Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231/04560c15-e65c-3eef-a7f1-d75bf7ad788e.roa
File:                     04560c15-e65c-3eef-a7f1-d75bf7ad788e.roa (raw, json)
Hash identifier:          PrdtJBKFLbd0OtB27/XzD88YrYH1Wy3HegRAvz+mIYA=
Subject key identifier:   B9:07:E2:5F:EF:33:F6:92:65:57:95:5B:75:14:28:E2:97:30:AF:E9
Certificate issuer:       /CN=3e1d3dca-2f2f-49aa-a65b-05f26be89231
Certificate serial:       010D0C9F4328584EBA486450C8DA0B0E77095C80
Authority key identifier: B5:D7:5C:57:C0:C7:39:34:AF:E7:53:41:88:A0:F9:C7:96:32:BC:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231/04560c15-e65c-3eef-a7f1-d75bf7ad788e.roa
Signing time:             Tue 04 Aug 2026 18:14:44 +0000
ROA not before:           Tue 04 Aug 2026 18:14:44 +0000
ROA not after:            Mon 02 Nov 2026 19:14:44 +0000
asID:                     399962
IP address blocks:        199.195.60.0/22 maxlen: 22
                          206.220.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231/3e1d3dca-2f2f-49aa-a65b-05f26be89231.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231/3e1d3dca-2f2f-49aa-a65b-05f26be89231.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:48:64:50:c8:da:0b:0e:77:09:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1d3dca-2f2f-49aa-a65b-05f26be89231
        Validity
            Not Before: Aug  4 18:14:44 2026 GMT
            Not After : Nov  2 19:14:44 2026 GMT
        Subject: CN=063601a7-f95e-49cc-bb1b-545baaa9391b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:89:0f:f6:a8:ec:39:ae:c2:29:e0:26:98:63:
                    37:c1:01:e2:ed:bb:23:da:37:67:d6:f8:3e:2a:3e:
                    c0:b9:7b:b8:4b:59:7b:2e:b1:b0:0c:3c:cc:37:b2:
                    a4:6a:05:3a:64:23:47:a1:8c:a4:7e:c1:77:82:6e:
                    aa:52:eb:2a:7c:09:3a:95:68:c4:e1:1d:c6:86:f1:
                    9b:a6:05:51:db:6a:1b:4d:8c:b7:af:52:48:fb:39:
                    44:a2:7f:c6:34:a7:0c:8b:33:9b:b7:b5:c3:f8:50:
                    ba:65:5b:27:2b:d4:c2:53:c1:6c:96:69:74:fa:ff:
                    1d:b4:b4:1e:3a:5c:d8:26:7d:d6:ed:dc:69:1a:f1:
                    56:83:fa:f1:0f:66:7e:98:37:f6:5f:9e:2e:9c:b4:
                    7e:22:e3:dd:9e:68:49:30:1c:73:f0:85:5f:35:cc:
                    0a:b2:55:a5:29:7b:02:0f:c6:24:04:d6:5c:76:3d:
                    2d:7e:dd:90:85:1b:41:ce:d8:84:52:82:ae:9d:e7:
                    bb:4f:67:41:f6:01:03:fa:ba:cb:42:69:9d:92:c2:
                    34:a6:83:25:28:a3:76:b8:c2:2e:e7:b3:db:0b:19:
                    97:bf:e1:b1:75:a1:9e:cd:b0:cc:97:33:3f:e9:3d:
                    d3:a6:81:6a:31:0f:09:fd:8f:76:9d:05:4c:e0:1f:
                    d4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:07:E2:5F:EF:33:F6:92:65:57:95:5B:75:14:28:E2:97:30:AF:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231/04560c15-e65c-3eef-a7f1-d75bf7ad788e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231/3e1d3dca-2f2f-49aa-a65b-05f26be89231.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D7:5C:57:C0:C7:39:34:AF:E7:53:41:88:A0:F9:C7:96:32:BC:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e1d3dca-2f2f-49aa-a65b-05f26be89231.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.60.0/22
                  206.220.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:96:2a:4f:6e:60:c9:a5:ec:f6:55:80:a9:31:14:46:01:ad:
         1f:5e:bb:b5:01:6a:5b:13:f8:d5:c8:ba:67:11:c4:04:13:e4:
         ef:8e:51:6c:e4:e6:a8:06:cf:5b:05:a7:34:16:6c:46:0e:2d:
         ef:22:95:a5:ee:92:1b:20:10:8e:c4:d5:7f:74:5c:10:3a:ac:
         dc:29:07:46:28:06:a5:b9:e5:b5:6c:a0:32:c9:1e:6f:e5:9f:
         2d:89:38:92:02:62:9d:fc:2e:b3:7e:df:c2:17:9d:7f:de:b4:
         ee:8a:5b:f0:79:a7:5c:8f:0d:f5:8d:46:fc:67:c7:6d:36:a9:
         ca:d8:93:b3:37:cc:37:fb:34:87:14:06:ad:31:99:5d:95:5a:
         2c:30:37:04:32:34:5b:b0:e3:c9:fd:c3:9c:bb:36:ac:40:96:
         88:0e:aa:07:61:24:68:bd:7c:13:be:d9:12:ab:f7:7c:92:e6:
         98:7a:36:56:f3:95:64:a4:fe:89:39:74:11:2b:f7:b3:80:18:
         9d:a3:73:56:61:ef:4b:95:87:72:26:4c:ab:fd:0d:57:3f:23:
         12:a0:81:ca:0a:02:e1:07:de:4e:dc:e0:36:1a:dc:56:36:2a:
         a8:d5:bc:7a:13:51:d9:ae:89:6e:31:bb:95:d0:32:97:60:67:
         25:c4:36:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:59:16 2026 by rpki-client