Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/20e88352-3861-3495-97d6-3a5e655c6113.roa
File:                     20e88352-3861-3495-97d6-3a5e655c6113.roa (raw, json)
Hash identifier:          gynyXsEZwJ3OCqDsUXFdGnxpz89PpWTw1T5eXVGUeVQ=
Subject key identifier:   99:7E:DB:7E:AE:AC:53:26:9B:CD:E8:59:CE:98:7C:B5:EC:34:74:DE
Certificate issuer:       /CN=f7f8499b-2456-4be8-bad9-ced434198fa0
Certificate serial:       010D0C9F4328584DD78B1D0DFC4E8C05858BBA00
Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/20e88352-3861-3495-97d6-3a5e655c6113.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     7896
IP address blocks:        129.93.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:1d:0d:fc:4e:8c:05:85:8b:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=39bc6de4-3bd7-49dd-a1fd-fd010bf645d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b4:4f:94:55:d0:2e:ed:e0:02:13:8e:72:fc:
                    d9:73:17:37:e6:0d:e6:e6:44:92:ab:7a:ad:a6:8a:
                    b4:d1:7d:12:c2:a4:3e:64:45:d5:e8:53:ef:b0:f5:
                    db:80:4a:7d:70:9d:f1:1d:0a:10:85:30:e6:12:ef:
                    7f:b4:08:52:f4:54:48:1b:e9:ad:74:b6:6b:c5:08:
                    9e:0a:3b:03:f9:29:e2:b2:7a:df:d7:d3:a1:41:82:
                    c1:8e:22:f3:2e:3c:64:6a:4f:d9:20:90:c4:96:1c:
                    ab:8b:e7:35:f0:04:43:8f:3d:a7:15:f5:d9:cc:e8:
                    69:93:ef:e2:71:f1:f0:a9:2d:bf:ef:81:29:50:d9:
                    c6:c8:f3:43:86:a6:07:d5:83:8c:23:28:47:32:d3:
                    68:8b:1f:94:ff:62:e5:3e:34:e1:ee:0c:7a:65:7e:
                    ef:66:b0:15:40:ba:cf:f6:82:9d:05:0f:ac:36:5b:
                    32:de:09:02:8c:b3:84:b6:47:d3:93:9b:d9:7e:05:
                    8f:37:9f:7a:8f:1f:a0:0a:50:a4:8e:fc:aa:e1:d1:
                    b1:6b:b5:89:da:18:14:b3:9c:7f:0e:80:48:51:ec:
                    c7:ee:8f:b7:01:c5:de:25:ea:8d:92:c0:6e:db:76:
                    51:76:07:be:86:0a:4f:f4:ef:26:e9:9e:8d:75:50:
                    e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7E:DB:7E:AE:AC:53:26:9B:CD:E8:59:CE:98:7C:B5:EC:34:74:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/20e88352-3861-3495-97d6-3a5e655c6113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl

            X509v3 Authority Key Identifier:
                keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.93.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:63:b2:4b:47:93:6f:11:4e:51:80:cf:8e:54:08:d4:ee:18:
         4b:03:b3:52:6d:10:ec:ba:a0:4f:d2:87:4a:85:9c:af:73:d5:
         6e:15:d0:ba:03:96:a2:c0:ea:96:fd:15:bb:8b:a4:62:eb:85:
         32:8d:20:90:28:85:57:01:c4:b1:67:ab:05:5b:e4:4b:c3:0f:
         e5:36:eb:76:69:cf:86:06:25:b1:3d:24:81:9b:14:26:84:ec:
         ea:cf:3d:29:a9:01:55:ef:e7:12:6b:42:19:18:c4:0a:a5:39:
         68:04:be:be:f3:50:2b:52:9d:ca:68:c5:12:6b:c5:c5:e7:6d:
         04:a0:f5:61:84:af:b0:50:a6:6a:9b:63:a2:8a:9f:83:df:58:
         f8:fd:41:dd:18:4e:17:6c:6f:1c:eb:3b:01:4e:3a:2a:15:72:
         e1:77:bc:3c:b9:36:82:f8:20:f9:19:53:27:3a:b2:b9:db:fe:
         66:01:81:88:64:86:c1:f8:2d:24:3e:06:b0:3b:30:cb:ed:a7:
         a0:b9:50:67:ab:10:23:41:30:8e:0a:2c:92:69:0d:6d:f5:36:
         66:bb:cf:7b:e9:ee:e4:67:21:15:ad:a5:c9:d5:54:00:0f:58:
         8b:bd:16:16:f0:63:35:b0:2d:b3:ed:53:03:78:bd:14:87:6e:
         f2:b5:0f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 20:11:43 2026 by rpki-client