Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/1c2eb888-b2c0-379d-8a77-cc5b58784197.roa
File:                     1c2eb888-b2c0-379d-8a77-cc5b58784197.roa (raw, json)
Hash identifier:          fHdhD1f69V7CEFuutlXcHQfh730wF1DNbQQmMn3hJhA=
Subject key identifier:   4C:ED:EC:EC:6E:35:9C:B7:A4:8C:57:32:88:48:88:AE:B8:5B:4A:40
Certificate issuer:       /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Certificate serial:       010D0C9F4328584EDC9201D595392F0CC5D9F280
Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/1c2eb888-b2c0-379d-8a77-cc5b58784197.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     2496
IP address blocks:        129.237.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:01:d5:95:39:2f:0c:c5:d9:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=ef3c8b72-9015-4cb4-8b20-af4ca06eda87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:8d:e3:62:26:27:1b:c9:79:39:6d:41:50:
                    41:4b:11:9f:b0:e6:ef:95:24:ca:3d:a0:b4:81:3a:
                    65:b9:40:1c:68:7e:40:ea:ed:4f:31:33:9e:84:f6:
                    0b:16:cd:66:2e:ec:9c:64:f3:97:63:e4:6e:86:4d:
                    a7:b7:51:30:ef:d2:ff:0b:41:d9:b5:00:8a:4c:3b:
                    c7:18:4f:13:47:af:83:2a:bd:6b:40:29:6f:9e:13:
                    eb:48:37:a9:f4:12:9c:27:04:d3:8a:c8:69:4e:70:
                    c1:35:8c:f6:d1:4a:4b:ec:15:46:71:a4:1c:fd:19:
                    38:9a:ae:8c:93:75:90:9b:d7:39:48:54:58:2d:20:
                    e6:f1:83:cd:21:b8:de:2d:98:3c:96:43:65:cf:b6:
                    98:8f:05:fc:14:61:0d:7b:e6:fb:d1:09:e2:69:c7:
                    08:30:37:63:a3:6b:1f:c1:a9:3e:2f:da:43:e5:e4:
                    dc:61:dd:6f:94:cd:3d:a7:76:94:ab:18:05:e5:2f:
                    9f:d6:08:e1:58:70:fb:51:7e:f5:fa:82:71:95:b1:
                    16:67:5f:a3:34:37:d4:3a:93:0a:66:81:02:d6:e9:
                    db:68:fd:d5:9d:ef:1d:41:09:b6:1b:07:c4:e1:ec:
                    b7:f3:4f:e9:58:74:83:23:91:93:71:e8:ff:20:6e:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:ED:EC:EC:6E:35:9C:B7:A4:8C:57:32:88:48:88:AE:B8:5B:4A:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/1c2eb888-b2c0-379d-8a77-cc5b58784197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.237.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b5:b1:c4:7f:c3:3d:65:93:71:fe:1a:15:79:6c:a9:50:1c:
         13:a4:d9:cf:ff:39:58:26:b9:1a:c8:3a:4d:0e:dd:5d:b9:7c:
         75:52:03:35:38:08:cb:93:21:0f:30:15:ca:93:f8:10:d2:56:
         d6:4e:9e:4f:c8:57:24:b2:19:f1:94:ca:94:6c:ef:43:29:5b:
         9b:e9:e7:0c:4a:0e:92:dc:c1:7d:3d:80:16:2a:69:05:67:cf:
         60:54:df:00:38:05:4b:0e:4a:c3:22:ac:47:89:c7:b6:00:0e:
         8e:54:78:18:f6:96:59:05:98:e2:f4:ed:a5:7a:f9:8f:b0:cd:
         7e:a1:c0:c8:34:32:50:24:86:59:d1:4b:4e:3e:14:1d:3b:24:
         a5:90:41:8b:3f:4b:04:e9:cb:1d:45:56:a8:8b:c0:23:7d:57:
         2a:b2:17:67:75:f5:4c:8f:eb:36:ec:9e:20:3c:cb:14:8e:a2:
         ec:16:ed:20:18:d0:04:eb:29:f7:7c:25:9d:da:f8:69:da:9b:
         69:df:85:53:fe:ea:a8:7f:a6:5d:05:65:7f:8f:41:d9:50:62:
         40:e6:f0:16:bc:21:18:8b:73:6a:73:28:30:c3:ff:86:f2:e0:
         e1:67:d9:80:60:bd:8f:0e:d8:21:f1:6a:98:4b:dd:27:37:74:
         a2:b5:3f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:25:58 2026 by rpki-client