Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/b159e9bd-8032-3795-956f-fbd9f5f1424a.roa
File:                     b159e9bd-8032-3795-956f-fbd9f5f1424a.roa (raw, json)
Hash identifier:          rySMkMnfUuXcTV7rMfHYn9jnchD1ZQxAICUD8UoCTiE=
Subject key identifier:   36:94:63:55:C4:43:42:74:83:68:59:00:48:22:04:48:F3:93:6F:6C
Certificate issuer:       /CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
Certificate serial:       010D0C9F4328584DFA70A704069372F04417D200
Authority key identifier: 26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/b159e9bd-8032-3795-956f-fbd9f5f1424a.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     55002
IP address blocks:        199.189.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:a7:04:06:93:72:f0:44:17:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=87c071fb-efec-4da6-82b0-d43af9c79078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:ee:53:94:e5:9d:9d:04:1f:ca:39:95:7e:
                    8d:48:95:f2:6e:83:4b:ac:12:2f:fa:62:dc:2a:bc:
                    57:68:19:79:9a:a5:21:b3:4a:de:2d:93:56:ff:a7:
                    b1:96:48:ac:06:20:2d:bc:de:74:44:ec:7b:34:23:
                    a8:dc:c9:a7:d3:fa:87:13:3c:71:80:ac:ca:15:88:
                    13:93:c5:7a:79:4a:78:fb:15:2a:e8:59:63:60:07:
                    87:13:14:af:68:a4:6b:64:fb:18:64:12:fd:79:9c:
                    22:04:ca:63:01:f2:cf:92:a3:49:28:ca:fa:bd:a4:
                    f3:b3:2b:bf:ea:ae:5e:b7:56:c4:e6:9c:89:ee:c3:
                    7c:0b:d4:28:08:e2:bb:b4:a3:16:1b:e3:5c:67:65:
                    96:ce:95:c2:42:cb:92:95:db:ff:b4:a3:01:a8:92:
                    61:96:37:6f:50:de:f1:b1:5e:d3:f0:04:36:03:2c:
                    58:d2:f8:22:44:02:57:ed:81:f0:7d:e0:7b:c2:e0:
                    ed:c6:e2:a8:71:89:11:39:d8:84:d6:da:e4:63:92:
                    90:dc:b9:21:62:01:de:c6:1b:55:61:53:e6:85:bc:
                    cb:e2:db:78:3c:ef:ac:f8:d1:e8:5f:e6:46:53:eb:
                    93:4e:5c:16:e6:e0:b2:4c:9c:6c:9d:7d:8c:39:8d:
                    79:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:94:63:55:C4:43:42:74:83:68:59:00:48:22:04:48:F3:93:6F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/b159e9bd-8032-3795-956f-fbd9f5f1424a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl

            X509v3 Authority Key Identifier:
                keyid:26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4a:8b:69:be:30:94:e3:71:86:1e:00:6b:73:9d:eb:89:3e:
         36:77:b3:8d:35:9e:94:de:4a:21:dd:9c:c6:4f:0d:65:86:8e:
         15:10:73:cc:33:a7:1b:d3:38:33:9c:8b:17:ad:c8:3f:de:01:
         a3:b2:6f:d5:29:02:fa:77:33:b2:03:bc:95:6b:db:01:ee:98:
         06:70:c9:20:a8:d0:49:ed:47:b2:53:2e:1e:7c:58:55:56:e6:
         c1:7f:0a:f1:49:ba:62:db:50:5f:e5:9b:9e:82:06:64:c4:a8:
         a4:f1:b4:98:e2:83:cb:8f:99:36:8f:12:26:77:5f:ca:01:fd:
         fe:21:0a:33:b0:77:5d:a4:d7:fc:bf:68:6c:08:ff:96:5a:a4:
         b1:c7:e0:3f:f9:0d:c6:e7:b1:eb:67:0b:35:06:73:ae:d0:3f:
         2a:59:47:55:ee:2b:97:81:93:bd:58:81:80:17:7c:2c:b5:3a:
         04:bb:73:76:ce:2f:c6:e2:46:24:a9:4f:8b:10:70:08:e6:9c:
         59:b9:0e:ec:2a:06:86:4a:7b:f9:b1:c7:a2:4c:16:a4:e1:f7:
         5b:f6:37:7d:b2:13:66:5d:d4:27:eb:eb:2a:42:ae:30:27:1c:
         36:65:41:b1:92:18:82:52:92:d1:08:a2:fa:d1:12:95:6d:31:
         17:2c:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:31:30 2026 by rpki-client