Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/118cd5ee-d96f-3b88-8b0c-6850ba08709b.roa
File:                     118cd5ee-d96f-3b88-8b0c-6850ba08709b.roa (raw, json)
Hash identifier:          yBZcNlja75gVOd0gdllWLmjHB3Q6TcNj7jImaBFcTo4=
Subject key identifier:   22:05:78:1F:B4:B0:B3:30:D2:5C:C9:5C:58:53:D7:24:B4:A2:5F:9B
Certificate issuer:       /CN=cb8bbc7d-40a8-45a5-8a9a-95c05453c635
Certificate serial:       010D0C9F4328584E4DB9DC1DC6C27B215C64A800
Authority key identifier: D9:1E:B3:B5:38:2F:DD:6F:7E:EF:22:B6:0A:9C:15:26:FA:8C:A4:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/118cd5ee-d96f-3b88-8b0c-6850ba08709b.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     20020
IP address blocks:        192.34.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:dc:1d:c6:c2:7b:21:5c:64:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb8bbc7d-40a8-45a5-8a9a-95c05453c635
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=3c779859-8df1-4d65-b4c1-8dd186a91cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:46:9d:72:c4:16:4b:b1:70:ae:cf:4f:91:
                    0f:07:4a:64:01:6e:a9:55:74:19:eb:29:2d:c3:76:
                    fe:f8:3d:ed:af:e0:43:98:7f:db:c8:3d:a3:57:c7:
                    d6:de:f3:e7:4d:7f:c7:ff:ef:59:78:7e:09:2f:b5:
                    76:39:e3:9a:8a:5c:0d:c4:77:49:43:89:a1:b6:89:
                    2e:15:a5:ee:ad:9d:22:be:a2:ad:31:5d:fa:5b:e1:
                    03:80:53:02:ec:bb:d1:59:66:eb:be:aa:cc:80:81:
                    53:b3:a8:27:dc:76:36:16:b9:70:a8:42:38:5e:94:
                    52:c3:32:05:43:9f:e9:d2:da:08:2a:c9:a1:36:93:
                    f5:a5:f0:bc:f4:3a:04:c0:c8:bb:19:b5:ac:16:74:
                    3e:6e:89:65:e7:52:fe:b5:8e:80:4d:92:c7:7b:fb:
                    9c:41:80:ce:58:54:1e:24:77:b0:10:ff:f0:99:d3:
                    a4:65:ca:58:06:3c:02:23:cd:51:8c:25:9b:dc:b3:
                    cc:45:99:8a:b0:36:ff:f7:11:f1:cc:47:3c:ff:10:
                    fc:85:5d:c5:3d:11:97:96:ea:40:72:c1:c0:96:c0:
                    e6:b9:95:42:b4:55:77:ef:d5:0f:5b:5c:c1:77:9e:
                    3f:8e:cd:84:f6:a4:88:01:9a:ca:88:b5:4f:46:15:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:05:78:1F:B4:B0:B3:30:D2:5C:C9:5C:58:53:D7:24:B4:A2:5F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/118cd5ee-d96f-3b88-8b0c-6850ba08709b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.crl

            X509v3 Authority Key Identifier:
                keyid:D9:1E:B3:B5:38:2F:DD:6F:7E:EF:22:B6:0A:9C:15:26:FA:8C:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:43:19:b3:92:35:6f:df:b1:2c:3d:a1:5e:0e:a0:54:e1:89:
         1f:86:d9:17:ee:22:7c:b2:26:02:db:71:38:27:7b:fd:21:dc:
         a7:c5:c9:98:f2:b4:03:65:24:91:ee:4a:97:c4:34:4c:86:86:
         4c:5c:57:cf:73:7e:53:ff:c4:3c:ae:6c:4d:85:66:6c:e9:00:
         bb:1a:9b:76:28:85:3c:46:91:97:f1:61:8d:a5:76:72:f3:b1:
         cd:d4:f6:72:1e:d7:3d:35:bf:95:85:27:7f:9e:9a:32:45:a3:
         71:c6:9b:d7:ff:d5:b0:fa:af:21:95:4f:10:10:72:dc:89:98:
         21:82:d3:bd:e9:e1:ab:1c:2c:f8:6c:92:ca:44:6c:93:a1:15:
         c9:a1:62:40:c7:6b:85:ec:8d:68:11:30:7a:f9:b8:f3:8e:6c:
         f4:71:5f:ae:5d:31:d6:7a:ec:c6:5e:0d:db:24:d2:3e:f9:27:
         cb:e8:f1:f8:47:8d:4a:cb:b1:aa:a2:57:59:76:cc:c6:70:83:
         4c:3d:bb:8f:36:2c:c8:aa:38:fc:ad:e1:79:66:eb:56:45:55:
         4b:e8:a0:aa:b8:88:52:f0:de:f4:de:77:13:62:61:26:e9:b7:
         a4:a8:7c:ff:1c:6d:b4:73:a0:bb:c1:95:6d:40:88:c5:1e:35:
         37:34:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 03:04:30 2026 by rpki-client