2719-3146-9260-c40f59eb735d.roa (raw, json)
Hash identifier:          XP0EIrlaNYSIGBCK1x2WkQXfQx9PP17Wd0HI4zrzj+8=
Subject key identifier:   7C:58:BB:E0:7E:73:4D:80:98:F8:7C:41:5D:A8:F8:F8:E5:C3:5B:A0
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EB2B1B9B10DACE9359D846FD0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a646c31c-2719-3146-9260-c40f59eb735d.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     13692
IP address blocks:        216.110.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:b9:b1:0d:ac:e9:35:9d:84:6f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=a2d21689-e06e-461f-af9c-a7f0ac246c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:c1:ef:ed:c5:55:40:5e:f3:b2:a5:30:60:
                    ad:27:94:0f:93:b0:55:05:7f:06:1b:06:1e:30:d8:
                    d7:a5:ef:1c:26:25:e2:22:7b:bb:df:04:22:24:89:
                    5a:b2:89:d8:3e:ee:0f:f4:e6:4e:22:ab:19:11:10:
                    4d:cc:cf:74:5a:ea:60:fa:7b:64:9f:87:b8:fd:0b:
                    80:da:9d:35:77:b6:f1:ad:bf:17:0d:e0:fd:71:30:
                    7f:c3:df:c6:9f:1d:77:12:c2:6c:ad:2c:c2:65:1f:
                    4e:75:ad:aa:06:3f:5c:35:84:65:ba:10:40:22:31:
                    4c:e8:c6:88:e3:3d:bd:43:c7:f0:4f:07:ca:f1:de:
                    eb:a6:2e:7e:db:b4:64:75:23:2e:53:2c:58:ef:34:
                    3f:b6:01:09:ef:ec:a3:b7:1d:e1:97:d9:b0:09:16:
                    e8:3c:9e:e4:96:68:79:ab:d0:9f:e9:a1:e5:dc:cd:
                    10:bb:c9:2e:a4:c5:43:fc:80:c7:7a:0b:e9:1d:84:
                    f8:62:75:ee:70:83:ea:43:f7:d3:dd:86:57:8a:84:
                    00:93:42:92:f3:bf:f9:75:e8:89:a7:94:7b:b7:75:
                    e1:76:0a:fe:8d:9f:1a:1b:02:f9:78:73:8a:83:51:
                    70:08:ff:5e:ef:58:79:0f:1b:28:9a:6b:0f:2f:52:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:58:BB:E0:7E:73:4D:80:98:F8:7C:41:5D:A8:F8:F8:E5:C3:5B:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a646c31c-2719-3146-9260-c40f59eb735d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0f:be:e6:00:6e:7d:b9:0f:8f:72:f5:e4:3d:27:d5:13:ca:
         e1:f5:04:a4:87:df:60:5b:df:da:24:2d:fb:bd:8b:90:bd:8b:
         12:54:d1:95:15:cd:76:0c:c8:dc:b5:be:c7:79:a8:87:35:8d:
         04:7f:8f:80:ec:73:37:68:7f:69:8c:97:ee:af:a0:cc:01:6a:
         2b:90:a8:4b:2a:1a:84:92:eb:4f:55:b0:32:8b:cd:0d:8d:9f:
         41:a7:2e:8e:67:ca:36:2b:f4:88:bc:85:72:93:98:38:95:0a:
         0b:bf:a0:64:01:6b:21:3b:24:3c:5d:60:a1:aa:e8:e2:a1:65:
         29:70:77:cb:85:b6:0b:1f:5f:b7:19:ad:80:e6:d5:bd:21:9c:
         70:52:c4:b0:db:0f:76:6e:1c:ee:9c:7e:10:19:01:81:c3:3f:
         ed:8b:39:de:8c:b1:e1:f6:97:2e:8f:40:c0:0b:c3:c9:07:a2:
         e4:eb:57:e6:b7:99:68:a8:31:c8:ce:29:d0:09:37:1a:e7:22:
         d4:37:c4:06:66:c5:78:30:da:9a:b8:cc:02:7c:7e:3e:66:79:
         c3:94:1d:43:36:dd:c2:06:9b:88:33:47:48:76:76:4b:20:66:
         a2:c2:69:a1:03:a4:bc:1a:0a:86:05:be:db:f5:e6:aa:7f:1d:
         69:ca:f8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:24:22 2026 by rpki-client