Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0342b8f3-057f-3bf8-9394-1f273c1b1e3b.roa
File:                     0342b8f3-057f-3bf8-9394-1f273c1b1e3b.roa (raw, json)
Hash identifier:          8NnZcfElPLb74ehUYVsyTqHjN9HPaVRjPceyrDifXRA=
Subject key identifier:   D5:91:3C:47:B0:FC:83:AF:97:B8:05:E7:0F:46:14:52:27:5D:41:79
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584EC20C7CFF018E5F4D6C5E6180
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0342b8f3-057f-3bf8-9394-1f273c1b1e3b.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     55081
IP address blocks:        192.119.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:7c:ff:01:8e:5f:4d:6c:5e:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=60e95d47-1b5a-4378-bbe3-2705434cda5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:cb:ba:64:9d:8b:1d:80:3f:24:8d:96:37:
                    08:ec:d2:67:ed:27:01:9c:67:32:0f:f5:b8:8a:24:
                    aa:65:6f:2d:ca:d4:ac:d4:43:22:d2:1e:43:3d:77:
                    21:55:33:8f:f5:be:36:c4:f6:21:78:f9:e4:df:05:
                    03:46:b7:16:79:eb:07:53:91:16:ac:dd:98:11:f2:
                    d6:e9:ba:89:04:26:6a:1a:77:7c:2d:f1:2f:dc:53:
                    5e:34:fd:b6:2f:54:17:d7:e0:06:13:ac:5f:26:0a:
                    e8:42:36:21:9f:72:7d:6c:77:09:3d:be:30:b3:82:
                    c3:eb:a8:07:66:3a:23:3e:b8:d5:2c:bd:23:2e:bc:
                    fc:9a:99:ab:e6:bd:7b:1d:e0:09:f2:98:58:d8:e4:
                    ca:4f:bb:a6:4d:00:b4:64:bf:df:83:d2:c4:c1:00:
                    49:c7:37:50:a4:1a:eb:84:84:5c:2c:43:21:df:f7:
                    1d:a3:7f:5c:f6:54:a3:c2:e4:f7:20:d0:9d:32:58:
                    c9:50:d1:bd:b5:54:cd:2e:9a:74:b9:73:64:30:57:
                    af:a1:45:07:46:fe:db:34:df:c3:2f:f3:0a:6f:3b:
                    c7:b0:4f:cc:ce:a3:84:30:bd:fe:70:f3:a1:47:cb:
                    35:f6:19:05:bd:a1:92:16:92:93:58:db:47:5d:12:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:91:3C:47:B0:FC:83:AF:97:B8:05:E7:0F:46:14:52:27:5D:41:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0342b8f3-057f-3bf8-9394-1f273c1b1e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:3a:c6:bc:0f:80:38:cf:ae:25:7f:1b:03:2b:ef:52:3a:5e:
         ad:d1:39:ec:87:ab:da:49:78:87:d9:2b:78:78:3a:b9:66:ec:
         73:a9:60:35:93:58:cc:d5:08:1c:0d:1c:2a:1c:2c:cc:7f:10:
         3f:f4:1b:f1:b4:1c:68:e9:68:03:2f:b8:ff:1f:e1:9d:23:cf:
         8e:be:96:d9:fb:4c:57:ad:74:8f:83:84:07:b5:20:21:33:fd:
         02:ce:5e:40:22:74:9b:c8:60:4e:83:d6:db:1b:fe:eb:7c:1b:
         20:9a:8b:3a:f9:0f:8e:2b:64:d2:6d:9d:0d:fa:46:a5:58:41:
         ce:7b:16:65:17:c0:5b:d9:43:1f:64:12:bc:6e:dd:78:fb:a2:
         42:65:c0:78:55:ef:3a:bb:bd:e6:aa:ae:44:a2:7b:64:82:15:
         b6:40:c2:bc:fe:98:36:fe:d8:cb:3c:ef:39:81:44:1b:57:7f:
         ea:97:ac:b5:48:d0:16:e1:d3:90:09:48:83:20:c0:7f:19:fd:
         72:a4:b1:8f:86:d2:7f:fa:f1:b5:32:24:44:90:ac:cb:5a:0a:
         93:0b:42:98:de:10:9a:00:29:d1:d8:42:db:7c:87:3c:87:ba:
         79:7f:bd:1a:35:7c:ff:f0:d1:91:a2:77:16:f9:ab:72:c8:57:
         e3:e4:c7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 17:42:03 2026 by rpki-client