Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/e9cd9278-ab44-3c2d-b9d9-d084a0203372.roa
File:                     e9cd9278-ab44-3c2d-b9d9-d084a0203372.roa (raw, json)
Hash identifier:          piza4mDb3EY7O2y5iKYRC7+cQGXwZoexnERQ6P/Ru6c=
Subject key identifier:   5A:6F:9D:F6:5E:BA:FD:67:2E:2F:1B:0B:5D:91:86:70:0D:D9:BB:FC
Certificate issuer:       /CN=2bbbccaf-eb44-4080-88de-8f4cc6938ce6
Certificate serial:       010D0C9F4328584AE6C7EE1F669F489783D7D580
Authority key identifier: A0:F9:29:E4:D3:66:80:3D:1D:E3:F0:60:40:70:58:1E:2E:65:1E:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/e9cd9278-ab44-3c2d-b9d9-d084a0203372.roa
Signing time:             Mon 18 Aug 2025 20:47:12 +0000
ROA not before:           Mon 18 Aug 2025 20:47:12 +0000
ROA not after:            Sun 16 Nov 2025 21:47:12 +0000
asID:                     399480
IP address blocks:        156.117.0.0/16 maxlen: 16
                          192.226.8.0/21 maxlen: 21
                          192.226.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:c7:ee:1f:66:9f:48:97:83:d7:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbbccaf-eb44-4080-88de-8f4cc6938ce6
        Validity
            Not Before: Aug 18 20:47:12 2025 GMT
            Not After : Nov 16 21:47:12 2025 GMT
        Subject: CN=c696614f-af33-4b1b-8097-b4e17271966b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:19:34:e2:b3:8e:e4:ba:4f:fa:12:e3:4b:8d:
                    69:30:66:d0:92:0b:88:c5:b6:39:be:92:8d:8b:96:
                    75:4a:4a:fc:37:15:7d:53:9f:55:1f:37:8a:3d:40:
                    f3:57:37:b7:85:f4:d4:65:ac:54:7b:0a:cc:59:4c:
                    7f:d4:a2:15:39:79:f1:46:9f:6e:bc:63:8e:78:18:
                    de:ed:d4:34:d6:2f:6c:f2:83:9a:d2:53:9e:44:55:
                    94:34:e9:48:89:90:22:44:d3:7e:57:91:15:bf:73:
                    44:15:df:75:96:ee:11:e4:57:e0:7d:0c:17:c6:ce:
                    0f:9a:1a:07:82:21:56:a9:67:41:ad:1a:62:9d:0f:
                    7a:8e:f2:40:77:b9:be:0f:82:53:5e:7a:92:c1:7d:
                    51:4f:e0:b0:11:aa:2f:78:44:2d:35:85:11:f1:8c:
                    3c:9d:ad:37:73:90:da:1a:c4:ed:2d:b2:48:a5:28:
                    d2:e3:df:25:24:82:93:91:64:cc:67:86:1f:08:92:
                    26:b8:0a:d6:81:aa:8b:0f:2e:2a:2f:b0:97:87:ff:
                    a5:af:a9:7c:59:32:41:2c:3a:a6:44:1c:4d:cc:fa:
                    40:9a:ba:15:45:1b:bf:87:c8:47:71:a2:52:c2:28:
                    e0:b6:29:34:a7:47:f3:d3:a5:86:ae:99:43:bd:81:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6F:9D:F6:5E:BA:FD:67:2E:2F:1B:0B:5D:91:86:70:0D:D9:BB:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/e9cd9278-ab44-3c2d-b9d9-d084a0203372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F9:29:E4:D3:66:80:3D:1D:E3:F0:60:40:70:58:1E:2E:65:1E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.117.0.0/16
                  192.226.8.0-192.226.31.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:fd:3f:ae:19:c4:0c:65:c6:3c:fa:0a:44:86:91:ca:b9:d6:
         96:07:a0:91:6a:c8:29:0f:78:8a:31:60:ca:48:9e:21:92:e8:
         9e:ac:42:ed:86:ef:cd:61:77:85:3f:54:a3:8d:56:5b:15:cc:
         de:b9:8c:a9:2c:0b:3b:eb:0d:82:ff:92:af:7f:77:25:af:6c:
         92:fb:8a:be:7c:af:11:3f:77:66:e7:f3:03:2e:f9:85:06:17:
         bd:63:2c:6f:63:07:2f:24:fa:6f:9b:56:7c:cb:ee:8c:86:fd:
         75:0f:50:ab:77:79:97:41:38:a1:1d:a3:d7:91:f9:50:1f:54:
         0b:b6:58:6f:61:46:78:d5:f5:34:38:80:5a:01:d6:52:32:b0:
         78:cd:c0:6b:e5:bd:52:af:ad:00:d1:9f:eb:91:17:bb:9a:c7:
         44:21:12:de:03:79:85:a6:db:07:29:98:4f:57:12:c9:72:40:
         3a:77:ab:17:e2:7d:21:53:ca:79:05:87:64:35:4e:03:d2:83:
         10:3c:6c:db:13:8d:ae:15:96:b2:32:d6:83:67:66:01:79:80:
         d4:53:85:3e:fb:a0:9b:89:88:70:72:fe:b6:ff:58:73:2e:6b:
         fa:e0:c1:6b:8f:0e:f4:c4:74:48:22:9e:af:e3:ad:5d:d6:86:
         92:53:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:29 2025 by rpki-client