Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/19564b16-2beb-3f4d-a0b0-b78e7df797d1.roa
File:                     19564b16-2beb-3f4d-a0b0-b78e7df797d1.roa (raw, json)
Hash identifier:          s30BbrtVZMM1fb93qC4p/xQpVlSrzdE9fbL3LU4cbOY=
Subject key identifier:   23:1D:91:41:83:E7:EA:A7:05:75:84:61:80:99:6F:4D:86:C5:66:D2
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584EB9A86024E264913CB978DE80
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/19564b16-2beb-3f4d-a0b0-b78e7df797d1.roa
Signing time:             Tue 04 Aug 2026 12:52:19 +0000
ROA not before:           Tue 04 Aug 2026 12:52:19 +0000
ROA not after:            Mon 02 Nov 2026 13:52:19 +0000
asID:                     7270
IP address blocks:        204.13.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:a8:60:24:e2:64:91:3c:b9:78:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Aug  4 12:52:19 2026 GMT
            Not After : Nov  2 13:52:19 2026 GMT
        Subject: CN=91c39bd2-d6ef-4f8e-80af-9cfe981fb12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0b:95:fb:a7:a5:68:5c:31:28:0d:42:7a:40:
                    d1:22:15:dd:a1:7d:15:87:77:53:88:e3:bc:f6:38:
                    50:85:12:b2:90:a6:e2:6d:ac:88:d0:97:94:41:e3:
                    7f:e4:40:f3:b9:1f:2b:2f:bf:72:3e:91:69:c4:75:
                    ef:bd:9e:f9:4b:e7:ee:73:cb:cc:be:f6:51:ff:2d:
                    42:10:7c:7e:1d:8c:fb:73:69:f3:11:f3:59:8c:78:
                    2d:1c:16:ef:ad:88:db:13:37:5c:c4:0f:b9:ec:c2:
                    ed:d1:3e:60:43:70:71:ba:e6:02:58:82:c6:0a:a9:
                    7f:eb:6f:48:2b:f6:95:c2:55:48:ee:9b:1a:77:68:
                    12:f2:b6:2e:7b:cf:a7:fc:8d:2b:0f:b4:9c:7c:94:
                    4b:e5:93:67:8e:28:37:fe:8f:85:78:be:1f:87:4b:
                    b0:8b:6b:54:2e:e3:36:88:0b:ac:3a:37:61:25:27:
                    6c:42:79:b9:3a:47:06:8a:88:3a:78:50:9f:b8:62:
                    3c:f8:d6:eb:b0:60:0e:84:a8:d4:88:c1:98:d8:1e:
                    a5:c5:dd:d1:ef:3f:18:4e:5b:a9:f9:2a:d9:f6:bc:
                    51:96:c6:be:fd:d1:47:d3:94:ce:c3:25:e3:3f:0a:
                    07:3f:81:6f:22:31:a0:68:49:ed:e3:09:14:74:dc:
                    06:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1D:91:41:83:E7:EA:A7:05:75:84:61:80:99:6F:4D:86:C5:66:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/19564b16-2beb-3f4d-a0b0-b78e7df797d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f4:9f:da:28:84:20:2b:a7:0d:24:54:cc:ae:35:d5:0f:7c:
         5c:9f:9a:3a:af:51:17:06:63:3a:91:fa:86:1d:9c:8d:ec:2f:
         04:36:0e:e2:bd:02:98:46:55:0d:78:44:54:da:db:ae:24:26:
         ee:7e:c8:1a:db:60:f0:f7:20:5e:a5:ec:24:4e:52:35:4b:80:
         c5:86:50:34:8b:78:ff:5a:09:4b:96:20:54:0a:98:76:3d:90:
         82:86:0f:63:78:9b:68:9b:7d:a4:a2:97:b7:bd:78:8c:df:73:
         d2:41:85:06:58:3c:04:5f:2e:3b:14:fe:f9:70:f9:9c:38:7f:
         71:dd:68:38:04:23:5e:91:45:cd:d2:47:fb:76:ce:5c:3a:36:
         1b:35:e6:29:f0:0b:fa:68:ab:d9:9f:39:ed:01:7b:66:c3:ae:
         25:1d:88:49:02:66:56:fe:92:fa:37:81:07:77:16:af:ce:96:
         2e:b6:52:75:77:5e:4e:7a:90:b7:ee:2b:47:1c:47:31:ea:38:
         4f:26:c6:75:f0:82:ad:fa:26:2d:e9:6d:b0:46:11:5c:99:f2:
         94:52:c9:5e:25:ab:f4:dc:dc:aa:c0:92:db:a0:7b:b5:09:d1:
         f0:f0:5c:1a:f4:d8:7f:b7:8c:83:7d:9d:38:7c:d4:f9:7f:cf:
         e9:ee:6d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:49:51 2026 by rpki-client