Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa
File:                     a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa (raw, json)
Hash identifier:          Vzz7lyEC3ac1VELV4B5z7tHXgxuu5zt6YA/pbgJA8Lk=
Subject key identifier:   81:DB:BF:10:95:77:8F:E6:78:C3:76:D6:0A:A2:F0:74:FE:A1:E6:28
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584DD78B1CD250DA30427C563BA0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     31898
IP address blocks:        199.87.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:1c:d2:50:da:30:42:7c:56:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=cebd504a-2d10-4b60-8eb5-84b132337312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:5e:4f:c6:02:3b:e8:08:23:35:0d:5f:53:
                    d3:fe:5c:45:09:70:1f:fb:bf:4d:ef:ce:7a:9e:cb:
                    1d:68:09:7f:73:83:eb:82:bf:b9:9a:c5:7c:9a:4b:
                    8e:04:8e:b6:04:0f:b0:31:80:3b:ae:71:bb:0e:09:
                    17:6f:22:4b:c5:a6:3b:bb:5d:84:3f:0d:bd:80:0e:
                    db:d1:de:c8:e2:32:27:7e:fe:4f:05:d9:0e:8b:8a:
                    97:bd:8a:3d:a1:99:58:66:f8:8c:6d:61:d8:c3:c0:
                    25:f6:2b:9c:3e:5d:eb:1b:a1:e0:93:44:e5:19:9a:
                    a2:c5:32:a6:43:cf:7a:6b:ad:13:48:58:da:b9:91:
                    e4:0a:57:49:43:e6:48:f3:06:31:8a:8d:47:2b:72:
                    3e:f8:15:2d:3c:99:96:66:ef:38:cf:fe:35:80:22:
                    2b:00:07:f3:04:9d:6f:ee:ff:6c:40:e8:f3:23:37:
                    e8:32:9d:ed:0d:5b:84:59:8e:fc:ce:c1:d7:d5:96:
                    a3:2c:a5:c3:e0:a1:f3:4e:3e:03:1d:05:4a:d9:0d:
                    af:53:b5:21:d8:d8:ec:9d:60:3e:72:87:ba:1d:35:
                    10:e4:f9:a4:fc:1c:02:f1:c9:ad:72:7d:7d:c0:a4:
                    17:de:9b:fc:57:96:33:01:7e:84:45:0b:fc:f7:64:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DB:BF:10:95:77:8F:E6:78:C3:76:D6:0A:A2:F0:74:FE:A1:E6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a1c6e189-8a41-30f5-a258-f411e87ea9bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b4:5e:09:fc:e6:d8:cb:31:22:9d:f8:f6:f4:3b:c3:d7:38:
         a4:51:cc:5d:46:ca:e8:31:bc:65:94:45:d5:16:e1:1d:5a:75:
         f9:5f:ae:fe:1b:b2:41:f7:98:6b:a9:47:d1:0f:91:60:1e:85:
         1d:d4:f5:41:a9:10:0b:0d:88:28:2d:a9:0e:68:34:d8:ac:c8:
         a7:6c:c9:da:09:60:5d:1a:96:ec:f0:74:d8:6c:7a:b2:df:bc:
         90:eb:7b:5a:7c:38:18:ae:a7:7d:cc:f4:eb:11:50:b0:2e:42:
         2d:cc:b1:b8:97:94:1a:29:33:b8:5e:79:72:e6:8c:6b:c2:98:
         e0:50:de:b7:73:6e:a3:d2:22:f0:e0:59:04:50:c2:fb:fc:ec:
         6e:c6:61:ca:46:7d:6d:65:3f:52:da:6e:ac:cb:56:b5:af:a7:
         14:d4:8f:d0:8e:c7:96:ac:af:9c:79:ee:39:b3:24:59:d4:14:
         79:16:8a:87:b7:4d:4b:14:c7:a8:27:1c:2f:07:ce:29:1b:0f:
         02:1c:f3:00:27:89:0c:88:f4:13:36:26:d1:da:ab:c0:8f:cf:
         18:03:8a:2a:d4:7b:37:15:86:a2:06:44:2b:bf:e1:cb:77:57:
         bb:f8:99:34:65:f8:05:5b:75:45:a1:9d:b2:89:ea:5c:ed:2f:
         53:b9:2e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 10:20:04 2026 by rpki-client