Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7eda0039-a73d-30ae-b2ae-64abbdbeb764.roa
File:                     7eda0039-a73d-30ae-b2ae-64abbdbeb764.roa (raw, json)
Hash identifier:          nBGii6OiY6vvlRjlx5EYLjQSmFexTFZPRKhJxEwdrb0=
Subject key identifier:   FC:B7:7A:12:BB:F2:B3:35:ED:4C:A7:6F:C9:4F:63:8F:7A:5D:7F:27
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E577F4AC130E8B599ABC72C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7eda0039-a73d-30ae-b2ae-64abbdbeb764.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     16625
IP address blocks:        184.86.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:4a:c1:30:e8:b5:99:ab:c7:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=b686ceee-df18-4652-a9ff-fab4244948f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:ca:03:2a:82:c4:9f:d4:56:34:6f:d7:39:
                    51:41:b9:be:c3:3e:3f:a2:77:59:f7:73:97:0d:e6:
                    18:2c:88:3c:77:ef:33:3f:7e:27:b8:61:01:52:4d:
                    d9:dd:4b:21:e0:16:76:43:a7:f5:a5:00:7e:45:82:
                    9e:be:65:98:5a:b2:c2:a3:ca:a1:66:ad:22:47:a2:
                    cc:52:39:85:2a:fc:07:c8:f4:5c:6c:d8:13:23:40:
                    2f:13:51:9f:8f:88:3c:29:de:6d:7b:67:39:c7:05:
                    2e:0d:03:41:4d:b3:b4:f3:4d:9a:2c:9e:9b:34:ca:
                    4b:92:05:a1:44:05:8e:20:c2:7d:52:db:a8:9e:05:
                    49:1d:47:8f:69:82:4a:6f:89:93:a2:23:03:05:63:
                    fa:9d:2f:68:b7:51:94:83:83:2e:43:a4:21:6b:80:
                    95:08:a8:89:2a:2d:94:75:53:7c:d3:aa:aa:3e:09:
                    87:31:87:85:64:f7:ee:93:8e:40:c6:ba:f0:ec:14:
                    ac:e3:0d:4a:dc:e3:c5:e8:5d:53:14:56:c5:97:df:
                    37:af:4b:8f:db:18:46:30:35:0d:24:a3:58:15:56:
                    93:d4:95:19:33:a4:85:80:90:e6:d4:fb:2e:29:22:
                    2d:74:b7:30:82:13:c4:f2:0a:4a:7a:c0:7b:9a:0b:
                    cd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B7:7A:12:BB:F2:B3:35:ED:4C:A7:6F:C9:4F:63:8F:7A:5D:7F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7eda0039-a73d-30ae-b2ae-64abbdbeb764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.86.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a7:80:bf:97:b4:00:ad:82:e3:45:d8:ef:95:10:f8:f7:24:
         22:82:b8:98:19:70:9d:1a:c4:d1:f1:17:c7:70:fe:a7:42:09:
         ae:e1:c3:aa:44:50:df:57:41:c2:5d:ed:1d:4e:94:b2:6d:9d:
         52:c2:86:ee:a5:e4:ec:3e:6e:4f:c8:6b:fb:40:51:b2:3c:f8:
         24:8b:d4:62:de:2e:e9:18:0d:ca:bf:37:cb:16:e1:a1:e8:14:
         f3:8d:eb:d2:dd:79:7b:f6:40:21:6f:f6:1e:e6:59:9e:91:28:
         38:e9:97:6c:88:53:40:b1:ed:51:40:e9:5c:69:50:60:86:58:
         4a:de:37:8a:94:cb:4a:10:62:6c:aa:55:f2:af:3b:d9:59:19:
         7a:e0:ab:dc:5b:af:ac:f4:c3:03:59:90:8b:ef:c0:c8:69:3c:
         b0:1d:4d:65:4b:46:28:b2:6d:36:e5:d7:72:24:aa:3c:24:f0:
         fb:56:ed:4e:56:6c:0d:69:08:ad:11:1b:63:39:72:ad:6d:39:
         8c:9a:ce:50:8d:e1:1c:66:f6:1d:7c:64:fb:01:59:6c:e2:86:
         ba:10:4f:37:f5:82:8c:20:39:73:ea:63:f5:92:4b:fa:08:e7:
         b2:be:da:8c:fa:b7:3c:8a:f6:51:02:df:bb:94:13:a3:20:2a:
         ed:db:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:58:15 2026 by rpki-client