Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb2251df-91fb-3b05-a6d9-5c6c4fe0fd0f.roa
File:                     bb2251df-91fb-3b05-a6d9-5c6c4fe0fd0f.roa (raw, json)
Hash identifier:          MVuMYk6PpGW8bssTmGtsCNEt880L8qzVQIlZt9jzK9E=
Subject key identifier:   82:19:21:90:88:7A:45:CB:7C:BF:C0:E5:86:FE:B4:66:DA:01:9B:13
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584ED001E0FCD24CA829C76AA140
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb2251df-91fb-3b05-a6d9-5c6c4fe0fd0f.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     22225
IP address blocks:        173.251.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e0:fc:d2:4c:a8:29:c7:6a:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=5869cbc4-0f4e-424e-8928-e051488b893f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:a9:dd:fa:50:a7:ee:79:45:a1:03:1b:0d:
                    3e:6c:fe:c8:1d:64:fa:c8:7f:5a:43:23:6e:18:51:
                    b8:ed:d0:7e:36:e6:ff:0d:04:94:44:45:19:6f:52:
                    dd:4e:92:b3:f0:56:1b:7f:a2:53:bf:bb:8a:8f:3b:
                    47:18:a1:e9:49:4b:db:6b:7e:f4:7d:98:b0:97:c0:
                    f5:09:cf:1b:21:48:71:5e:f9:cd:fa:f2:6e:df:a3:
                    17:da:30:d6:61:37:3d:9b:7a:30:1b:2b:df:d9:cf:
                    2e:72:b7:72:21:be:70:33:58:6d:54:58:82:5c:1d:
                    95:d4:6e:5b:06:91:94:f3:22:42:70:82:6d:ee:36:
                    1a:e2:58:0c:fe:1c:15:12:0e:db:05:c8:74:1e:5c:
                    b6:76:e1:66:29:59:85:93:28:20:8d:53:6c:9c:88:
                    62:56:8c:b4:c4:ac:e4:7c:61:3e:f6:e7:c6:b3:dd:
                    8e:3e:08:31:d2:76:e4:dc:ac:2c:42:3a:31:aa:a5:
                    78:26:98:6e:d9:74:60:10:c7:19:9c:fb:ba:e5:fa:
                    11:8e:e5:c2:f2:31:53:7d:33:2e:f1:1d:03:9b:ec:
                    67:a4:df:53:24:bf:c8:a3:1d:aa:48:98:85:09:9a:
                    7d:53:d0:74:61:22:61:e3:4b:58:40:e0:44:d8:96:
                    e3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:19:21:90:88:7A:45:CB:7C:BF:C0:E5:86:FE:B4:66:DA:01:9B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb2251df-91fb-3b05-a6d9-5c6c4fe0fd0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.251.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:af:d7:c1:61:a8:5a:b1:c0:09:eb:10:72:d2:9b:5d:09:01:
         b0:61:20:6a:96:71:9d:25:70:3e:f7:57:93:2c:2e:2a:97:4b:
         b2:e1:2a:53:89:50:b2:97:03:5f:a2:9c:7f:1d:cc:50:e9:3a:
         4b:7a:cf:8e:ba:90:0e:09:66:50:01:c6:6d:b7:8c:da:32:d9:
         d4:2b:df:29:a7:bc:a1:db:08:fc:82:17:da:04:a9:b0:d4:e1:
         4e:3b:27:d1:70:51:c4:13:9a:5b:44:57:ba:78:52:25:92:b5:
         ad:eb:2e:e1:8d:94:08:9f:17:ce:85:8e:f7:23:7d:36:5b:11:
         5f:89:24:49:5c:f2:a3:af:34:c8:76:0d:d3:04:b0:a3:db:ef:
         bb:9c:52:db:5b:48:75:7a:e4:b8:b8:ab:d6:4e:cb:d4:e1:e1:
         16:53:a3:ff:25:0b:c8:cb:1b:af:7f:ad:6d:5e:cc:6c:85:9a:
         09:93:eb:ad:1c:d0:59:77:19:cd:90:9e:65:60:b8:f7:77:4e:
         f9:8c:db:0b:a8:03:15:24:98:c3:51:79:49:b6:e5:e9:3b:17:
         b9:db:a9:9c:1d:0f:b6:89:26:7d:19:ff:bc:a3:a8:41:33:e3:
         db:c5:0d:03:7c:88:db:5a:98:87:5b:85:ef:8c:c3:10:92:d6:
         9a:97:1e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:44:01 2026 by rpki-client