Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12c3b5c7-8244-3ff6-a22b-84bcb2dde1a6.roa
File:                     12c3b5c7-8244-3ff6-a22b-84bcb2dde1a6.roa (raw, json)
Hash identifier:          /V2v/csLZTwwrYXqJt2xrKsxN9UV8tB5XZEkq2IUmwI=
Subject key identifier:   5F:16:1A:5C:50:1A:E0:40:29:06:6B:86:DC:30:29:98:6D:CF:7B:E8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497452A828812D8B43674EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12c3b5c7-8244-3ff6-a22b-84bcb2dde1a6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        184.31.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:52:a8:28:81:2d:8b:43:67:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=82a6481b-bef8-40f8-b56b-920ce3009875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:4e:0e:00:a8:03:40:a4:42:9e:c3:ae:c4:
                    21:65:31:dc:90:b1:e0:b5:c0:cf:37:46:45:6d:4c:
                    1a:f0:db:4e:4e:eb:87:77:81:06:0c:5d:af:87:32:
                    ed:e9:b2:96:92:14:a7:b5:b7:76:32:5d:d1:c4:d8:
                    4b:48:1f:70:80:58:b6:45:c0:fe:57:d8:f6:99:a3:
                    4d:fa:4a:38:cf:a1:94:53:96:ed:79:cc:94:ca:17:
                    c2:93:52:fd:a7:3f:7c:69:d2:4a:5e:43:77:32:7c:
                    76:b8:e9:27:4d:85:ec:2d:00:98:bf:f7:17:ba:c3:
                    7b:ca:33:49:90:29:e4:45:02:c8:52:c4:09:4f:11:
                    ca:cb:24:a3:86:d2:aa:42:0d:d5:33:f2:5a:f4:22:
                    dc:6b:a5:26:1c:d3:cd:5c:1c:13:ab:25:e9:d1:78:
                    3f:b9:4c:13:d9:52:19:b8:71:0f:ec:8e:65:91:62:
                    71:7b:1f:03:c5:b4:9d:74:b6:f7:3c:ed:63:55:5a:
                    c4:ff:4f:17:33:35:bf:9e:4b:c4:8b:5a:0e:f2:38:
                    9d:20:be:ea:f1:03:65:6f:d3:ad:de:51:4a:67:b4:
                    52:5f:4a:1d:02:53:2a:8d:51:59:4f:1a:31:8f:55:
                    4f:bc:a5:0d:9b:8c:78:2b:3b:5d:5d:6b:98:28:b2:
                    a0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:16:1A:5C:50:1A:E0:40:29:06:6B:86:DC:30:29:98:6D:CF:7B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/12c3b5c7-8244-3ff6-a22b-84bcb2dde1a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.31.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7c:6e:81:c8:58:3a:38:50:d0:ea:12:fc:ed:87:7d:75:66:
         97:8a:64:65:49:a3:a1:f6:14:dc:ee:c1:69:10:5c:b9:cc:3b:
         e0:f6:1c:ed:fd:8f:cd:fe:6f:21:fd:16:a8:51:63:8d:40:83:
         a8:10:6b:b0:7d:90:4b:f3:ae:86:f7:69:fe:42:f3:bf:ae:d9:
         61:77:9f:3f:06:5f:f6:b8:95:25:02:70:bf:d2:d7:72:33:89:
         a8:4e:e7:67:fe:75:4d:c7:eb:09:40:18:7d:0e:0c:42:20:c4:
         b2:0b:8b:b1:0a:26:d4:cb:cc:c3:a2:dd:86:2d:47:e6:44:42:
         ea:1a:be:e3:98:4f:49:aa:7c:6c:d2:3b:a7:84:f8:4b:52:a3:
         4d:69:19:54:41:1b:d4:32:ec:92:c0:e7:7e:95:d0:39:79:56:
         93:45:96:76:38:25:91:25:3c:c7:fc:a7:41:08:3e:e2:c7:50:
         f0:7d:c7:84:c1:c2:77:0d:92:6d:cf:9a:62:c1:4b:3a:91:09:
         0d:9d:19:63:9f:0a:64:51:17:95:c3:e7:6d:78:d0:4a:8c:f3:
         79:dd:4b:b1:a6:62:43:91:ec:59:68:46:51:ac:b9:2b:21:d9:
         7a:99:d4:36:90:df:2a:a1:20:a9:0d:ee:b6:5b:f2:50:60:38:
         68:b7:5f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 12:01:28 2026 by rpki-client