Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa
File:                     8345228f-8d57-3f90-97d1-76ce96dca4d7.roa (raw, json)
Hash identifier:          5lgfLZyV9/K8W2CnKqa2pFlU1HXGjH/WUQvR6xXJ1ac=
Subject key identifier:   98:35:91:03:19:DB:D2:ED:57:3F:E5:84:19:EB:70:55:E6:DA:75:5D
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584E5A4A072D0B80760AEBFA10A0
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     30041
IP address blocks:        199.187.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:07:2d:0b:80:76:0a:eb:fa:10:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=0c2c96ac-50b2-4fe8-9e57-7393d5bbcb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:8c:53:b5:f1:48:ee:58:37:6a:2b:dd:68:
                    4c:6f:8d:dd:b8:77:6b:3d:d2:67:0a:33:b1:04:93:
                    49:14:ef:ae:a9:48:c4:b9:60:74:b1:61:2f:f7:c1:
                    c7:89:d4:cf:3e:a4:b3:e9:c8:47:a7:ae:a0:18:7c:
                    6f:4a:fe:e1:54:6d:a7:03:fe:c6:73:a5:2f:8b:83:
                    74:46:08:3a:79:bb:f7:6d:8d:9a:b8:54:59:7f:8c:
                    f2:a7:c2:ab:8b:ce:68:90:db:12:1f:38:15:79:1c:
                    07:7c:63:df:57:a0:f6:df:39:7d:c9:a3:f8:b0:31:
                    1e:64:46:c9:0b:ff:4b:35:d8:01:85:8d:bd:fe:a1:
                    62:bc:22:3e:83:3e:26:f3:24:6e:8b:a2:76:f3:d7:
                    21:9a:48:67:f5:c5:f3:83:73:d8:e2:97:0a:fb:a3:
                    a4:94:42:47:ee:10:a6:25:92:ed:6a:65:30:32:89:
                    63:c2:01:d1:8b:bf:a4:71:85:d8:df:8b:dd:30:a7:
                    8d:47:e4:da:ad:89:54:bc:ff:74:a7:d4:fd:5e:89:
                    94:d7:25:66:d4:de:aa:5e:0a:66:74:a9:67:aa:45:
                    3c:bd:d0:87:02:9c:c9:6f:8d:2a:40:a4:88:22:83:
                    ff:2b:38:0b:f8:33:fd:35:9b:04:23:1f:7a:d9:7a:
                    c0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:35:91:03:19:DB:D2:ED:57:3F:E5:84:19:EB:70:55:E6:DA:75:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:df:3d:d4:30:4d:b1:d1:11:b6:8c:b1:bf:e6:84:f3:53:f9:
         88:fd:bf:04:f8:f7:6e:b1:d1:6c:8c:93:59:91:f5:47:7a:ea:
         15:34:d3:62:53:52:60:fa:53:ff:7a:d0:ed:32:ec:96:79:e6:
         68:42:29:5b:be:a4:c8:c9:26:35:38:84:bf:e6:5d:52:5c:91:
         6e:ed:b9:4e:88:74:29:7b:54:ed:c2:01:9c:37:14:20:03:44:
         d1:d9:b8:0b:67:99:b3:4f:a9:7d:54:1e:a2:12:d0:ea:96:84:
         9d:3a:dc:00:1d:8f:65:87:ab:dc:e7:6a:31:7c:0c:f0:b5:40:
         e1:f1:2c:53:09:3e:8e:93:5a:d9:8c:23:91:5b:1d:bf:c5:65:
         d8:59:cd:58:a6:6c:28:7f:ae:b6:3c:26:0b:f7:ac:bf:2a:94:
         e8:68:cf:2d:cb:e2:f3:51:8f:f2:57:a9:5a:e3:3f:8e:49:bc:
         01:35:a0:d2:03:c3:d3:cb:d5:46:a8:97:6d:ec:09:67:de:42:
         ef:2d:36:ba:f6:8d:c0:5d:5b:6f:cf:fc:0d:f1:48:56:76:69:
         a6:ac:5a:09:cb:ab:92:25:24:50:17:b9:c5:2e:5b:c4:d0:70:
         cf:d5:6e:fe:f3:c9:2f:07:19:9f:f0:48:16:ff:9b:75:3b:1b:
         f8:2a:28:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 22:36:16 2026 by rpki-client