Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa
File:                     f22a97e2-6b52-3092-9e30-da9958902a1f.roa (raw, json)
Hash identifier:          pepkOuGS39RF4KA1cfvGDj75kEJ7niBelV1b1R1Unvo=
Subject key identifier:   B2:4F:FF:E8:A9:68:D6:AA:3D:16:4D:70:A1:C1:71:B3:E0:80:1F:EE
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E78FF7BB58E49EC42A39CF280
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     13576
IP address blocks:        216.249.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7b:b5:8e:49:ec:42:a3:9c:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=8a7bcc18-daab-4cd8-bc93-c03901bc3ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:8d:1d:af:92:d8:76:98:4f:ac:27:1e:e7:
                    09:d4:24:6b:9e:a0:19:39:21:91:ba:5a:29:f6:04:
                    93:a3:dd:c1:8c:a0:b8:06:c8:b1:e0:de:b4:43:cd:
                    ea:c4:c7:d8:27:ce:e3:fc:b3:7a:70:6d:22:3e:a1:
                    0d:34:79:6a:35:a1:a3:9d:69:9d:e2:ed:a6:d4:95:
                    99:da:f8:14:ae:c3:5a:da:2e:ec:92:f0:09:62:5c:
                    ca:69:cc:a5:b3:38:b4:5f:f8:4a:74:ea:8f:fb:51:
                    c9:df:ce:c4:f4:02:45:dc:72:9b:91:c9:82:94:56:
                    29:48:2e:aa:32:7c:98:6f:3a:39:52:be:f9:c0:92:
                    0e:92:c9:37:cc:12:2b:b9:bd:97:a1:42:2a:50:7d:
                    da:2f:28:01:d3:83:67:50:f2:d7:59:9c:c1:b4:78:
                    d7:83:6c:ee:a8:9d:b2:e1:8a:d5:85:5d:75:4d:20:
                    34:7c:10:a7:cb:05:09:ae:38:06:e7:c1:a0:29:07:
                    e9:73:4b:fb:f0:d2:e3:ce:b8:10:00:3b:7f:21:ad:
                    76:76:f2:5f:05:2c:a8:88:65:5a:35:ae:9d:15:59:
                    6a:34:ce:90:7b:41:2e:40:5d:c5:09:39:70:4d:c7:
                    5d:49:f0:66:c6:7f:24:bc:d9:ef:7c:5a:fa:7a:f2:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4F:FF:E8:A9:68:D6:AA:3D:16:4D:70:A1:C1:71:B3:E0:80:1F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f22a97e2-6b52-3092-9e30-da9958902a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4f:8b:01:c4:80:40:ae:b4:d0:a3:51:a9:40:42:ad:13:5a:
         42:ca:e0:6d:f9:74:a3:4e:a5:eb:4b:c1:7c:eb:68:7b:19:1a:
         9a:d1:7e:8a:3f:00:ca:60:ea:ae:da:cb:ed:97:97:6a:6a:a0:
         49:c4:0f:8b:f8:a9:8e:ab:c1:8a:52:3c:ad:4f:c1:e0:a6:0a:
         9b:51:f8:db:6f:a6:5c:20:e5:46:c8:9c:df:8c:65:68:82:65:
         c8:46:8d:e2:e0:c6:a6:aa:b4:8a:c4:76:97:af:dd:b3:b7:e7:
         52:21:31:00:57:8b:e3:47:a3:87:ad:0f:9c:57:85:b2:79:a0:
         f1:fc:ea:71:2a:12:1b:46:a5:a7:97:aa:90:89:51:39:cf:8a:
         2f:bf:00:a7:4e:d1:f2:e4:2e:a6:20:d5:ab:3f:a9:51:d6:f4:
         8c:a6:0d:ef:52:13:ae:cf:a0:3d:fa:39:10:31:c9:ff:11:ce:
         a7:1c:ad:80:a9:83:b5:e1:03:9f:dc:fa:c2:7f:e0:00:ca:19:
         38:30:75:51:9c:96:88:34:5e:25:1e:6f:c9:64:da:fb:1e:d7:
         25:88:d1:1b:22:19:04:3c:25:0e:27:c3:d9:a6:8d:b2:2a:51:
         fc:96:fa:09:bb:0e:67:d2:f3:3e:61:1a:cb:47:b5:0c:d3:af:
         27:1f:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:14:02 2026 by rpki-client