Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/ad5c9c3e-58bd-3348-b7d4-c19fcbd09891.roa
File:                     ad5c9c3e-58bd-3348-b7d4-c19fcbd09891.roa (raw, json)
Hash identifier:          BDs6BEQkqgG42TY5CMv3zBx+VWZABPyWOdc6KUuVnTo=
Subject key identifier:   EF:14:F8:A2:27:ED:8A:89:D2:7E:7C:E9:79:76:51:A6:24:37:06:12
Certificate issuer:       /CN=c3927d26-c229-496a-8940-c88a834f5196
Certificate serial:       010D0C9F4328584EA7880F449D9A09826C8CB880
Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/ad5c9c3e-58bd-3348-b7d4-c19fcbd09891.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12119
IP address blocks:        169.197.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:0f:44:9d:9a:09:82:6c:8c:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1185ced2-d3af-46b1-9def-f358dde15ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:66:a9:e4:94:04:b0:71:ed:d7:f7:55:75:
                    32:06:c0:ca:fc:59:11:b6:92:37:51:3b:e7:fc:62:
                    f4:31:7d:47:c4:22:22:b8:e3:3c:cc:13:1d:76:96:
                    e8:06:34:af:e4:5c:47:58:a2:a9:75:6a:00:85:3a:
                    9a:fa:d6:89:b3:6d:f4:ef:33:7b:d1:3f:af:4f:c9:
                    53:81:fd:3d:ba:4e:f8:09:01:d6:eb:3c:18:28:71:
                    fb:80:90:13:7f:b1:91:37:e7:75:1d:d7:d6:41:86:
                    e2:a5:49:93:5f:70:6c:77:6f:d3:76:43:f2:6c:fc:
                    0f:c6:bc:cd:7e:5a:3c:64:5e:b9:2d:08:45:66:77:
                    84:91:de:2a:1f:7e:32:7f:11:6f:6c:49:36:29:d9:
                    6c:35:97:8b:08:d7:3d:c2:86:b0:09:00:69:9b:5b:
                    2e:e5:a9:a5:a6:b4:e9:82:54:2a:95:0d:6f:fd:03:
                    3f:a2:fb:53:92:34:27:60:b2:eb:11:8a:5a:e4:53:
                    c8:b5:6b:69:69:ff:dd:57:5f:0e:84:00:5b:2c:00:
                    81:91:12:8e:b2:fd:6b:11:db:e3:bb:1b:9f:a7:36:
                    e2:26:23:cc:19:38:30:a8:a1:87:15:48:80:b6:30:
                    e1:64:02:2e:c3:98:bc:c3:98:df:bf:5a:56:f0:7a:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:14:F8:A2:27:ED:8A:89:D2:7E:7C:E9:79:76:51:A6:24:37:06:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/ad5c9c3e-58bd-3348-b7d4-c19fcbd09891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl

            X509v3 Authority Key Identifier:
                keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c9:57:f9:39:14:f9:6e:5f:89:46:df:32:81:67:8a:ae:89:
         e3:5d:8b:33:08:c0:c4:be:7d:d7:52:d0:25:2b:95:c4:f9:2f:
         9c:1b:98:b6:79:d6:82:62:83:01:e9:ca:e3:96:71:1a:da:06:
         ce:7f:ba:5a:87:60:bb:a9:dc:8b:75:ea:ac:6a:aa:40:c7:45:
         5b:9c:92:44:7e:00:90:51:28:b6:e4:a6:b9:e0:a5:cc:98:ae:
         0f:12:ab:b0:12:cb:b7:35:36:20:a8:a6:43:38:de:c0:3c:f2:
         c8:7f:67:2e:d0:8f:49:76:5a:9a:c9:cc:32:39:3c:77:0a:96:
         dc:b1:f7:6b:9a:51:f8:d7:e7:21:d4:40:55:55:6f:26:87:71:
         23:66:74:c2:ac:72:11:2d:a3:36:cb:8e:26:e1:d7:54:5b:3a:
         0c:cb:dd:47:be:ce:a7:f7:3a:ec:7d:ef:df:56:a0:87:fe:4f:
         7b:81:bc:44:cc:86:b3:52:23:e7:de:c5:b6:14:cc:06:c0:67:
         09:d5:d2:c0:0e:36:f0:ab:3d:74:65:e6:aa:cf:6d:85:d1:72:
         f1:ba:73:aa:73:f3:e8:37:29:ad:fe:fb:59:ba:a2:63:8b:e4:
         14:bd:54:98:2a:8c:1a:0e:da:78:27:aa:08:de:98:5a:0a:a9:
         e7:35:7e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 04:27:39 2026 by rpki-client