Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be9b1a62-e440-316e-a4d1-b04c34b30be9.roa
File:                     be9b1a62-e440-316e-a4d1-b04c34b30be9.roa (raw, json)
Hash identifier:          AgayWTmDQEsXhaReOMI6DVkFUXYPDc3slK55qAJkjUE=
Subject key identifier:   83:D6:78:B5:91:CA:77:21:9B:5A:EC:38:58:2A:CA:12:15:2F:CE:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7A64ED3A13882C66C1591C40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be9b1a62-e440-316e-a4d1-b04c34b30be9.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     200005
IP address blocks:        170.199.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:ed:3a:13:88:2c:66:c1:59:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=c6633e52-0d0d-4f1b-8f69-e3b3573e9069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f7:57:37:bc:d5:ff:34:b5:96:11:14:6d:a9:
                    61:37:64:cd:21:53:f1:11:3e:73:c9:0f:4d:30:7e:
                    9e:28:a8:07:97:47:30:d0:84:23:4d:f7:18:0c:5b:
                    63:c8:60:11:cc:31:eb:48:9c:56:bd:93:d8:15:46:
                    c3:cf:91:4e:4b:c1:06:5d:0a:af:ce:4d:55:48:00:
                    18:66:79:a4:13:62:13:5a:2e:e9:69:76:94:b3:8c:
                    0e:fb:21:2a:57:5b:56:c9:d5:d6:c5:25:07:fa:69:
                    26:5c:55:95:70:e9:8d:2c:e6:dd:16:02:cd:33:2f:
                    91:fe:78:a0:f4:3b:18:af:f0:9e:31:f5:53:48:94:
                    05:2f:f2:d6:9d:8d:ff:4c:7f:99:b6:ce:c7:87:8d:
                    f1:8f:d0:86:d5:8b:e1:7a:c4:05:48:b3:f8:78:0b:
                    61:63:44:f2:9a:95:c4:e0:ec:41:5c:86:ba:bf:38:
                    ec:a2:9b:73:d2:3e:d1:cc:c2:9c:ef:65:2d:e2:a9:
                    8c:41:ae:14:9b:0a:23:a4:87:99:ac:49:ac:07:61:
                    e4:58:fc:97:86:a3:ab:25:59:46:d9:10:ad:9d:32:
                    65:1b:c4:6e:43:ea:ee:2c:c7:9e:38:a5:44:53:4a:
                    c7:94:11:7b:3c:74:dc:ac:da:81:7b:fa:95:f6:10:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D6:78:B5:91:CA:77:21:9B:5A:EC:38:58:2A:CA:12:15:2F:CE:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be9b1a62-e440-316e-a4d1-b04c34b30be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3d:7a:18:19:f2:d7:d2:8e:4e:5e:7b:61:b2:93:35:0d:fe:
         66:24:d8:b7:ec:13:b1:91:5b:99:8f:cf:9a:3c:a0:26:39:d8:
         f6:98:d5:af:02:29:95:60:dd:05:03:07:07:e7:ab:3c:f5:d6:
         56:04:0d:fc:bb:f4:57:da:ff:c8:bd:80:11:bd:8d:08:12:f3:
         69:3f:cb:58:6d:5d:e8:9a:cf:ed:ce:5e:6c:7d:dc:03:64:55:
         33:82:85:71:9f:dd:23:8e:40:a4:a2:b4:9b:42:17:84:a6:30:
         76:68:ef:3e:8f:24:5d:ee:3d:3c:3c:23:d3:f6:3b:fa:6d:23:
         81:21:5b:2e:8c:32:f6:50:bd:c5:2b:ad:52:2e:ca:93:83:a2:
         b6:06:02:d0:e8:86:01:e5:27:a0:6c:18:2f:f1:53:39:23:d2:
         71:f6:3e:b5:cf:d9:e9:b6:4b:3f:e9:06:98:86:10:31:4c:ca:
         7f:7d:61:67:72:4b:b1:fd:31:4a:35:a7:34:2f:24:51:db:78:
         15:99:d3:b5:21:19:55:31:2a:23:7f:00:12:44:c8:bb:5e:50:
         cc:2d:19:98:e2:97:bc:ba:db:aa:4f:3b:d3:53:58:02:74:6f:
         4f:88:d8:08:07:5f:fe:de:32:bd:1a:37:f6:ef:3f:b7:5d:01:
         6d:b6:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:45:04 2026 by rpki-client