Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa
File:                     18187cff-159b-3f88-aa27-6e6e06aa0b90.roa (raw, json)
Hash identifier:          DUqwe8l0jeCxhwpiKJYPe4dqEwTVtds6kGMERATcf1Y=
Subject key identifier:   6B:70:66:79:68:F5:A5:5B:5F:9D:F3:B3:81:56:C1:76:75:0B:89:6B
Certificate issuer:       /CN=11150dfe-c654-4719-b6c3-642628555522
Certificate serial:       010D0C9F4328584EBB11BFFABD640E22B785CC00
Authority key identifier: 51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     15191
IP address blocks:        198.29.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:bf:fa:bd:64:0e:22:b7:85:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11150dfe-c654-4719-b6c3-642628555522
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=8bdde505-feb5-4707-a7fe-c8d1de77a36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:9f:b6:93:08:45:de:87:4e:4b:ef:4e:98:
                    ef:e4:6b:64:c2:6a:4d:54:3a:23:39:3d:62:fb:a9:
                    f5:b8:6f:d4:ca:b0:21:a7:11:03:e8:32:b0:32:88:
                    26:cd:ca:57:a3:bf:b5:7b:6f:76:3e:19:c1:9c:bc:
                    33:1a:53:3b:80:8e:0f:e5:7f:b7:14:84:5d:53:df:
                    1b:5b:e1:49:05:44:a3:a4:3b:35:aa:8a:f3:7d:e3:
                    af:04:fd:cb:3a:83:ef:2a:9a:21:33:5a:79:40:33:
                    8f:70:ea:24:d8:6b:43:93:7b:4d:19:51:1f:b6:18:
                    a4:f5:f2:22:0c:cb:dd:5c:c5:b8:ab:25:57:76:f5:
                    68:34:e8:ec:b1:17:87:5d:39:25:a4:47:4b:04:69:
                    c0:b6:e4:5e:49:3c:eb:dd:a4:0b:a6:22:b1:10:4e:
                    d6:87:a4:02:80:bb:66:e7:5d:fc:79:cb:b2:17:fa:
                    d2:d7:f5:6f:a4:23:7c:d5:bd:85:0e:d2:2d:c0:e6:
                    6c:bb:c4:f2:a9:be:8d:13:84:b7:b0:ed:e4:71:62:
                    fb:e7:68:e0:ef:62:cc:33:dd:cb:d2:0c:1f:a7:96:
                    fd:6d:d2:5b:ee:e9:12:ef:8c:e8:a9:15:72:0e:18:
                    8b:32:1c:6a:5b:7b:ed:40:98:6f:91:33:c3:72:22:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:70:66:79:68:F5:A5:5B:5F:9D:F3:B3:81:56:C1:76:75:0B:89:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl

            X509v3 Authority Key Identifier:
                keyid:51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.29.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:00:2f:2b:01:88:aa:64:a8:a6:77:e3:24:30:76:66:df:20:
         70:31:96:3a:8d:7b:a3:06:e0:da:56:e3:f8:c0:95:f6:49:3f:
         31:ad:cf:c1:af:b1:a3:ab:e3:4f:fb:91:4f:48:e6:15:3d:46:
         9b:f8:6a:05:fd:01:2f:a6:a9:60:e6:79:6b:19:de:9a:06:ce:
         c8:cd:46:7f:85:f7:25:16:02:77:34:41:f3:59:1c:31:e8:a6:
         f1:7e:21:11:ff:ea:b5:a1:7d:60:8b:f8:f2:e8:64:1f:b4:2f:
         1c:2b:a0:6f:41:e3:44:e9:91:46:fc:4d:5a:10:9b:a4:56:ef:
         be:d0:36:c2:68:35:37:83:43:cd:27:1f:75:26:18:f6:96:03:
         df:91:9e:21:8c:46:1f:f2:ed:50:ce:54:53:15:6b:a5:93:f6:
         73:b9:08:5f:0a:f1:63:1e:7b:d0:5b:71:91:0e:e9:87:fa:c1:
         7b:66:66:2d:2b:19:64:28:ec:bd:1e:8d:be:64:8d:db:1b:60:
         8e:89:8b:b6:18:3e:77:74:a3:56:d4:b2:60:96:48:e1:3c:e0:
         02:85:41:88:a9:5f:c3:c6:c8:17:ec:ef:d6:42:e0:72:a2:55:
         3a:b3:34:9a:5b:fa:0f:5e:a7:f4:2e:49:86:99:aa:5c:32:5a:
         77:85:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:00:29 2026 by rpki-client