Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad/f480713a-d6d6-38fd-8cbc-3b707b94ae2d.roa
File:                     f480713a-d6d6-38fd-8cbc-3b707b94ae2d.roa (raw, json)
Hash identifier:          vr6lsxvcHQwsOkEfHZaRxdlGhE0W3PTfsedBI8hX3UM=
Subject key identifier:   87:EF:61:58:78:31:C4:1E:A9:24:5C:13:39:FB:47:A6:1B:70:61:39
Certificate issuer:       /CN=d081b175-bc36-4a39-834f-2dd55d6265ad
Certificate serial:       010D0C9F4328584EA791A03A8F30D4996A45A080
Authority key identifier: F3:95:91:9B:24:F5:BA:35:1A:EB:A4:6B:98:51:CB:A2:4B:B9:2F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad/f480713a-d6d6-38fd-8cbc-3b707b94ae2d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14120
IP address blocks:        205.147.0.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad/d081b175-bc36-4a39-834f-2dd55d6265ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad/d081b175-bc36-4a39-834f-2dd55d6265ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:a0:3a:8f:30:d4:99:6a:45:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d081b175-bc36-4a39-834f-2dd55d6265ad
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eff3ed9b-7249-4060-ae3e-8889e7460ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4b:2d:d1:e3:86:f7:da:3d:d7:01:1d:72:58:
                    17:03:ae:22:90:9a:1d:92:63:ae:a8:ca:9d:85:ca:
                    94:4c:a9:1b:fa:b8:0f:eb:9a:87:04:59:9e:50:ec:
                    f4:85:66:48:0a:8b:d6:df:ab:67:5d:be:4d:00:5e:
                    35:d8:b5:e4:db:04:2b:9b:e2:eb:8e:38:57:7a:0a:
                    81:9d:9d:42:de:f7:7e:97:99:18:84:dd:b7:5d:9e:
                    98:76:fb:37:55:cd:14:ac:e3:6c:97:59:af:6e:a9:
                    de:a6:61:48:56:e4:a5:44:31:c3:b9:9e:b9:9c:b1:
                    3a:a9:f2:67:c9:4f:07:34:75:6a:10:f1:81:9b:82:
                    06:4a:1c:3c:b7:1e:13:b2:54:b0:47:26:ec:cb:0e:
                    ae:74:f1:ad:5a:6c:77:37:67:61:e9:94:77:1a:09:
                    61:e2:dc:87:5b:63:16:fd:c9:65:bd:f7:55:0b:e7:
                    dc:09:35:4c:6c:23:ba:19:14:7b:8b:5a:64:e6:d7:
                    a8:a6:2f:6a:e5:54:27:51:d8:1d:69:ad:46:ea:16:
                    7f:41:f8:e4:d5:43:19:77:fc:b9:52:63:07:fe:42:
                    84:11:3a:b9:ad:f1:d7:80:12:a4:ed:24:65:4a:81:
                    6f:7b:88:82:f3:2d:df:db:a6:ad:9a:23:ae:3d:b0:
                    67:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EF:61:58:78:31:C4:1E:A9:24:5C:13:39:FB:47:A6:1B:70:61:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad/f480713a-d6d6-38fd-8cbc-3b707b94ae2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad/d081b175-bc36-4a39-834f-2dd55d6265ad.crl

            X509v3 Authority Key Identifier:
                keyid:F3:95:91:9B:24:F5:BA:35:1A:EB:A4:6B:98:51:CB:A2:4B:B9:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d081b175-bc36-4a39-834f-2dd55d6265ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:15:f5:5b:27:e1:1e:02:d2:42:b4:95:d6:6b:82:09:87:69:
         bd:55:6d:43:dc:43:97:e4:31:65:2b:fc:33:c8:aa:77:c3:29:
         85:7d:13:dc:3e:e6:45:e9:42:9d:cd:3e:e9:95:5d:d5:98:91:
         89:29:04:c1:87:d4:48:ad:fd:a6:83:45:a0:79:89:07:cf:30:
         97:c9:a5:2f:e0:c6:c2:4c:79:e1:74:aa:ec:bc:e0:9d:bb:9d:
         70:ac:ea:11:21:e6:a5:4a:a0:ec:a1:d4:5f:ee:ad:c4:6f:2e:
         7e:6c:0a:78:1c:0d:c8:28:c0:c5:ba:f0:8b:28:fe:5e:55:f3:
         0c:3c:78:62:ed:86:5f:ab:55:cf:11:fa:b5:02:ef:5e:a8:2c:
         ce:76:1b:b2:67:35:6c:04:13:21:62:5c:d8:6a:9a:ef:72:18:
         84:fa:69:b2:e8:46:d8:9a:f7:95:18:89:ad:f7:03:d8:b1:03:
         18:a6:8b:41:2b:77:14:db:fd:ad:08:fa:47:d8:44:51:07:16:
         9c:2f:51:1b:1d:c1:19:b2:32:5e:d1:09:56:cc:d6:25:cb:0a:
         a1:98:53:ff:85:03:7e:0b:9b:44:3e:de:a2:7e:a7:64:ec:7c:
         6b:b4:65:b0:b1:e5:dc:c6:a7:f7:f3:c5:29:88:e7:36:5d:d9:
         94:30:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:16:18 2026 by rpki-client