Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d413dd1-ed31-37a3-88d7-cdfc2c2f0f6b.roa
File:                     8d413dd1-ed31-37a3-88d7-cdfc2c2f0f6b.roa (raw, json)
Hash identifier:          FDr8LF8CytjcbB6Cjiyo+eNMMRkD3YTovcAw6w4klyA=
Subject key identifier:   37:48:AB:53:4F:37:9D:CD:B6:7A:85:50:6D:1E:0F:09:BD:AC:87:87
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE84B40E9ACC8CCA04925AB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d413dd1-ed31-37a3-88d7-cdfc2c2f0f6b.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     9299
IP address blocks:        184.87.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:40:e9:ac:c8:cc:a0:49:25:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=d0850a75-5a06-4949-b435-e1962e8abdee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4f:5d:9d:a7:bc:d1:83:68:0b:ae:fa:bf:96:
                    73:97:5d:5c:f0:2f:75:e7:04:ce:3f:cf:64:a4:e4:
                    4b:69:39:a3:6e:d0:b2:40:9c:ef:a3:00:6b:c0:06:
                    1c:b4:07:4a:5c:ff:7f:e5:ed:b8:bb:3f:34:a1:dd:
                    9f:36:e8:fb:2a:42:e5:93:18:4a:db:24:af:a9:3a:
                    d9:92:38:f5:db:ef:73:46:da:3e:34:91:b9:ed:04:
                    6f:f2:b9:56:ab:77:e7:5d:7c:ae:e5:0c:b0:ca:03:
                    ce:b3:b1:86:fa:20:b9:ad:b9:37:f2:8c:5d:17:dc:
                    32:f0:54:7c:21:07:c5:df:da:48:95:e5:a7:c3:c2:
                    83:b2:28:31:f2:29:74:af:bf:f1:e8:71:69:7a:66:
                    bc:0b:67:e8:f3:cd:02:93:d9:db:42:bf:3c:72:9a:
                    9c:81:23:25:a5:e0:fd:13:ee:22:09:19:24:c4:ec:
                    e6:22:05:50:3a:c6:fd:a8:26:e3:6c:e4:57:88:54:
                    91:fe:61:31:c1:4b:7b:94:4b:20:87:47:d7:02:ca:
                    68:16:a3:2a:a5:27:89:cf:1f:99:54:f7:5f:c4:16:
                    ec:58:a6:aa:06:56:79:35:99:06:2c:42:f7:6d:cc:
                    cd:19:6e:83:4e:ce:aa:4c:cb:03:5a:66:e1:1d:06:
                    74:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:48:AB:53:4F:37:9D:CD:B6:7A:85:50:6D:1E:0F:09:BD:AC:87:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d413dd1-ed31-37a3-88d7-cdfc2c2f0f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.87.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:54:df:84:86:f6:c5:e6:f5:cd:52:33:86:eb:b2:b7:47:20:
         b5:68:8d:e3:62:f1:ad:57:52:35:2b:85:e1:7c:86:88:1e:53:
         0a:98:c4:5b:d8:e8:6f:07:0a:56:69:79:fe:3a:ef:d9:69:ee:
         21:06:93:7f:24:aa:77:8b:65:e9:71:0f:04:d4:4f:fb:d4:a3:
         ce:c8:ab:98:ec:7d:a9:39:7b:b6:e3:f7:ca:0c:9e:5d:3b:dc:
         10:5c:70:56:ca:73:b3:bf:85:1f:20:da:70:6a:04:52:87:14:
         cc:5f:4d:6e:32:3f:1d:3f:bd:92:f0:56:7d:4f:dd:12:c0:54:
         74:29:ae:5f:82:f9:0a:ef:e4:e9:b7:19:c5:3c:20:a8:a7:a0:
         c1:1b:cf:78:81:67:d9:94:a4:02:ba:34:90:bc:b9:c1:a4:d0:
         17:bf:2e:30:c6:c8:65:16:d8:ac:76:2d:ee:2d:dd:8d:3b:f3:
         a2:0e:78:06:7f:06:67:fa:43:4e:b2:23:23:5b:5c:f9:3b:27:
         c8:fa:60:f4:66:15:03:96:e5:f6:ae:36:57:09:7e:57:23:b7:
         53:1e:ea:e4:98:f0:59:d2:67:ce:17:a5:80:7a:b2:69:f4:ec:
         be:86:88:82:31:00:90:f2:cf:5f:9c:04:4f:66:36:aa:ee:8d:
         f4:f7:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:52:07 2026 by rpki-client