Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7629f5ae-a558-3ad0-ba44-6f902b9c9fd1.roa
File:                     7629f5ae-a558-3ad0-ba44-6f902b9c9fd1.roa (raw, json)
Hash identifier:          KKP65umzMfFqD0vnCMyuSWTEXQ3Db2rQLLhiwo0pHKc=
Subject key identifier:   1D:AC:D9:D7:A5:8A:4C:56:8D:CD:DB:81:60:36:28:E2:1D:53:CF:B3
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584EA788BC416501765148C2B580
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7629f5ae-a558-3ad0-ba44-6f902b9c9fd1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11377
IP address blocks:        216.20.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:bc:41:65:01:76:51:48:c2:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f57c01c8-f80d-41a9-9adf-68e3673139d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:34:94:4c:e4:76:89:68:ac:a3:3a:68:df:
                    8e:c7:2d:9d:03:3a:3b:f0:de:1e:17:fc:b7:b5:ae:
                    8b:e4:c5:b2:b1:4e:2d:14:5a:ba:b6:96:8c:b7:20:
                    44:06:09:9d:b5:e6:cc:03:fa:2e:bc:cb:e8:38:4c:
                    1d:ec:93:41:3a:fb:a3:de:63:38:12:eb:99:de:35:
                    40:45:3f:5f:25:20:29:fc:5e:3a:53:8f:2f:d4:bd:
                    11:f4:02:07:bf:a4:71:8c:0f:65:ca:a5:4c:61:a7:
                    23:a3:90:ba:17:f9:6e:5e:1a:94:e0:e4:7b:dd:37:
                    8d:2f:0d:85:19:fa:39:54:87:56:fa:62:f3:93:3d:
                    87:9d:ea:b4:bf:6b:d1:2b:a1:cc:0e:8e:a2:a3:78:
                    2d:17:76:31:7a:d3:d8:54:8e:c8:46:1e:27:57:66:
                    aa:d4:3f:58:0f:a9:b6:cd:3e:02:86:33:b6:cb:0b:
                    d3:92:41:98:26:b3:27:7c:e9:64:24:81:7c:2f:0e:
                    a1:a6:02:07:19:89:0e:fe:2e:3d:98:0d:e5:37:89:
                    e5:88:59:fb:56:d5:ee:0c:e1:88:7f:38:28:57:47:
                    87:db:61:27:a0:d9:7a:72:a3:3c:f2:00:8a:53:ce:
                    23:ba:50:c4:f1:10:85:7c:39:ef:b1:f2:e3:8c:52:
                    22:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AC:D9:D7:A5:8A:4C:56:8D:CD:DB:81:60:36:28:E2:1D:53:CF:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/7629f5ae-a558-3ad0-ba44-6f902b9c9fd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:99:d0:15:f8:dc:ff:3b:03:9a:94:93:cd:96:b4:af:9c:e4:
         eb:f9:dc:06:6e:1d:fd:38:e0:75:00:df:f6:e4:d6:6f:ed:50:
         43:6b:54:5d:58:04:33:ae:4a:06:3c:5b:5f:93:31:17:05:4a:
         6c:14:4d:1a:19:40:6a:e4:3c:20:5a:aa:b6:10:91:dd:3e:89:
         2c:f9:f5:66:4e:69:bf:a9:68:cc:13:96:9c:24:99:b2:d4:19:
         ae:fc:31:bd:e9:fc:e4:19:15:7b:25:d4:b6:75:45:5c:38:8d:
         8a:a3:52:ff:8e:ff:7c:31:b2:69:d1:c2:43:8b:36:81:62:8e:
         5f:a0:6d:f7:06:fb:cf:8b:9c:65:1d:06:7d:f2:33:ed:11:19:
         09:66:b5:91:51:f3:a6:98:ec:04:fa:cb:51:f9:61:75:22:42:
         87:87:da:3e:9e:30:fe:22:25:2b:2f:47:53:7f:ad:c5:90:92:
         1e:ad:64:12:1c:93:84:43:9c:49:5b:7c:32:ca:9b:bf:78:95:
         8e:d9:6d:d9:23:27:ca:b0:2e:62:bc:cc:e7:da:7d:48:d1:7b:
         a0:40:54:6c:1d:34:d1:46:b7:67:5c:48:ad:91:96:69:ce:1b:
         f5:65:1f:5a:52:33:a3:d4:bb:fc:b9:7a:18:73:60:68:43:fe:
         81:3f:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:22 2026 by rpki-client