Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/f1814fbb-6e62-36dc-9d54-d2183d591855.roa
File:                     f1814fbb-6e62-36dc-9d54-d2183d591855.roa (raw, json)
Hash identifier:          mQkeHdG2gzx3MvxY/am2x+A+qh8igK+kFI8V3iag7B0=
Subject key identifier:   B2:49:86:E0:0A:26:FC:1E:5B:19:D5:0A:3C:4A:99:CA:96:DE:00:C3
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F4328584EED5218C89A6EE317A412F420
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/f1814fbb-6e62-36dc-9d54-d2183d591855.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     11659
IP address blocks:        169.147.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:18:c8:9a:6e:e3:17:a4:12:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=fb9a3f83-125c-470d-8412-0b103815da57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:3b:77:12:4f:32:9c:db:96:08:4b:fe:87:
                    83:e2:4e:81:9f:3e:97:94:c0:39:52:06:1f:12:9f:
                    1f:90:d5:82:e5:ab:2c:53:23:c1:5e:55:df:0b:41:
                    af:09:33:7f:ae:c9:7c:d7:05:c8:a7:91:ee:14:df:
                    b0:44:f9:b9:05:f3:44:c8:6b:3a:86:68:b3:3b:c7:
                    74:3a:2a:ac:55:35:d4:18:ac:87:f4:69:3a:c3:1a:
                    75:08:ff:44:27:b4:80:39:4d:5f:0b:e7:76:39:d2:
                    3c:46:a9:4c:ba:13:84:d2:73:4b:23:4f:2f:06:95:
                    04:60:b2:c7:63:ba:24:d4:1f:43:53:13:3e:d0:98:
                    54:f8:8f:39:55:4c:b0:90:42:b5:db:be:59:51:fc:
                    29:37:6b:38:5b:08:41:f8:5f:45:eb:a4:df:c2:f2:
                    db:60:a9:8e:40:d4:c0:ba:89:f2:d0:e5:bf:25:11:
                    fc:48:e4:cd:5b:c4:52:1b:99:9e:4f:b0:48:d6:54:
                    fc:d5:3c:3e:06:99:ab:ad:b0:2b:cd:2f:29:ef:c2:
                    64:c5:72:53:2e:fb:8c:f0:7a:e3:4e:f9:85:56:dc:
                    92:e9:c8:80:2e:7d:5e:64:3b:1a:88:80:12:86:70:
                    a0:e8:7f:34:02:dc:b3:58:4d:78:73:22:e9:19:23:
                    84:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:49:86:E0:0A:26:FC:1E:5B:19:D5:0A:3C:4A:99:CA:96:DE:00:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/f1814fbb-6e62-36dc-9d54-d2183d591855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:da:37:c5:a7:e5:0e:18:d5:2c:bc:2f:54:7c:2a:db:84:da:
         4c:7a:a0:34:09:06:45:bb:32:92:3d:49:2e:13:37:9f:68:0f:
         1c:6d:df:eb:f7:23:f8:d6:de:d4:8f:c5:ac:99:f8:a9:7d:a4:
         28:4d:fe:74:76:07:b0:cf:de:58:63:9e:9b:26:e6:8e:25:a0:
         d5:24:77:53:de:72:d7:8c:ac:1b:7f:5d:9b:7b:b8:7c:31:e5:
         2e:c9:4d:59:04:06:87:4a:9c:da:5f:3b:b7:d0:e3:f0:80:36:
         74:30:3b:5d:46:21:da:9e:1f:ae:ab:d1:e3:b0:db:75:74:33:
         2e:40:de:ff:f0:57:bc:ae:34:4c:9f:3c:8c:eb:ee:f2:0f:72:
         07:45:c1:46:a5:ae:ca:f0:bb:3f:bc:0d:ec:eb:7a:0e:3b:48:
         97:db:d9:1f:1a:96:19:13:55:6b:35:7d:64:fb:f0:d8:40:f6:
         fb:33:25:eb:11:55:87:f2:06:a6:e5:49:17:b6:76:ed:43:01:
         74:f3:35:02:d5:4e:d2:22:21:0d:e8:89:9b:aa:07:cd:65:3e:
         02:41:eb:45:b7:b4:03:ab:bb:ed:65:1b:f0:a9:e0:f4:42:67:
         99:c7:f3:99:94:57:f6:e0:c1:34:25:25:e3:cb:71:0e:3a:58:
         7f:65:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:51:42 2026 by rpki-client