Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa
File:                     d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa (raw, json)
Hash identifier:          GFeyJEPPSdxiaNKmkMPd1aeL3koYeMb7tB2xn7GUQWc=
Subject key identifier:   7F:88:C6:1B:6F:CB:46:C4:32:A1:49:0A:3A:F7:75:53:04:D2:56:F1
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584ED9C7521C22DECBC2E2C75000
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     12129
IP address blocks:        216.109.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:52:1c:22:de:cb:c2:e2:c7:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=06fe123a-941e-49d4-aa3b-7fa411f73661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:2c:1a:bd:9e:71:56:cc:b6:7a:ce:4e:cb:
                    a9:43:5e:a9:e1:e1:df:58:b3:1b:b9:8b:0c:af:66:
                    5d:c1:d5:29:70:ef:12:a3:4a:9c:f9:a1:1f:c4:a6:
                    ab:62:5b:02:ac:a0:39:49:74:bd:1f:ef:7f:52:b7:
                    c2:56:e5:4e:dd:95:a8:e3:ee:33:f8:46:6a:06:6c:
                    bf:0e:a7:1d:d9:c2:5b:2b:10:bf:ea:03:7a:95:b7:
                    49:3e:b8:c3:b8:63:b4:81:d3:46:a5:0c:d2:3e:ec:
                    be:69:30:64:da:13:43:d2:6a:1e:2a:e6:1f:81:fc:
                    89:3e:4a:ac:53:9c:9a:15:64:45:0f:51:7e:bf:a4:
                    d1:fd:2d:f1:00:1d:b5:98:2a:08:e8:69:a2:da:4a:
                    0b:21:51:52:da:b0:06:cd:76:5b:c0:8d:9d:e4:6a:
                    d9:35:3e:8b:02:36:68:1c:35:5b:e2:69:f0:6b:9f:
                    c8:69:ea:88:47:d2:04:ad:e2:c6:ba:8e:74:83:a2:
                    de:42:b9:8c:02:cb:c2:a8:04:d2:79:32:b6:d9:12:
                    f8:32:5c:60:33:37:91:64:ed:ec:2e:ab:40:f5:7f:
                    96:95:c9:89:e9:46:9f:92:2f:55:39:53:2a:cd:c5:
                    04:12:70:41:cb:3d:ed:20:90:99:f3:78:79:99:ca:
                    5e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:88:C6:1B:6F:CB:46:C4:32:A1:49:0A:3A:F7:75:53:04:D2:56:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:49:81:e8:b5:61:36:95:66:17:3d:c6:74:12:94:5c:1b:fa:
         67:83:f8:0e:d1:db:3c:d4:b2:9f:60:39:24:ce:54:b1:99:5b:
         85:fa:99:58:9d:23:2f:02:c4:04:ee:c4:93:b1:18:94:f0:39:
         d2:8e:0d:a7:88:b1:37:f3:b9:36:b9:8f:18:80:16:cf:de:6e:
         df:6c:50:fb:1a:aa:8d:8b:56:88:ef:5d:a9:23:8f:e9:68:ab:
         9c:60:7b:f1:36:97:fd:40:10:75:c9:3a:4f:38:78:cd:dd:69:
         90:c4:3e:92:38:96:46:60:6f:f9:02:86:a7:b5:93:ef:3d:1b:
         26:8e:cb:b2:3c:d5:a3:b3:08:bf:e6:71:f8:e2:6d:19:8b:e2:
         96:86:4e:65:56:7f:a8:04:9b:65:3d:5e:b4:08:89:da:9c:2b:
         23:73:4c:c5:e1:8e:3a:c8:20:75:1d:2d:20:e1:74:55:63:46:
         28:60:3c:15:aa:fd:6f:03:dc:b2:d9:34:fc:4d:7a:89:ee:a8:
         66:31:90:88:0f:a9:d6:fc:23:e7:e7:63:4f:1b:95:c4:6a:b5:
         ae:c4:a8:ee:70:0f:49:f8:d5:4d:31:34:8b:65:b9:93:3c:a9:
         f5:9a:61:23:17:6e:69:d6:d5:10:15:c4:2e:89:44:b8:86:ba:
         46:df:63:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 05:47:40 2026 by rpki-client