Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814/9fb36244-35fb-37cc-89c7-64468239d4af.roa
File:                     9fb36244-35fb-37cc-89c7-64468239d4af.roa (raw, json)
Hash identifier:          bpFf2vbI/Y7H57xMcRwcpsGDCFNtCaqEIkVBrMVaBlk=
Subject key identifier:   54:52:C7:D6:4E:F7:C3:02:F6:8A:EB:86:31:4C:48:1F:E5:00:C3:A4
Certificate issuer:       /CN=196a0ddd-ebe5-4b0b-9afd-5cc049ccb814
Certificate serial:       010D0C9F4328584EA7918E565482FD8DDAFE5800
Authority key identifier: 4F:33:EB:CF:E0:D0:D6:70:4F:73:AA:C7:00:BA:08:E1:13:02:7F:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814/9fb36244-35fb-37cc-89c7-64468239d4af.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        204.122.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:8e:56:54:82:fd:8d:da:fe:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196a0ddd-ebe5-4b0b-9afd-5cc049ccb814
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=996cfc4d-ed6f-4cc0-8f84-dfe5d77259bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a5:3f:0a:f3:df:8f:94:74:29:df:fe:3b:a6:
                    e3:80:86:90:77:d8:07:ad:20:a0:dd:d5:e1:5c:cf:
                    e7:00:79:f6:db:dc:ee:03:0f:9a:49:07:8b:d9:4e:
                    6c:e8:ed:4f:a8:0b:a3:a7:57:33:6d:d5:4a:fa:12:
                    98:8d:87:44:23:e9:a1:0e:c9:2a:a0:5a:f1:29:c4:
                    dd:ae:47:52:74:41:4a:a3:b7:1b:21:49:08:c3:4b:
                    d2:9f:24:32:2d:da:d4:d5:48:ca:91:6f:cf:d1:1d:
                    70:58:74:88:5e:32:21:2c:96:05:71:6f:53:79:02:
                    ed:b1:02:41:65:ed:31:ae:ca:b2:bb:a3:46:fc:03:
                    c3:db:70:fa:76:27:44:f7:5c:9e:55:f3:78:c2:01:
                    d7:08:92:66:e5:0d:46:e9:ba:0e:6c:e4:52:8d:cf:
                    54:a1:59:90:2a:99:4e:09:a2:05:69:45:e0:1b:9a:
                    25:e7:cb:08:90:3b:df:86:71:16:27:39:84:84:af:
                    3e:3a:fd:c5:04:a0:35:aa:92:f6:13:ea:9f:63:08:
                    2f:a8:12:31:9d:b1:48:9f:06:13:d0:3e:d8:10:83:
                    23:b2:b0:ac:b5:44:21:a1:c7:7a:46:70:0c:33:d5:
                    b4:23:90:ea:c5:e6:6d:19:f4:9d:85:a1:62:44:0b:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:52:C7:D6:4E:F7:C3:02:F6:8A:EB:86:31:4C:48:1F:E5:00:C3:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814/9fb36244-35fb-37cc-89c7-64468239d4af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:EB:CF:E0:D0:D6:70:4F:73:AA:C7:00:BA:08:E1:13:02:7F:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/196a0ddd-ebe5-4b0b-9afd-5cc049ccb814.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.122.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e8:86:9c:e2:0f:b1:bc:1c:ac:d2:e7:77:15:30:73:4c:9f:
         46:96:01:3c:75:4b:f1:42:51:e8:17:09:bb:b5:eb:e9:18:96:
         3d:91:fd:e8:d6:2d:87:a2:cb:64:e8:40:be:b4:28:0a:f4:38:
         97:ae:3a:2b:e4:ca:35:10:a2:9c:c0:3e:b6:2c:01:fb:7b:59:
         a2:60:4c:76:4d:15:05:a8:62:b7:13:4a:25:19:36:99:84:46:
         2a:1a:03:01:13:3f:45:53:e6:ee:e9:d8:18:0f:a8:2f:b1:8a:
         07:c2:d9:88:80:97:2b:d9:cc:b6:8c:2a:38:4e:e3:84:bc:27:
         49:47:d4:25:b2:fe:40:d5:ee:f7:bf:d4:18:d9:5e:cb:1d:5c:
         b5:57:3f:08:50:85:54:23:6a:4a:09:e5:a3:ef:eb:ae:af:82:
         ba:aa:28:79:16:39:1a:6e:51:62:54:5b:82:a4:15:19:d2:fa:
         60:0f:a4:59:a5:b2:79:04:25:37:dd:c9:37:20:37:2d:dd:ab:
         ab:8c:82:32:6e:e1:ea:c2:08:dc:ce:59:f9:f4:83:8f:eb:05:
         9e:ff:b7:c7:9d:f0:5f:e2:7a:83:3b:bb:ae:25:b0:c9:f2:c5:
         bd:b9:d3:58:1a:df:8f:a7:6d:bc:f2:22:01:ee:bf:bf:33:57:
         82:3f:12:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:05:14 2026 by rpki-client