Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa
File:                     fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa (raw, json)
Hash identifier:          aPN9YSOUttPVP+rYrP4sZkYDFv5YVo9e9a6PMyPNNRI=
Subject key identifier:   B4:89:47:43:14:E8:32:86:94:CA:C2:83:E9:2B:4E:17:CE:37:B8:C7
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584E97B5085465F2189C278DB660
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     9009
IP address blocks:        172.85.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:08:54:65:f2:18:9c:27:8d:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=df83fd68-193d-4bfa-bb6a-4a9e3bd85b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:6d:19:49:3a:2f:09:0b:c6:09:76:9f:72:
                    81:26:d5:53:0b:92:2a:61:5a:eb:95:c7:c6:32:80:
                    b0:56:ed:ff:c9:93:bf:c3:fa:b8:14:d8:34:a2:2a:
                    47:76:16:55:95:14:4e:71:9a:c4:bf:6a:ab:16:dc:
                    52:88:d5:a1:3f:b5:6c:4e:77:66:01:41:72:c6:41:
                    09:9a:56:89:83:c5:35:2e:f8:60:07:40:7c:3f:2a:
                    e2:99:fd:3d:e4:ce:dc:4d:cb:dd:25:77:f0:7d:43:
                    f6:e5:a0:30:e0:bb:ea:24:fa:f7:9c:83:d8:b6:10:
                    86:6d:46:17:f6:84:7c:7e:3e:65:f9:b6:3b:2e:d5:
                    c0:65:82:be:54:ab:41:b1:b8:16:f4:b7:2d:d4:62:
                    7f:72:da:07:93:96:19:3e:8b:99:bb:41:2c:8e:51:
                    9d:eb:5e:f6:f6:1e:16:04:56:47:26:a1:d8:88:1a:
                    c9:5b:30:81:5a:60:b6:b4:4f:4f:3e:80:57:91:78:
                    a4:0f:5b:a1:42:86:90:6d:ab:96:1b:78:2e:34:8c:
                    d3:72:6b:56:10:bc:09:a3:e4:ce:ed:ed:31:cb:1c:
                    73:eb:8d:e9:f3:00:92:31:d3:c7:d9:d9:a6:96:8c:
                    81:54:c5:23:44:59:1d:ed:7b:2f:28:f8:51:6f:d6:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:89:47:43:14:E8:32:86:94:CA:C2:83:E9:2B:4E:17:CE:37:B8:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fc155f26-3237-303a-8cf0-58e6b31c0f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c8:c9:82:c5:9c:1e:3e:d2:57:f5:a5:19:8e:ff:af:d2:5d:
         77:de:54:fa:b8:31:83:de:c0:ab:52:f1:7c:9b:53:8f:f2:38:
         24:9e:8e:2a:1f:f3:37:d0:b3:45:eb:fa:96:e7:44:d8:b1:8d:
         f0:95:e9:ca:37:3f:20:80:36:39:32:23:94:aa:1e:7d:3e:21:
         3c:f1:38:5c:21:0f:1f:f2:86:6c:83:3b:65:e6:61:b4:6c:ee:
         85:0f:55:b0:c9:ae:e5:95:72:b7:8a:43:6d:0c:9e:b7:ca:96:
         66:20:04:61:eb:f4:2c:a6:98:75:3a:ca:2b:9a:7e:e7:fb:f6:
         a1:0c:02:3c:c4:05:0a:13:d3:e0:ce:00:f4:f5:ef:bb:1e:93:
         41:a1:92:a4:57:b8:73:5b:60:a3:68:1f:8f:f8:91:ad:5e:98:
         3d:33:d8:00:6e:65:56:01:c7:77:56:dc:40:93:01:18:e0:b0:
         3a:63:22:2c:96:d6:fa:76:58:c4:d2:56:a2:26:3a:94:44:e4:
         3b:35:e1:ff:7f:53:89:b7:85:69:98:39:b5:75:88:7f:a8:d4:
         17:79:ea:44:97:44:a6:6c:e8:21:d1:30:07:f2:a0:73:1b:e0:
         5b:de:92:92:4b:6d:55:7a:c1:d8:aa:8d:ad:2e:65:07:05:cf:
         cc:9b:95:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:05 2026 by rpki-client