Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/b5cfdcb1-65d7-3eb1-8ebf-8574672b8a52.roa
File:                     b5cfdcb1-65d7-3eb1-8ebf-8574672b8a52.roa (raw, json)
Hash identifier:          PO54PO8qCurv8En2foyMxVGIxUh5cdnuzsqMHp3ygIA=
Subject key identifier:   3C:49:05:16:62:65:FA:CE:99:0D:19:29:8A:F3:F0:7B:FE:17:88:09
Certificate issuer:       /CN=e612cbeb-7456-41ce-9bf5-c9634fa1254c
Certificate serial:       010D0C9F4328584EE38C9C0C6C071E31F2E2D380
Authority key identifier: 07:DC:BE:66:27:FF:A0:9C:DF:F5:4B:EC:6A:CC:5A:F4:41:EB:AB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/b5cfdcb1-65d7-3eb1-8ebf-8574672b8a52.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     393719
IP address blocks:        162.222.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9c:0c:6c:07:1e:31:f2:e2:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e612cbeb-7456-41ce-9bf5-c9634fa1254c
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=9fe23e16-4725-4d6b-abcc-a061b66cd247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:95:2b:ce:06:11:0f:c4:62:9d:7f:41:aa:
                    af:b5:18:fb:df:65:4c:5d:3f:7e:58:1c:9f:f5:27:
                    5a:fa:f0:f3:16:34:c5:38:05:85:e1:ce:d4:d9:58:
                    19:0e:cb:56:c2:c7:14:0d:c1:d7:58:d4:a5:f9:c7:
                    82:99:8c:59:4d:e3:04:a2:db:37:be:d1:f3:2c:87:
                    98:db:be:93:66:b8:58:2f:6c:35:b6:c9:98:b5:3d:
                    a2:08:df:bb:a9:0e:7c:ae:4e:b1:b5:cb:cd:05:a6:
                    48:8c:31:89:0d:06:40:a8:bd:7e:fd:2f:b8:db:69:
                    c5:cb:93:bd:4e:fa:3d:b7:5c:81:b0:b2:5e:47:95:
                    9a:d8:82:4b:2f:2f:fa:c6:db:56:f0:53:50:62:e7:
                    e4:f2:00:7b:f1:2c:74:28:a8:38:c9:0b:b2:01:45:
                    d9:e8:3e:3d:95:57:45:a9:90:51:13:01:09:9f:14:
                    97:d9:59:08:45:f8:c3:5b:bc:7a:3e:b8:c4:cf:99:
                    ca:9a:69:0e:6d:d5:11:79:67:19:cf:7a:3b:a1:76:
                    80:db:f1:6d:c9:af:b2:59:e8:81:19:cb:f4:a4:01:
                    29:92:60:50:52:07:af:fd:49:e5:e0:cb:3f:41:1a:
                    58:a7:5d:02:73:a5:dd:5f:cf:f8:72:77:01:3d:63:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:49:05:16:62:65:FA:CE:99:0D:19:29:8A:F3:F0:7B:FE:17:88:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/b5cfdcb1-65d7-3eb1-8ebf-8574672b8a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.crl

            X509v3 Authority Key Identifier:
                keyid:07:DC:BE:66:27:FF:A0:9C:DF:F5:4B:EC:6A:CC:5A:F4:41:EB:AB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a2:3a:c1:d5:e8:c4:ab:93:dc:68:b9:96:ff:80:41:93:0c:
         ec:c2:17:21:54:97:97:c3:f2:da:64:cd:9c:d1:28:11:b8:bd:
         48:24:6c:57:46:77:45:ab:26:38:23:cd:4c:b9:b0:af:93:b3:
         d3:89:8b:d3:56:04:ea:63:35:bd:e7:7f:9e:e5:16:b1:dd:d4:
         5b:02:94:44:67:a6:67:e6:5a:5e:b4:1c:41:ea:1c:9b:e4:91:
         32:20:a4:d0:c0:e3:64:2f:16:bb:0e:6c:d6:42:be:a2:57:f4:
         a9:aa:d5:02:28:e0:5d:a6:54:98:8b:1e:bb:08:0d:b5:b0:97:
         90:a1:20:78:db:37:8f:5b:fc:94:a8:f6:e7:d8:81:59:16:8b:
         4e:05:40:18:49:85:c2:d4:2f:fd:5f:27:bc:91:e7:e1:cc:00:
         5f:39:52:a1:80:75:37:1f:ce:3c:ad:5e:be:b6:ad:9c:dd:2a:
         82:e6:38:3a:1c:bb:70:99:4d:bb:ce:a8:a2:b2:a3:ae:17:68:
         ef:47:5f:35:a0:66:aa:b1:ab:46:39:f1:70:fc:dd:0a:8f:13:
         05:68:91:2a:63:60:5d:14:d1:37:da:ad:35:88:0e:92:d5:bd:
         c2:8a:03:5a:f5:4b:09:aa:be:f6:2c:7f:27:93:2e:02:75:83:
         f9:32:5c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:36:29 2026 by rpki-client