Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/7804d6d8-e8c4-3c3e-b06b-61f591887b21.roa
File:                     7804d6d8-e8c4-3c3e-b06b-61f591887b21.roa (raw, json)
Hash identifier:          cGufzn+r9a8tl/7EbJ/n42RemeuA25jFlS7cb3KZtg8=
Subject key identifier:   33:08:97:D5:F2:CC:4D:6E:11:15:60:FA:5F:0F:1A:58:ED:2C:8F:77
Certificate issuer:       /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Certificate serial:       010D0C9F4328584ED431EE812069820DEC4F2740
Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/7804d6d8-e8c4-3c3e-b06b-61f591887b21.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     36421
IP address blocks:        216.99.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:ee:81:20:69:82:0d:ec:4f:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=d8ea71af-da91-46bd-8587-8ff5bcdc4210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2b:2b:66:1d:36:79:63:c0:ca:d4:87:c1:e8:
                    2e:6e:7d:b2:d7:86:13:49:f8:4d:99:1b:78:d7:f4:
                    d6:05:9e:c8:08:95:dd:ab:65:72:22:43:43:00:1e:
                    6b:08:25:15:39:6c:9f:82:f2:46:f5:2f:4f:fa:ab:
                    04:43:ba:ae:a1:54:e3:9e:1b:2a:04:8f:cb:5b:31:
                    94:0d:04:e4:68:4d:f2:7b:0e:2c:96:22:60:ed:ac:
                    2b:f8:0d:78:1b:a9:0b:54:55:0e:6e:56:75:60:ac:
                    c3:1d:0b:19:ba:2b:44:fa:13:f2:27:7d:87:01:71:
                    47:88:32:bc:be:18:24:cc:fe:ed:5d:e8:41:27:90:
                    a5:9f:a2:96:3e:78:17:54:92:d7:69:d9:ee:3c:cc:
                    d6:58:f4:16:0d:b1:58:e1:9c:22:d9:35:bd:5e:9e:
                    47:33:92:aa:d7:3d:b8:42:5e:b8:a1:d9:7b:a4:4b:
                    b6:10:04:a9:11:c7:67:0d:a8:4a:7c:8b:ae:83:0e:
                    7e:67:a7:57:9f:a7:e2:66:12:5a:ca:a9:48:75:54:
                    d0:03:04:f8:56:d0:b0:70:9a:dd:db:0c:8b:56:d7:
                    4d:d0:eb:e6:01:8b:88:19:13:69:c0:47:8b:3d:d1:
                    2a:ad:b7:97:a1:de:70:b8:e5:07:35:01:f6:f2:4f:
                    b6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:97:D5:F2:CC:4D:6E:11:15:60:FA:5F:0F:1A:58:ED:2C:8F:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/7804d6d8-e8c4-3c3e-b06b-61f591887b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl

            X509v3 Authority Key Identifier:
                keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:6e:0a:07:77:2f:1a:df:a7:fc:a5:a5:ef:42:63:4f:58:0a:
         17:3a:25:1d:73:50:f1:a6:1b:1a:a2:bf:ec:db:05:51:82:6f:
         7e:8e:90:09:50:77:2b:9e:fb:a3:89:d7:ba:2c:a1:75:50:4c:
         95:e9:77:67:78:d8:0e:bb:4b:99:12:1d:e4:36:38:63:a1:bc:
         72:2a:af:dc:0b:fd:64:84:91:2b:2e:bf:25:5a:52:e1:d2:20:
         b4:30:ad:ad:4d:2c:aa:8e:7d:46:e5:43:2d:02:5b:73:e5:71:
         da:6b:4d:12:81:ea:22:6e:7e:e5:04:74:33:27:eb:1b:86:33:
         d6:4c:31:42:31:25:59:43:06:fb:6d:cb:6e:d4:b5:ba:c4:dd:
         e8:44:40:b4:23:26:be:ca:ca:0b:8f:2c:f7:f0:98:73:36:f6:
         8b:9c:e5:08:4e:b2:72:f4:fd:91:63:3f:10:61:98:d5:57:65:
         9c:b6:97:89:23:95:6b:38:b1:c4:72:d9:5a:af:0c:2e:14:48:
         9c:f4:8b:29:a5:d8:84:53:59:10:9c:38:4c:58:64:e3:e1:45:
         68:7a:bf:ed:42:a9:88:b0:50:a4:1a:ef:b6:df:b1:7c:8a:93:
         29:64:e6:80:f2:75:f0:35:b7:b6:49:61:02:9b:c5:96:bf:6a:
         a1:56:e3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:01:49 2026 by rpki-client