Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f1c78f8b-98d8-317c-b7a5-9d7a8ab4c02d.roa
File:                     f1c78f8b-98d8-317c-b7a5-9d7a8ab4c02d.roa (raw, json)
Hash identifier:          Hq/ZE9yWKHYJrfBbLCucBcPRdrlSCWajlpN9oSzkH0o=
Subject key identifier:   E9:5C:8A:E4:02:B4:E4:63:F8:A0:38:75:21:56:96:67:9A:11:AA:CB
Certificate issuer:       /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial:       010D0C9F4328584EE0C1FEF00DE4D99F7E7669C0
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f1c78f8b-98d8-317c-b7a5-9d7a8ab4c02d.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        160.32.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:fe:f0:0d:e4:d9:9f:7e:76:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=2a5e30d4-553f-442c-a6c3-77fc0f9bbc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:d5:fe:23:a1:70:a2:ed:e7:ae:ad:e6:ec:
                    b5:e6:1c:ca:bd:c7:ac:4e:93:8a:99:d1:70:65:b6:
                    6c:f8:7f:b8:a3:3e:71:0c:0f:be:d3:29:99:8b:4b:
                    f6:dd:c5:bd:2e:50:ff:55:1f:53:cd:96:d5:e2:e8:
                    b6:4e:5e:d6:ff:01:83:ed:b1:45:52:dc:48:2d:0b:
                    b1:76:7c:de:71:2c:67:0b:4b:51:be:a4:ed:6e:48:
                    e8:64:84:12:59:cb:36:61:e8:c4:51:be:79:16:fc:
                    04:ea:4a:80:1e:28:75:3b:4d:86:d0:98:82:17:dd:
                    2b:89:8d:b6:8b:23:c9:5c:da:1f:36:54:d9:f5:39:
                    10:61:61:ef:57:b6:21:a0:ac:c8:50:6b:e8:fc:dc:
                    37:2b:36:26:2c:b5:4d:bf:c6:ff:2a:76:95:ce:59:
                    2f:bb:fc:46:bb:9d:43:df:0f:48:2f:1a:69:e1:03:
                    09:ba:5f:b0:a7:9b:47:27:a1:e2:b0:de:63:0b:4d:
                    64:e8:33:a6:5f:69:c0:36:45:f9:62:0b:b4:8c:54:
                    a6:db:36:b3:f1:7f:e3:1e:42:6d:bd:02:ce:05:55:
                    ef:12:20:35:41:db:ba:77:57:22:9b:5e:24:41:9c:
                    7e:e7:02:1b:98:61:51:91:47:2a:fc:28:98:61:b6:
                    bf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5C:8A:E4:02:B4:E4:63:F8:A0:38:75:21:56:96:67:9A:11:AA:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f1c78f8b-98d8-317c-b7a5-9d7a8ab4c02d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:a4:f8:d7:02:e8:fa:37:e0:21:68:87:65:13:9b:7a:33:09:
         3a:14:d3:a8:c8:c5:45:99:45:c4:b6:74:60:f3:46:5c:a1:2d:
         85:40:b6:32:81:19:8f:12:4e:da:ab:a8:b1:9c:a7:6a:06:f7:
         d9:01:e2:b5:9f:e4:7b:39:37:13:60:5c:6e:5c:56:ff:bd:3f:
         c3:3a:aa:5d:44:3b:4c:df:7c:99:05:98:e7:77:87:ac:a5:bf:
         a7:c9:ac:7d:94:21:e1:75:8d:87:fe:df:aa:03:05:a0:01:6a:
         96:59:1a:59:d0:7f:87:a4:c8:28:27:35:63:52:e5:b8:a6:f2:
         a7:a1:1a:f9:60:60:20:62:4c:48:e0:e7:97:ce:20:53:99:e9:
         22:92:34:90:92:56:3c:e4:ee:9a:34:50:65:28:ee:02:80:f7:
         3e:dc:1b:76:3a:72:65:41:1a:c3:5d:85:dd:48:d3:e2:00:ff:
         e4:f9:61:bb:9a:f2:31:8b:24:fc:d6:ce:16:22:54:6c:2a:6c:
         c3:de:d0:b8:7d:a9:61:5d:69:aa:54:70:f3:9b:67:33:47:e0:
         0d:2a:4d:6a:4c:1e:90:4b:cb:3f:5f:07:29:99:de:b8:54:dc:
         7c:57:88:99:77:53:8e:9a:09:5d:ce:d0:8e:55:70:33:d8:32:
         76:7a:74:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:31 2026 by rpki-client