Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/e435fae9-0730-3b11-a8a1-03164503f229.roa
File:                     e435fae9-0730-3b11-a8a1-03164503f229.roa (raw, json)
Hash identifier:          GXx5JYmHLBh1Iyg+YoQVSmeFsnoA2v28PmO36Y55RHo=
Subject key identifier:   D1:9A:0D:F3:5A:83:A2:A8:85:CB:6C:E9:D9:60:13:0D:1F:A8:02:AD
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F4328584ECBD1D3F1F36F9162CE239800
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/e435fae9-0730-3b11-a8a1-03164503f229.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     14618
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d3:f1:f3:6f:91:62:ce:23:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=485d4dd3-fab5-4091-ba68-ac6d2c4b62fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:48:cb:89:45:43:95:fc:c1:31:72:73:95:
                    f9:6f:bc:3b:78:6b:e8:b3:40:d4:86:64:53:ab:24:
                    32:35:15:83:bc:de:10:e5:80:20:53:e0:85:79:ad:
                    ac:53:7c:c1:9b:35:2c:28:6c:20:62:e4:f0:4b:fd:
                    6c:9d:05:49:fa:c4:5c:a8:7e:03:a3:71:74:98:8d:
                    92:80:8b:40:88:b6:7d:a9:8b:9d:c9:ac:d6:24:ce:
                    87:65:26:81:75:a3:84:e4:35:da:bf:e0:ba:3b:54:
                    91:32:be:91:0d:a3:93:12:5b:66:03:c0:36:90:8f:
                    2c:b4:ba:c3:37:41:aa:68:3a:99:7d:b7:26:a7:80:
                    5f:ff:31:7c:ea:de:8e:5e:b7:47:a3:62:d1:04:70:
                    82:72:7b:25:41:76:49:0a:e0:e3:06:49:c7:4d:58:
                    e6:e6:8b:c0:01:5a:d3:db:0b:a3:10:08:37:b7:f6:
                    e7:87:21:e9:dd:f2:ad:9f:63:d7:45:50:4b:db:66:
                    df:8e:3a:2a:71:b7:fc:1a:e3:dd:26:0c:5b:b0:8b:
                    b0:49:4f:81:c4:20:63:b8:94:77:61:c2:74:cd:c7:
                    1d:e1:ba:ce:d7:fe:70:bf:d5:5f:c3:8d:35:a1:8f:
                    ab:fc:af:dd:17:1c:6e:bf:cf:53:77:da:7e:58:25:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9A:0D:F3:5A:83:A2:A8:85:CB:6C:E9:D9:60:13:0D:1F:A8:02:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/e435fae9-0730-3b11-a8a1-03164503f229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:3b:e9:bf:ab:f5:ca:ea:a1:2b:f9:7d:b3:3d:bb:b5:60:
         30:8f:70:90:8e:6f:7f:2e:b8:da:7c:f1:21:8a:c2:ac:29:6a:
         3c:f0:18:17:03:12:f3:e0:15:e8:ce:a3:f1:fd:d0:2f:45:8d:
         a3:72:ee:13:dc:38:dc:31:e9:9b:ef:9f:84:55:31:ab:a3:f3:
         b7:7b:95:74:68:8a:9b:ca:32:7c:f8:f4:15:20:f7:c5:57:a0:
         34:45:73:b3:be:a9:c9:b1:09:62:47:b6:70:b1:b5:74:fd:c8:
         82:95:ca:b7:59:34:b1:2c:7a:02:ab:f3:8b:b7:3d:1c:69:cb:
         6a:ce:ff:08:a5:e4:f7:63:00:7b:55:f6:5f:de:b8:2b:b3:64:
         a9:98:4c:91:12:31:78:f5:06:b4:cc:23:8a:2c:06:0d:42:ba:
         f0:36:ab:a6:c2:fd:cd:99:eb:23:11:73:f7:49:a3:40:8b:1d:
         2e:6b:25:4d:2c:27:0c:cd:2f:28:46:fb:b2:da:ec:3e:c5:20:
         c4:c9:34:bd:3d:e0:c0:76:11:e9:07:0c:b3:5f:bd:47:1e:12:
         8e:e6:06:b2:a1:fc:22:af:1f:30:6f:f9:fa:53:77:a0:d4:3a:
         87:92:3b:58:91:a2:90:87:76:0c:a0:46:5f:fa:a2:87:de:0b:
         63:74:d7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:13 2026 by rpki-client