Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/4fd26e6f-1080-3ba9-b2d5-a8f3a821949d.roa
File:                     4fd26e6f-1080-3ba9-b2d5-a8f3a821949d.roa (raw, json)
Hash identifier:          yCKJrqEHyggRXltWfWy1384UGwcXVcrp65ht16p9GLs=
Subject key identifier:   45:B6:31:DD:CA:A0:12:C9:5E:23:24:3B:4D:C4:8E:9B:4F:42:B4:49
Certificate issuer:       /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
Certificate serial:       010D0C9F4328584E7204C8F558226468F4281740
Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/4fd26e6f-1080-3ba9-b2d5-a8f3a821949d.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     20326
IP address blocks:        141.98.216.0/22 maxlen: 32
                          202.8.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c8:f5:58:22:64:68:f4:28:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=69ef3750-644b-4fcd-8640-939fa0f77aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:61:ca:25:df:84:cf:34:87:bc:c4:6a:7d:ca:
                    67:8d:e5:9e:a9:47:80:c1:b3:f1:d5:30:24:13:fe:
                    a4:ce:26:3a:45:a9:75:ce:bb:1f:ba:9f:c3:5c:22:
                    a3:40:1f:37:51:33:44:d5:4e:9e:3a:b0:d9:df:3a:
                    52:22:de:b9:f5:a4:9b:7b:f1:f5:2d:aa:98:2c:d5:
                    a2:53:f2:ec:fd:51:1c:e1:0a:a6:d9:1f:41:bd:0b:
                    0f:05:4c:09:21:3c:67:b7:93:a6:cb:bf:e1:a6:a3:
                    0d:d0:71:70:c2:7e:9a:40:e7:e0:c1:ab:1e:40:e0:
                    b9:f4:d6:4a:0a:ca:e8:33:18:9b:1b:6a:d7:e2:5a:
                    19:e4:a6:7b:44:07:56:6f:71:c3:d4:3a:46:a0:5a:
                    b2:a9:56:9f:8f:ec:06:81:5e:ce:7a:a1:d5:78:aa:
                    0b:f0:73:74:3b:6d:05:ed:66:04:6a:86:5d:f3:55:
                    1b:5e:b6:cb:65:38:59:62:de:4d:84:5a:9a:75:bc:
                    aa:ad:44:52:6f:4a:a1:81:35:b1:7e:03:2b:3b:1f:
                    12:9b:d4:c0:8e:43:04:c7:20:85:d8:c8:9f:d0:8f:
                    80:f7:1b:18:fd:f1:c1:94:e2:94:d8:5f:98:4b:68:
                    e9:70:ca:69:8f:03:0f:32:6a:40:e1:19:08:c0:02:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B6:31:DD:CA:A0:12:C9:5E:23:24:3B:4D:C4:8E:9B:4F:42:B4:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/4fd26e6f-1080-3ba9-b2d5-a8f3a821949d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl

            X509v3 Authority Key Identifier:
                keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.216.0/22
                  202.8.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:64:d7:39:47:7b:fd:74:97:94:d8:e4:96:f5:3a:99:1e:c1:
         b8:ac:6e:3b:d0:19:ea:6a:14:b3:1e:e8:9f:e2:5c:85:f3:c3:
         bd:87:3e:57:04:2f:d2:9f:c7:93:c8:5d:d1:ad:f0:a8:68:ce:
         0b:c3:49:84:aa:dc:9c:a7:a5:33:19:3c:84:cd:42:fb:ff:77:
         52:15:f2:41:6f:3f:ca:c9:fb:c0:04:6b:9c:65:27:94:14:c7:
         42:b1:a4:d8:53:4d:2f:37:30:20:70:3e:b4:8b:c7:94:b2:df:
         47:89:31:69:c8:97:db:30:49:09:87:6e:de:97:9c:85:ba:f1:
         d3:52:89:fe:e7:75:19:23:b6:c0:d8:fc:eb:c9:23:e0:84:38:
         15:66:7a:83:0e:bc:19:2a:b0:4f:7d:5d:9b:17:5f:21:43:2f:
         35:23:33:5c:ab:32:2a:3b:83:fc:75:36:b2:f2:8c:45:de:c0:
         83:25:82:8a:a7:2e:03:93:80:c3:83:71:fc:dc:7c:ee:e5:dd:
         e1:e6:6d:1f:72:1c:f5:a5:27:a1:9d:d3:e3:3d:c0:33:4e:17:
         39:1d:ec:37:14:84:91:c1:1f:8b:a7:b6:ca:67:af:4a:fc:71:
         a1:e8:b5:83:16:2d:c5:20:1a:e4:c0:c7:17:f8:b5:59:32:b4:
         6a:94:d4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:46:16 2026 by rpki-client