Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/b4d466f2-e962-3689-8bcd-94237c4b2901.roa
File:                     b4d466f2-e962-3689-8bcd-94237c4b2901.roa (raw, json)
Hash identifier:          caa+S+RkWYblOQ6FWJ8W4btieivs1v9Oi2sabYfPQlU=
Subject key identifier:   8E:67:18:0B:F2:31:2C:71:6F:EF:C3:FA:F8:FD:A5:70:DF:7F:9B:28
Certificate issuer:       /CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b
Certificate serial:       010D0C9F4328584E3E5F17F812AEB6701F8648C0
Authority key identifier: CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/b4d466f2-e962-3689-8bcd-94237c4b2901.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     6079
IP address blocks:        157.120.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:17:f8:12:ae:b6:70:1f:86:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=817fa4d0-b1ed-4889-8b3d-d2f7d9dcba37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:7f:89:08:2b:49:a8:dd:d9:19:a9:74:61:
                    25:fb:15:e6:9b:6f:88:41:5a:bf:9d:9d:cc:88:96:
                    9d:83:7f:83:c3:e4:a3:30:42:80:11:d2:58:13:3e:
                    c2:a3:52:0a:fc:09:41:88:dc:05:b1:9d:1a:98:84:
                    c0:07:b5:dd:bf:16:30:aa:c5:6e:bc:f1:89:15:34:
                    4f:31:3f:79:a4:33:2c:b5:4f:75:71:9d:d0:26:57:
                    5b:cc:ff:6d:ac:42:02:e1:4b:1a:e8:80:93:cf:fc:
                    3e:9f:a7:71:4c:22:61:35:21:61:9b:91:58:8e:e6:
                    41:f9:bf:60:9f:99:58:a7:e0:18:f3:7a:78:2b:95:
                    43:92:fc:8e:9a:4d:5b:62:0d:cd:2f:bc:cb:ea:a3:
                    7d:36:c9:0b:57:3a:46:af:19:76:68:fa:2a:4f:39:
                    56:b2:be:3f:eb:79:3b:72:84:ce:6e:65:a4:71:15:
                    bc:5d:89:97:c8:ab:f3:ba:af:f6:43:40:38:db:11:
                    88:33:27:9c:92:5c:25:c4:8d:e8:5f:9a:b3:32:a4:
                    d6:87:f5:d9:e4:ad:6e:98:ee:ed:96:55:ec:4f:6a:
                    2b:d2:88:c4:e5:60:df:4a:c4:72:85:d8:b7:de:f3:
                    3b:b9:1d:e2:38:ed:04:34:1f:1c:50:e1:f2:61:6d:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:67:18:0B:F2:31:2C:71:6F:EF:C3:FA:F8:FD:A5:70:DF:7F:9B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/b4d466f2-e962-3689-8bcd-94237c4b2901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl

            X509v3 Authority Key Identifier:
                keyid:CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:5a:89:ac:36:f8:6b:56:ab:8b:8c:12:c3:08:72:8a:95:a3:
         dc:a5:cf:c1:c0:41:2b:85:88:e4:37:62:40:04:6e:2b:e0:9c:
         e4:cc:7c:3c:d0:ce:86:09:e1:58:51:ea:8e:39:af:1f:66:0e:
         c4:10:19:b1:60:92:09:53:65:49:fc:15:8b:b9:4b:f2:bf:8c:
         dc:74:89:4f:b1:65:a0:88:ca:24:8b:45:d5:37:4f:3e:da:54:
         96:e5:44:bf:38:cd:0b:be:f1:69:d4:d3:90:71:68:ec:6a:9a:
         4e:ab:8f:46:b2:54:c6:f8:38:e5:0e:59:37:11:6b:d8:d9:5c:
         26:d4:88:8f:81:c5:09:c3:6d:45:83:a6:b3:80:3f:6e:0a:4e:
         b2:5c:26:e7:c9:cc:6b:0c:49:b5:00:99:dc:83:11:25:ed:2b:
         45:2d:1f:f0:30:9a:82:63:9f:89:76:d0:9f:a5:40:66:c5:a9:
         52:03:83:b1:eb:f0:a9:56:a5:36:fa:5c:65:7f:55:6e:1b:6c:
         24:19:86:5f:c2:fa:06:de:a0:fc:49:41:db:1e:e7:2c:6d:63:
         df:ec:9d:f0:df:38:49:66:c9:de:11:44:20:2e:c0:0a:40:cb:
         16:45:c6:92:12:28:ec:25:89:72:34:03:a8:4d:4b:5b:98:12:
         cb:a5:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:36:09 2026 by rpki-client