Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/09023f97-e944-3d62-a33e-406827f9d76d.roa
File:                     09023f97-e944-3d62-a33e-406827f9d76d.roa (raw, json)
Hash identifier:          jw093+qwx+K3EboOw7LX+T4py4qFHHZV1lCLMc9ZIzc=
Subject key identifier:   57:34:DF:30:15:5E:95:3D:C7:F8:1E:CB:7F:D6:57:26:76:BF:1E:14
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584ED9C7415B95158F6C3D920E40
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/09023f97-e944-3d62-a33e-406827f9d76d.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     16904
IP address blocks:        199.96.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:41:5b:95:15:8f:6c:3d:92:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=d28f9659-0679-4120-bf59-0970c0aa0cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:11:98:22:9d:0d:d8:76:2f:1f:4d:f2:54:
                    d2:90:53:9a:44:19:74:b1:bc:c8:a5:3c:b7:0d:c7:
                    89:aa:c6:db:76:b7:4e:d8:36:2c:7c:3c:a1:90:9c:
                    36:67:5f:37:c4:ab:23:bf:bd:44:0f:8f:7f:d2:75:
                    11:1a:a4:ec:66:94:53:65:a5:2c:11:24:71:4c:65:
                    3d:80:eb:cc:ce:98:94:47:ab:5a:ae:a9:1b:55:e7:
                    0b:d9:c2:d4:b8:a5:6a:d6:bd:0d:8d:3a:6d:69:1a:
                    6c:e5:d7:c6:98:4a:10:59:81:82:7a:eb:82:5c:6f:
                    64:26:df:72:79:2e:3d:b9:1e:1d:82:7c:6b:be:84:
                    86:de:77:29:08:7c:90:04:bb:b3:61:20:13:76:e6:
                    dd:ac:89:cd:ad:d7:ab:83:8c:b6:61:97:6b:65:e1:
                    ef:96:b3:d6:29:7d:9f:b8:1a:5c:c6:1e:e3:2b:91:
                    63:e0:ca:c9:01:63:45:57:ff:9d:b6:2b:ac:f0:54:
                    8e:f1:c9:d7:87:d0:1b:43:36:12:59:1c:27:a5:90:
                    18:82:2c:32:c1:93:c7:eb:7b:ec:92:20:76:34:0f:
                    a0:66:90:df:bd:49:52:3a:97:6d:25:0a:43:a0:53:
                    c8:3f:5f:2b:8d:f4:61:35:a2:ff:86:26:3b:46:9f:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:34:DF:30:15:5E:95:3D:C7:F8:1E:CB:7F:D6:57:26:76:BF:1E:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/09023f97-e944-3d62-a33e-406827f9d76d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:21:b8:97:49:20:c6:20:74:63:6a:7d:09:d9:7e:fb:8d:6e:
         83:3d:2a:fb:9e:3e:b9:25:9c:98:d9:3a:de:ae:e3:fe:d6:3e:
         a8:b7:ba:ba:41:46:cb:05:f0:62:80:57:ef:f6:72:4f:35:b5:
         95:1b:78:f8:9a:b0:f4:37:80:0c:1f:24:5c:8c:35:1e:1e:89:
         b7:6b:c6:9e:1a:b5:fe:03:aa:b8:ff:85:d1:b9:30:2d:e2:b9:
         f6:b2:f4:a7:3f:ef:2b:9d:44:ae:41:f0:ee:ee:9a:3d:a6:65:
         b1:78:6b:65:4b:9b:50:6b:91:56:69:3b:1c:95:33:10:23:31:
         51:bf:5b:fb:07:c2:af:62:dd:73:4b:4e:8e:1d:6f:ce:e2:7b:
         28:08:58:69:f2:25:16:d5:ad:81:89:84:83:35:34:ab:04:f4:
         1c:50:ae:9a:b0:bd:9c:40:61:e4:6b:25:ce:08:44:ce:1e:a0:
         ff:1e:75:3c:d3:af:24:44:25:1b:2d:97:56:4f:bc:96:81:29:
         3a:33:25:4c:fe:8d:42:58:3f:a5:13:70:5f:6a:87:4d:2d:ee:
         05:27:f7:a7:23:f9:f5:fa:35:0a:07:a7:0e:37:4b:bf:39:a1:
         f1:5b:ec:fb:cf:9f:72:b9:86:18:f2:bc:9d:53:31:84:59:b2:
         36:1d:e0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:13:10 2026 by rpki-client