Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa
File:                     b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa (raw, json)
Hash identifier:          EWVlvuk0/cSlB4EaV8NFJQ2u7QO/vvF62vxARYxw2Qc=
Subject key identifier:   A3:C4:15:B0:E5:38:D3:9E:71:E0:EB:18:77:EA:ED:77:59:60:2C:67
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584F02422E2B2596FB345D39A700
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     11650
IP address blocks:        198.46.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:2e:2b:25:96:fb:34:5d:39:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=506e45da-1e95-423b-a235-25772165a293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:cd:91:7f:6b:13:a5:f0:e0:28:a2:35:5e:
                    13:ac:60:5c:1a:72:47:a7:37:42:1a:1b:68:e0:47:
                    63:8b:e6:dc:03:a4:bc:0c:73:48:0d:1b:19:66:b8:
                    62:19:5b:33:18:c2:0d:2b:02:12:db:df:36:98:50:
                    a3:11:7d:89:2b:9e:2a:d5:a5:59:58:95:93:9d:07:
                    d6:df:44:47:5c:45:f9:f1:d0:59:16:6a:ed:fc:a6:
                    ae:3a:7a:ab:78:1e:ed:03:79:ad:07:b6:93:96:43:
                    e9:7c:32:09:2f:63:42:cc:ae:be:5d:92:14:a4:e0:
                    14:b8:3c:2c:70:bf:dc:36:d0:3d:76:28:e9:78:d8:
                    52:45:cc:40:4f:66:d0:72:6f:d0:48:f6:a9:be:b6:
                    66:57:d1:cb:5b:97:60:b3:4a:68:5b:d5:8a:1c:14:
                    b1:7f:7c:05:af:28:fd:6b:16:df:5b:85:7d:d7:b8:
                    26:51:2b:3d:d9:e1:ee:e5:c1:7f:42:17:6c:b1:b0:
                    c7:6c:13:89:18:92:33:9e:f8:74:b9:e6:62:65:d4:
                    6c:f5:99:38:ea:3d:f8:84:a2:d1:03:b2:86:42:30:
                    9c:dc:f6:02:8b:d2:99:11:ba:00:40:f8:27:3f:5b:
                    f4:29:ee:08:72:37:dd:d9:05:ff:37:df:50:ad:b6:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C4:15:B0:E5:38:D3:9E:71:E0:EB:18:77:EA:ED:77:59:60:2C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/b810e319-cb8b-3cfc-8a59-ef8e0a611ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.46.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:02:7e:bb:c4:04:e8:03:04:67:a8:b3:08:68:cb:a8:74:
         8b:61:43:2a:a1:8c:85:9c:85:ec:13:ab:ae:49:ec:2e:03:29:
         d6:3b:f0:15:64:58:f7:d5:fb:14:98:6a:dc:15:7f:67:29:d2:
         36:ac:4c:7e:f5:19:e3:59:ee:32:52:01:e8:44:e3:16:80:c4:
         36:c1:3b:ca:c9:78:d0:1e:1b:bb:6c:be:d5:fc:87:b0:8d:58:
         aa:15:a7:80:29:b6:0a:ef:74:9a:63:c3:db:59:7b:66:e0:8d:
         da:4b:2c:9b:e5:52:0d:5c:90:1b:51:3f:e0:f0:4d:5a:ab:73:
         bb:ef:00:d7:fa:86:d3:b5:eb:b3:e3:0b:4a:1e:df:8c:d6:8b:
         76:6b:7e:8c:2e:ed:9b:55:8a:4c:53:fd:25:6b:bb:dd:72:82:
         76:e8:7b:14:f0:ce:fa:0b:e9:86:83:75:08:14:66:6d:ac:0c:
         9e:5c:c9:83:5e:36:ca:dc:84:c8:88:2a:50:b8:41:27:9c:0c:
         5a:cf:d6:b0:09:c3:d6:f9:a5:35:0b:f7:89:7c:6e:f8:31:4b:
         75:a4:9e:b6:24:da:ab:72:0d:16:3f:17:f6:53:5f:55:ef:99:
         84:b9:6d:cf:f7:44:57:be:59:bf:ce:3f:9e:8a:55:39:e9:b9:
         c4:38:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:51:43 2026 by rpki-client