Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
File:                     17acb471-f0ec-3752-90a5-05f953ebd85f.roa (raw, json)
Hash identifier:          Jv7NbuI9gcebHU4GOOLyB8O8qh4JYv1sGp9+TjM8mCM=
Subject key identifier:   99:47:92:57:6B:4F:3F:C7:23:59:63:3F:4A:9A:33:38:3C:0B:6D:6A
Certificate issuer:       /CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
Certificate serial:       010D0C9F4328584EC0A7254CD154D6E50F21A620
Authority key identifier: E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     36352
IP address blocks:        128.254.228.0/22 maxlen: 22
                          162.245.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:25:4c:d1:54:d6:e5:0f:21:a6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=ce26cbc7-6d79-4bf3-9633-f66566588584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:8e:22:42:f3:78:a4:76:9a:38:cd:a2:eb:
                    14:e0:89:8f:51:8b:55:92:0b:46:43:43:1b:b4:e5:
                    78:3d:a6:6e:6c:4f:8c:27:63:91:13:5b:c4:12:23:
                    f9:83:76:83:5f:5d:33:48:5f:c3:9d:5f:77:ee:5c:
                    3b:f8:c5:bd:98:fd:88:68:02:29:2a:02:8b:9c:14:
                    b2:97:5c:2e:6f:8e:b9:3f:aa:8c:df:e8:a5:c6:da:
                    62:d0:04:22:37:ab:89:0c:d5:82:94:33:c7:16:07:
                    f9:77:71:62:51:e3:5f:cc:3b:e9:36:49:2e:65:42:
                    b0:7a:42:8c:c4:dc:b5:77:38:8c:b1:71:8f:58:49:
                    9e:7a:54:32:6a:52:45:11:27:ea:94:e9:cf:ea:30:
                    d2:e3:85:aa:29:58:f5:52:bc:a3:32:41:a6:ff:3f:
                    88:7e:82:75:b1:e0:bf:d4:7c:30:f6:c5:6f:d5:a1:
                    44:d6:c4:96:c5:b1:6b:dd:4b:e6:35:e7:28:7f:70:
                    93:37:4f:52:9a:e3:be:3e:ac:23:60:d6:30:2a:f3:
                    a5:3b:1f:4e:62:4e:84:a3:8b:d8:72:74:b2:d9:aa:
                    11:ea:9c:f9:54:de:21:7a:e1:fe:54:e8:c6:ef:ae:
                    97:c8:e6:fa:77:18:8c:3c:33:9a:4e:fa:87:f1:44:
                    31:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:47:92:57:6B:4F:3F:C7:23:59:63:3F:4A:9A:33:38:3C:0B:6D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl

            X509v3 Authority Key Identifier:
                keyid:E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.228.0/22
                  162.245.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:44:01:32:2e:9a:de:0c:06:e2:01:27:be:6d:3a:63:20:85:
         9e:34:4a:66:2e:3c:eb:d3:66:6f:8c:5b:38:c3:52:e1:3e:e6:
         34:68:9b:32:da:0d:54:ad:05:92:e9:43:65:e4:4f:3f:55:e5:
         c3:c0:b6:0d:03:75:8f:38:8c:1f:a8:c4:b1:13:70:1a:5e:68:
         32:78:82:4e:57:52:a7:42:3f:44:33:6d:77:c3:4c:60:d1:1e:
         a8:ad:5c:06:de:41:e4:5a:49:f2:b7:23:36:78:88:60:f7:3f:
         e7:7c:fb:54:67:67:c7:f5:cc:9b:ed:97:be:88:6c:b5:e5:fb:
         3a:f7:65:3f:64:e3:6f:8c:99:a6:23:63:96:0a:25:4a:47:6d:
         3d:8c:19:6c:95:84:00:89:16:2f:3e:55:73:2d:23:61:52:c4:
         d0:b4:08:a4:e9:cd:8e:8f:45:88:f0:5a:f8:c2:3b:58:61:64:
         b0:41:5c:fe:9b:9e:14:8b:2a:47:7d:b5:76:4e:14:34:23:3a:
         6a:ea:8f:e8:e1:cb:2e:2f:43:9f:4f:32:60:22:2f:ec:64:2e:
         94:e0:ff:8b:2b:a5:51:ad:11:33:43:3e:25:4f:3b:82:84:da:
         7c:2e:c7:42:15:b5:73:f6:60:fc:4a:44:ab:3f:59:1c:a4:1d:
         bc:7b:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:05:16 2026 by rpki-client