Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/de2a3a80-a117-3d4b-b4d6-d1e81bee83af.roa
File:                     de2a3a80-a117-3d4b-b4d6-d1e81bee83af.roa (raw, json)
Hash identifier:          JpuxW+bqHQJUVegQ4dzYRJ10cflnOdR2L3TdeqBXEMk=
Subject key identifier:   19:A1:69:65:C9:C2:69:4A:A1:8B:BE:77:00:41:06:1E:D0:6B:78:6F
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F4328584E7FFA313A40310A2895C14E00
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/de2a3a80-a117-3d4b-b4d6-d1e81bee83af.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     15092
IP address blocks:        199.15.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:31:3a:40:31:0a:28:95:c1:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=9be80976-4cd4-4d92-bfa5-8498d542ee3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:66:68:b1:7f:ae:10:5c:67:ca:f3:6b:27:
                    2b:75:60:c0:48:a5:03:55:fa:0c:7e:9d:4b:64:dd:
                    b6:d7:1b:33:19:60:5f:ef:3c:cc:d2:97:09:b9:94:
                    04:58:31:b4:e3:c0:e1:13:d3:76:a6:ea:e0:a0:10:
                    83:3c:9c:d2:c6:0d:9d:33:1a:50:d8:4e:0e:0a:51:
                    dc:92:11:29:33:c5:b4:e8:1c:07:7e:c5:1f:f5:63:
                    a1:63:ba:61:ad:03:96:48:d1:46:71:51:01:27:1f:
                    ad:7b:01:cf:6a:b4:f3:36:d5:a4:47:ee:71:62:b4:
                    79:49:52:2a:96:ed:dd:3a:2f:78:e3:89:40:cd:a5:
                    0c:cf:48:34:c0:28:0e:3c:0a:f1:d3:b6:c1:21:54:
                    88:c0:29:e8:30:3c:a8:4f:b0:f9:55:68:ee:d1:42:
                    30:d0:ba:4c:15:c2:c6:8f:1b:78:d3:1f:9a:98:8e:
                    9b:12:fa:20:ab:d1:bb:24:e4:35:ff:e1:9e:60:4a:
                    4e:9f:32:57:1e:93:dc:a9:19:a9:2f:4c:80:aa:cd:
                    c4:4d:1e:78:e0:d5:ec:a6:c4:58:44:b5:07:45:44:
                    44:a0:b3:ea:53:0f:38:df:60:e7:85:e3:6f:72:85:
                    61:f8:72:75:8c:76:9b:b4:ea:fa:98:88:64:d8:44:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A1:69:65:C9:C2:69:4A:A1:8B:BE:77:00:41:06:1E:D0:6B:78:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/de2a3a80-a117-3d4b-b4d6-d1e81bee83af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:68:09:49:88:b9:e5:09:64:32:c5:5f:c1:3b:91:04:64:43:
         83:0b:a6:61:de:d7:f2:19:ae:d1:13:3a:a8:5e:71:2c:8c:3c:
         4b:0a:bc:b7:0f:ee:32:56:83:68:e2:69:8a:dd:3a:dc:e3:c2:
         95:eb:29:18:39:45:fd:f1:bd:72:cd:1d:21:d4:51:3c:7e:1d:
         d4:7e:36:e5:a1:b8:1f:06:e1:fc:d6:ef:16:26:5a:7a:a0:1f:
         8a:64:eb:b7:98:05:55:6e:5f:f0:2a:b0:75:a4:f9:56:49:3d:
         f5:69:f5:d7:d6:97:94:0d:e0:c8:14:33:ee:45:69:79:2c:a6:
         d6:cf:b8:09:7d:36:f7:84:0d:dd:a0:bf:27:1e:40:55:15:01:
         91:fc:26:70:a4:ef:2e:09:1c:a6:91:85:12:bb:f4:61:43:0c:
         4b:24:7a:54:8d:fa:4e:61:5f:84:9e:e8:0d:f6:51:81:d1:19:
         74:e3:92:f4:66:7f:1e:6f:4a:7c:de:e3:93:97:ca:24:a2:96:
         49:67:bd:30:49:75:7c:3b:03:a2:14:29:1a:13:c8:10:8c:69:
         d8:20:5b:07:e7:e2:31:be:37:47:39:8d:99:f5:f4:74:a3:64:
         1b:35:c6:41:ab:e3:90:37:e5:cb:41:8c:dc:3b:a1:c4:12:5e:
         63:a7:be:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:37:15 2026 by rpki-client