Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/820fb093-5b7e-364a-9ed4-f56ace6a7cab.roa
File:                     820fb093-5b7e-364a-9ed4-f56ace6a7cab.roa (raw, json)
Hash identifier:          591qPOrFDShJ5pbBTxfJjMOLHhTxuqCFoXUP2E54JIo=
Subject key identifier:   8B:5C:B7:E9:67:0F:F4:EE:2C:BF:D0:5D:4D:63:6E:42:D6:6B:24:BE
Certificate issuer:       /CN=5fca320f-a628-49d3-afa7-8717a0ad5699
Certificate serial:       010D0C9F4328584F03A794DE10D89DDB416FC520
Authority key identifier: 56:5C:77:50:01:C8:93:A8:08:A9:9D:5E:97:E2:E2:97:26:C9:E3:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/820fb093-5b7e-364a-9ed4-f56ace6a7cab.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     33425
IP address blocks:        48.80.0.0/12 maxlen: 24
                          48.128.0.0/11 maxlen: 24
                          166.19.0.0/16 maxlen: 24
                          192.112.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:94:de:10:d8:9d:db:41:6f:c5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fca320f-a628-49d3-afa7-8717a0ad5699
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=5f6788cd-5fca-4f80-aff8-9e7a56e95611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:cc:6c:2e:e5:f9:ac:52:1d:27:9c:92:f9:
                    cf:23:bd:d1:03:47:a2:91:f9:5a:65:c5:1b:29:a7:
                    ba:e0:6d:d2:a1:38:60:e5:77:96:e1:2d:14:34:d2:
                    07:6f:c8:a2:b4:19:58:01:c1:53:54:8a:23:5c:3c:
                    7b:5d:25:18:9c:e9:3c:f0:00:b9:7f:45:10:90:c5:
                    f8:e8:b8:47:07:89:64:1a:cd:49:d8:e3:92:62:77:
                    db:30:c7:76:4e:07:0b:84:6f:1b:14:c9:8b:4e:a1:
                    ff:e6:d4:c2:f8:f5:91:e3:3c:ea:7c:17:87:2a:47:
                    a8:b6:a5:49:ae:5d:02:45:44:1f:a9:06:2f:94:81:
                    8a:f6:d0:d7:6d:1b:8f:46:cf:3d:a6:31:f4:13:5d:
                    a2:d3:45:bf:28:47:6e:88:84:a6:a5:31:b9:12:c9:
                    80:ca:eb:01:3a:b0:9b:71:98:66:29:ff:84:0b:5c:
                    c9:ad:1c:06:52:6a:2b:41:33:22:2c:1c:f6:dc:6d:
                    32:c4:d5:73:ee:d6:97:66:48:34:32:97:32:01:40:
                    e6:8e:15:ff:17:7f:37:66:c6:9d:0b:c0:14:00:20:
                    6b:76:80:af:99:31:a5:1c:fd:da:27:a2:b3:d7:4a:
                    8b:59:db:6e:60:b2:5f:4e:d9:1b:59:ce:2c:7f:a2:
                    8a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5C:B7:E9:67:0F:F4:EE:2C:BF:D0:5D:4D:63:6E:42:D6:6B:24:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/820fb093-5b7e-364a-9ed4-f56ace6a7cab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.crl

            X509v3 Authority Key Identifier:
                keyid:56:5C:77:50:01:C8:93:A8:08:A9:9D:5E:97:E2:E2:97:26:C9:E3:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  48.80.0.0/12
                  48.128.0.0/11
                  166.19.0.0/16
                  192.112.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:08:ca:e3:19:ff:ad:0b:24:dd:0b:9a:52:09:8f:0b:ef:
         1c:ec:a6:1d:0e:38:47:1e:44:63:4b:ae:82:c1:78:bc:ec:ac:
         f9:c8:fc:93:82:c1:71:de:9c:9f:25:18:c7:a6:c0:38:51:3a:
         04:87:be:e7:21:4c:7e:62:a4:19:49:b7:9c:a8:19:43:8a:f9:
         eb:4b:34:fd:44:2b:19:a7:b1:b8:b4:e4:a9:cd:3d:2f:d3:1e:
         3c:33:68:9c:58:1e:ad:18:4c:21:31:4f:43:d6:75:31:68:ee:
         3a:a4:48:25:59:d1:3a:14:96:7b:8b:2c:a3:d6:79:aa:c7:17:
         8a:c3:25:e2:b4:60:98:15:91:7d:28:b8:05:0d:dd:de:ff:48:
         21:79:00:36:62:07:af:48:7e:58:8a:d8:cb:d8:b2:df:ab:46:
         72:a6:8e:18:5a:69:a8:b0:6c:7c:08:d9:07:8a:2e:de:a5:0f:
         5c:33:b7:96:db:c5:1a:26:60:03:6e:f0:cd:ab:91:68:06:d6:
         7b:96:8c:89:d6:0d:83:29:6e:79:3a:cb:d5:67:c9:98:57:f1:
         0c:d7:38:a3:86:03:60:0f:67:0f:f3:9c:26:b2:00:8b:bc:13:
         ac:49:ed:6b:a2:b0:5f:33:ba:41:7f:8d:7a:f4:75:f9:88:71:
         6f:05:5b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:41:28 2026 by rpki-client