Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/dfc55f38-9c68-3665-99a7-1ee68bb380d3.roa
File:                     dfc55f38-9c68-3665-99a7-1ee68bb380d3.roa (raw, json)
Hash identifier:          O/NN1OtsQw5dAIkDzmDgkPDBLiWNmkvLP3dhIoVUAh4=
Subject key identifier:   BB:6C:96:F4:92:DD:39:6F:D5:57:14:53:80:A3:4F:D9:FC:7B:61:E9
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584E8DEFABC22D496BFC14074F40
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/dfc55f38-9c68-3665-99a7-1ee68bb380d3.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     20473
IP address blocks:        216.128.128.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:ab:c2:2d:49:6b:fc:14:07:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=6c9ab087-10b1-4c0a-b7b1-124ead55897e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:7a:5d:13:0e:5b:6c:27:8b:bd:c7:b4:e3:
                    e7:6e:28:89:e8:ec:fc:e8:ce:3e:84:c8:be:13:d0:
                    83:4a:85:2f:f5:34:2a:fa:97:1f:12:72:c6:ef:7c:
                    1e:19:c1:b5:5b:b6:06:7a:c9:6a:cb:da:04:e0:77:
                    cf:6e:df:fc:41:46:9c:33:14:01:e3:07:e9:c0:db:
                    b7:18:6e:1b:a8:ad:33:ff:41:b0:99:86:c5:14:71:
                    04:e1:91:3f:56:15:cb:6d:12:55:47:40:5d:b9:96:
                    3c:11:5b:1c:ce:97:2e:b9:09:a7:21:10:11:d6:f9:
                    ef:20:33:4f:4b:88:2e:d0:1f:81:af:20:d7:ff:89:
                    c3:61:f6:bc:1d:54:a7:17:1b:bb:ef:f8:21:8d:65:
                    ac:e4:7e:d3:eb:ae:72:7c:a5:57:42:e3:fe:20:60:
                    9b:f0:c1:2e:31:ed:bd:d4:23:b9:19:7a:3e:99:ab:
                    56:48:6c:8e:22:a3:c0:9c:bd:2f:6d:a2:72:4c:d0:
                    ee:53:0c:10:ad:e3:58:64:b4:fe:73:46:3d:ab:1e:
                    b3:f8:79:83:25:b5:51:9c:09:d2:c3:66:8f:77:27:
                    1b:3b:db:65:86:d2:63:9c:42:3b:b5:d4:26:38:ad:
                    f5:4b:50:ab:d4:db:e6:4a:b1:e1:58:ee:7b:a0:96:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6C:96:F4:92:DD:39:6F:D5:57:14:53:80:A3:4F:D9:FC:7B:61:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/dfc55f38-9c68-3665-99a7-1ee68bb380d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.128.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:83:7a:f5:6c:a5:48:3c:b6:80:27:b5:b0:a0:10:4f:b8:81:
         9f:5e:06:0e:c0:3e:33:9b:81:00:49:e6:75:43:2f:b9:09:80:
         07:8f:41:66:91:bd:7c:3b:d5:c8:3d:da:07:8d:83:01:6b:e6:
         37:00:84:a2:0c:ea:a9:62:b4:62:4f:f2:71:1a:90:70:ed:56:
         a2:11:b4:1c:8b:8f:d1:ed:38:3b:70:44:0a:60:76:46:ac:44:
         dd:9c:1c:16:82:4e:cc:5d:1a:d3:5f:08:6f:14:9c:02:31:7f:
         b2:ca:2c:c8:d9:15:2a:39:9b:44:5a:8f:15:b3:c9:a4:4c:cb:
         16:91:33:8d:41:54:d9:ef:b5:c6:5c:5e:f3:c5:4e:fd:c0:e2:
         63:6c:b5:8f:e1:f2:9b:a2:11:c2:28:c1:f1:95:9a:d0:7d:5e:
         95:ca:44:a5:db:fa:52:f8:de:87:9f:3f:4a:42:1c:eb:3b:15:
         cb:3c:dd:f6:0b:cb:03:15:4c:13:5c:71:08:68:72:86:5f:aa:
         ef:ef:66:bb:f4:d9:eb:00:31:09:ca:52:04:aa:a9:77:ef:ae:
         8b:07:e0:52:6d:b6:11:ca:61:21:0c:8f:82:95:b4:94:dd:86:
         8a:a9:6b:cd:bd:81:87:f5:80:71:99:7b:f5:c9:39:8a:44:c4:
         47:ef:e2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:00:16 2026 by rpki-client