Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cc41f2c3-a228-378e-a0b7-d29472fa6c28.roa
File:                     cc41f2c3-a228-378e-a0b7-d29472fa6c28.roa (raw, json)
Hash identifier:          ZoeZaaYUll/gozpP+98w/WMN4ykeDDhvkaxwQXcxwvk=
Subject key identifier:   08:A1:6A:7F:33:54:1B:36:24:0C:88:D9:46:60:AC:0A:8B:8E:DF:FE
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E7A64DBBB42FC6FA58BDA6E80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cc41f2c3-a228-378e-a0b7-d29472fa6c28.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     62904
IP address blocks:        170.130.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:db:bb:42:fc:6f:a5:8b:da:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=2e42a9de-1bd2-4835-b552-b16f9960c908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cd:ec:df:8b:a0:62:86:e8:1f:df:05:6b:6e:
                    c0:39:7a:da:a1:aa:23:2e:f1:ef:9c:a0:22:cc:05:
                    dc:1b:d8:84:ec:36:2a:29:74:09:9f:f4:e0:b6:44:
                    57:df:42:6c:af:b9:3f:b1:c1:0e:f9:d7:d4:b2:5e:
                    be:c3:16:2d:12:53:81:69:83:fa:dd:d2:02:64:0d:
                    2d:6d:ce:a2:42:ed:a1:76:5d:e9:a9:67:62:ec:c1:
                    3a:1e:79:dd:19:27:0b:c4:8d:14:78:ff:a9:ff:60:
                    49:82:36:c5:75:ee:9a:85:6b:7f:10:79:f2:be:b8:
                    c6:21:8f:ee:1b:f7:43:b6:5e:77:81:bc:3b:dc:f0:
                    53:76:82:5b:8a:ab:c5:f4:b0:e7:fc:65:34:d5:0f:
                    3f:6d:71:3f:6c:a5:86:27:1d:90:71:e5:bd:86:f2:
                    64:2d:30:2b:44:fa:55:9e:60:98:3a:93:e4:35:f0:
                    53:b7:f3:90:30:77:30:44:56:32:2e:21:65:08:b2:
                    59:9c:bc:64:d9:fd:5c:8f:ec:0d:ff:86:a9:b4:c8:
                    b6:9c:88:2b:83:b0:a3:a5:2d:30:90:b5:4f:ae:6e:
                    fd:f6:94:f8:37:14:af:b5:96:b1:00:4c:02:2f:99:
                    92:d5:9e:6d:06:e2:f5:7d:3e:23:66:93:61:81:76:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A1:6A:7F:33:54:1B:36:24:0C:88:D9:46:60:AC:0A:8B:8E:DF:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cc41f2c3-a228-378e-a0b7-d29472fa6c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c3:d7:8f:9d:14:40:61:be:52:a0:5b:d2:77:c2:f3:2b:79:
         f4:65:9f:c3:0e:3e:0c:6f:88:a6:0a:49:8b:67:7a:5a:a7:a8:
         f0:31:33:5b:6a:c3:e9:1b:3e:81:21:47:a3:6d:0e:e7:ac:ee:
         60:65:e8:f0:06:70:43:e4:d7:78:c6:db:b8:f8:72:4c:35:b2:
         c4:1a:28:e2:0c:5b:79:52:39:ec:4e:08:49:2f:62:15:f4:57:
         25:10:58:67:67:bf:69:81:64:d5:39:b8:87:4b:09:2c:36:bd:
         cc:35:e4:b9:c7:b4:5f:f6:c9:3c:f8:90:16:84:bc:9d:9f:c4:
         cf:72:52:b1:58:57:49:b9:ef:9d:e2:68:fa:51:be:ef:54:16:
         cf:73:8b:fd:c2:53:b3:b8:44:65:a7:c4:3e:b3:62:e4:7c:28:
         c5:e7:ad:20:6f:8b:1f:0e:46:8d:12:62:4e:a4:e7:b6:70:08:
         25:18:4a:d1:46:23:74:35:3f:87:bf:b4:28:7b:46:56:09:f6:
         11:78:8d:dd:97:0c:ed:c6:c3:38:cd:ee:d4:d3:3a:c1:a7:1c:
         24:a6:6b:30:b1:1c:5a:a6:fd:99:54:77:cf:42:68:16:36:93:
         93:bb:33:10:2a:52:eb:ab:5b:9c:ad:d3:b2:76:a6:13:fc:78:
         2f:7d:67:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:26:43 2026 by rpki-client