Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa
File:                     d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa (raw, json)
Hash identifier:          Wb6Uq8Iq4liyWc6mZwiHwM0NSGIOSwqJPSFRe4ikb1s=
Subject key identifier:   5E:03:FE:31:7F:A2:5B:FD:39:EC:FD:1F:88:D2:B7:5F:EA:5B:A3:77
Certificate issuer:       /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5
Certificate serial:       010D0C9F4328584EA7901E61C7C00544FBEA5680
Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23162
IP address blocks:        128.163.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:1e:61:c7:c0:05:44:fb:ea:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=11507f8f-0b5c-4651-935b-bf8ca3ae5da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c0:74:95:49:a0:c3:cb:66:1f:29:17:32:79:
                    f1:bc:dd:87:f9:94:1e:ea:55:68:75:07:80:c8:e6:
                    0d:4d:60:d5:38:e0:cf:f8:59:54:4b:1a:14:73:57:
                    01:9e:8c:91:2b:38:3f:5e:46:2b:1f:2f:fe:f8:fc:
                    f6:93:e9:a4:08:56:e8:45:d4:2d:a1:27:f9:35:dc:
                    e9:eb:f0:38:48:29:2a:24:6b:0b:81:b5:8a:a2:cc:
                    cf:05:80:27:f2:11:2b:68:02:d5:d2:a9:1a:86:41:
                    70:5e:c2:20:39:b3:91:6b:ac:67:5e:26:93:55:43:
                    15:86:a5:70:b3:a8:1e:bd:dd:11:d8:e4:83:9b:24:
                    1c:63:ec:e7:df:25:1e:56:3d:97:c7:e7:ce:a1:37:
                    85:eb:c8:6b:80:b9:77:50:b8:12:24:80:31:30:b7:
                    b1:ef:29:85:21:bc:ef:7b:8a:7c:bc:a2:c2:e4:22:
                    53:56:c7:cc:a8:2b:d8:15:56:b6:f1:92:91:71:49:
                    36:78:bf:fa:61:5c:d0:73:87:4a:8f:c7:8c:40:46:
                    23:55:8d:e7:71:b6:7b:1f:93:87:7a:a8:e5:95:b0:
                    65:99:d4:aa:18:2f:d2:bb:1b:be:ad:78:35:7f:4c:
                    b5:6f:9e:fb:a5:a5:5d:b7:79:25:58:21:01:e4:17:
                    50:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:03:FE:31:7F:A2:5B:FD:39:EC:FD:1F:88:D2:B7:5F:EA:5B:A3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl

            X509v3 Authority Key Identifier:
                keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:3a:62:5c:08:43:23:b7:53:1a:79:74:db:66:cd:96:cc:57:
         37:71:e0:91:4b:9b:e9:69:17:94:bf:9d:d5:5c:1e:3a:63:b7:
         18:6d:f9:86:14:05:55:6f:25:33:8b:f4:23:9f:a1:a9:3e:c2:
         8b:02:51:de:bb:43:e7:7e:5c:a1:46:b1:cd:c1:34:99:65:ff:
         da:9a:7a:f7:6c:07:ee:6e:c9:cf:ba:f5:e0:cd:d1:ed:c4:d9:
         ba:75:db:bd:50:77:c7:e3:e5:2c:5e:5d:3c:35:7d:8d:56:b4:
         20:9d:7a:33:b1:b9:82:97:b2:f5:93:d9:95:02:3e:8e:66:28:
         d6:a0:32:1b:25:89:cd:09:da:81:ff:ac:39:35:08:ec:53:e5:
         37:73:dc:24:9c:ac:10:7d:8b:48:80:5b:fa:91:c0:2a:be:17:
         09:26:83:89:54:62:fa:9a:df:9e:6c:43:5d:dc:5f:db:fd:a5:
         97:eb:b0:bb:90:6f:da:f0:2e:ca:a3:8e:fc:5e:08:26:9d:cf:
         d6:ec:8e:69:19:30:b5:20:36:a1:f3:76:08:58:b3:bd:e3:41:
         80:bf:e9:d1:1c:39:ed:fd:e1:9e:aa:ea:b9:30:2b:a8:80:12:
         c0:25:12:91:0b:b2:8b:3e:b3:26:76:de:a7:68:c5:71:f9:4c:
         31:06:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:54:10 2026 by rpki-client