Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/c1d6ae56-3efa-39fa-afc4-089897153b24.roa
File:                     c1d6ae56-3efa-39fa-afc4-089897153b24.roa (raw, json)
Hash identifier:          bQLsA5/DKhC5nYA1fMqcbaTmblnBF1YmRgp6DR46T4w=
Subject key identifier:   BA:5F:21:B8:6C:D9:3C:8D:BD:FB:A9:77:3A:6C:8F:70:75:39:95:13
Certificate issuer:       /CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Certificate serial:       010D0C9F4328584E885A4D4EA5B5DD2D01BAA080
Authority key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/c1d6ae56-3efa-39fa-afc4-089897153b24.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     7018
IP address blocks:        209.135.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:4d:4e:a5:b5:dd:2d:01:ba:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4963bfd3-9105-4443-98df-fbdc0a641c60
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=a142afea-26cb-4782-bafd-58d8a82cae9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:96:f0:cc:76:6e:9d:e8:f1:1b:5d:e9:51:9d:
                    c5:70:be:09:17:3a:ff:07:51:a3:23:d3:3c:5e:85:
                    3c:f5:d1:be:04:70:c3:9f:59:78:83:dd:75:39:18:
                    7c:ab:b4:c1:31:03:a1:ff:2f:80:74:80:e6:f9:85:
                    58:a6:e4:e5:51:97:bb:fd:70:bb:07:84:10:dc:5c:
                    e1:4c:00:d6:92:48:d1:73:a8:be:6a:ab:80:87:e3:
                    94:e1:5d:ee:dd:c9:8f:2b:c2:e9:d7:a4:a8:9e:c6:
                    0d:79:43:4b:21:cd:9c:28:81:ca:e7:cc:38:b6:f9:
                    19:71:30:13:e9:f6:eb:67:6f:7c:d0:b5:9f:4f:83:
                    94:a8:29:6e:a1:ad:52:55:d4:21:d8:1f:58:8e:e0:
                    d9:a3:f2:ad:52:88:68:1f:98:6b:ff:21:45:26:91:
                    34:d0:45:10:b1:bf:8c:33:40:11:24:5e:22:6a:6a:
                    d7:91:d8:50:a7:63:b9:24:72:8f:4a:10:83:99:5f:
                    41:e4:5d:1c:64:b0:6d:b4:68:21:03:02:56:65:f1:
                    ac:1c:6d:a7:c5:39:05:3b:7f:3a:1e:9d:76:cb:9f:
                    44:8d:5f:17:f2:50:a8:04:8e:b2:47:20:f8:1a:86:
                    81:0f:93:c2:9d:dd:2f:8d:93:47:08:bc:dd:80:6b:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5F:21:B8:6C:D9:3C:8D:BD:FB:A9:77:3A:6C:8F:70:75:39:95:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/c1d6ae56-3efa-39fa-afc4-089897153b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl

            X509v3 Authority Key Identifier:
                keyid:B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:17:db:69:03:4b:82:d7:7e:8a:90:1c:74:c3:8f:41:25:4b:
         83:85:62:0b:bb:50:0f:0b:65:06:50:2e:47:97:7a:32:81:69:
         1f:93:e2:fa:23:c8:1c:70:44:63:e3:e0:72:39:84:c9:f2:51:
         36:89:b8:16:5f:7c:25:b1:72:39:58:3d:ab:c7:39:3b:b7:01:
         7c:a1:7c:79:01:13:18:39:64:41:e5:03:9b:f4:c5:78:a4:99:
         fb:e1:a1:cd:bc:22:16:e8:68:8f:fc:99:3d:13:d3:10:6e:68:
         c3:3e:5e:8f:13:3d:2b:7f:34:5b:41:18:b5:68:11:0a:9a:a4:
         61:7b:56:d1:38:e7:90:71:90:46:ca:20:74:97:2b:51:b0:24:
         96:ed:c6:61:50:6a:30:cd:50:f8:a1:58:88:9b:bc:c5:dc:a9:
         2b:24:41:d3:03:0e:80:92:a4:84:07:49:3e:5f:f4:39:37:f6:
         a5:d8:8e:48:ef:c3:6e:36:cd:54:e0:b8:b9:c8:3d:45:cc:36:
         77:20:ff:76:40:15:9f:d6:31:a5:31:fe:78:a1:c8:3e:f4:63:
         a8:6e:1c:a6:52:83:39:b6:f8:f3:c2:66:cf:8a:4c:c1:e6:8c:
         01:52:cb:43:fb:2f:6c:df:e5:b4:88:c4:ea:2b:a5:40:d9:9e:
         be:be:62:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:42 2026 by rpki-client