Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/e5576dbf-19f1-39d5-beda-ee97433a2673.roa
File:                     e5576dbf-19f1-39d5-beda-ee97433a2673.roa (raw, json)
Hash identifier:          SWZfZoO6z6OeYEGBBuVzh7ac6LnlvkIO9tI6ap6AUvI=
Subject key identifier:   32:24:A1:33:AE:4D:6F:95:04:3C:32:E2:CA:BD:F7:8D:B0:6C:17:4F
Certificate issuer:       /CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940
Certificate serial:       010D0C9F4328584ED001D96A458BFB1BBF588D80
Authority key identifier: F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/e5576dbf-19f1-39d5-beda-ee97433a2673.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     19747
IP address blocks:        199.195.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:d9:6a:45:8b:fb:1b:bf:58:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=3e5f9597-c16d-4e7d-a7fd-8803c07ff08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:a7:bc:af:e3:1c:93:1b:94:31:f9:1f:a0:
                    08:bf:4d:64:4b:2d:b0:c8:6b:8c:ea:5d:eb:b3:04:
                    bb:e0:39:c8:5f:af:6a:4e:28:36:0b:1e:59:35:31:
                    a2:7c:9d:05:f6:e9:05:63:f2:a6:69:b6:22:63:a9:
                    7a:ca:76:2b:61:05:9e:7a:93:5d:d5:ea:d6:0e:ac:
                    8a:5c:b6:c4:ec:c3:c2:0f:3a:48:cc:c5:ba:10:ce:
                    b3:58:75:8b:1f:71:51:8a:43:71:dc:22:9a:e3:19:
                    7a:9f:a0:ec:fe:b0:ee:a0:36:9e:dc:81:b3:25:ea:
                    be:d5:6b:74:cc:0c:7c:de:82:1d:66:53:d9:35:45:
                    43:a1:ac:0e:55:97:37:1d:c7:38:af:4f:a5:f4:ea:
                    04:d9:34:12:6a:d7:6e:8d:76:d6:fb:f6:d1:e0:8a:
                    7e:77:e9:06:72:a5:cb:42:a4:47:15:2c:00:73:50:
                    da:9a:bd:f7:65:c0:8d:9d:b9:60:81:eb:05:37:7c:
                    f7:65:96:b0:1d:58:e4:52:b7:05:ab:2e:3a:e4:4c:
                    a1:5b:31:96:d3:43:83:cf:22:40:64:69:3d:83:d2:
                    f7:3b:75:9c:b4:84:37:2f:f7:a3:dd:b8:90:c8:b4:
                    c1:df:57:84:ea:d6:2f:e7:7b:ea:a6:75:bf:2b:b3:
                    3c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:24:A1:33:AE:4D:6F:95:04:3C:32:E2:CA:BD:F7:8D:B0:6C:17:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/e5576dbf-19f1-39d5-beda-ee97433a2673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl

            X509v3 Authority Key Identifier:
                keyid:F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d2:81:c5:f3:33:6e:90:6d:4c:8f:df:0b:ef:e8:66:03:ea:
         fb:93:d7:b6:58:1e:c7:4f:03:a1:b0:16:e8:2e:f1:28:b2:22:
         48:5c:4e:1b:7e:1c:ed:e5:6f:4c:93:40:63:32:8f:44:b5:5e:
         d4:98:ee:f9:ac:3b:f6:9d:0c:a7:0f:e8:51:ad:6b:c4:f4:19:
         e8:86:6b:8a:d1:a2:e1:35:43:c3:86:4f:ce:b1:2e:32:ae:a4:
         37:be:be:9c:9b:2a:e9:4e:51:f8:6b:1c:1d:90:fa:9c:f7:a7:
         af:44:a1:4d:be:bc:5b:c3:46:26:a4:0f:1b:2a:21:56:21:fa:
         71:13:e2:1a:e3:af:5c:8a:e1:55:f2:7f:b4:b8:9e:32:db:24:
         6c:97:ed:84:77:1f:5c:7c:a3:6e:eb:2c:40:11:15:39:44:c3:
         8a:78:83:27:b7:03:29:a8:94:a4:8c:ed:e7:c2:50:78:08:f5:
         f0:a9:31:a4:56:96:57:5b:04:da:51:e0:52:64:6d:3e:82:1d:
         c0:ed:40:1c:7b:b1:3c:77:77:d3:5c:6b:fb:cd:2d:d9:c9:f0:
         f4:97:0a:aa:b0:be:94:4c:40:11:df:ae:7b:3a:3b:d7:01:7a:
         d4:21:c4:7a:f4:c9:0f:91:13:20:92:d8:e6:7d:52:25:0b:b0:
         5d:98:e6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:06:00 2026 by rpki-client