Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/14546430-4c5f-33d3-92da-339d03d282fc.roa
File:                     14546430-4c5f-33d3-92da-339d03d282fc.roa (raw, json)
Hash identifier:          celBmZ4XFH7DCZvIhJ8424V0kCIqgs0MpJ4V4SagakM=
Subject key identifier:   29:E8:98:C9:4A:D8:CA:47:E8:BD:0D:6C:E0:CA:0C:CF:EE:4B:F1:47
Certificate issuer:       /CN=80e5f0b2-a210-4b36-9e99-d0ee4e3583f8
Certificate serial:       010D0C9F4328584EE38C9086DE0DAFE6838B4B80
Authority key identifier: 3A:A8:AF:11:24:B3:DA:34:6C:5D:87:E3:CB:FD:87:CC:E6:82:C5:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/14546430-4c5f-33d3-92da-339d03d282fc.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     1312
IP address blocks:        128.173.0.0/16 maxlen: 16
                          198.82.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:90:86:de:0d:af:e6:83:8b:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e5f0b2-a210-4b36-9e99-d0ee4e3583f8
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=8d060170-85eb-4eca-ab0b-41421174b6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:f3:87:6c:ca:00:fd:70:7d:70:23:57:cb:
                    83:a1:c3:2e:40:45:b4:45:66:58:6c:02:6a:cd:43:
                    2a:31:8e:19:69:91:61:d2:8b:fb:13:7a:44:ff:ab:
                    29:36:1f:b0:86:4e:b9:e7:7b:11:a6:0d:b5:37:4e:
                    6f:f0:5e:63:2f:aa:6c:2c:e7:6d:6f:71:f5:9f:27:
                    fb:9e:19:32:d9:f2:ff:ad:ac:76:cb:10:7c:af:19:
                    1a:11:0b:6d:0e:01:3f:65:7b:01:c0:46:5e:4d:ae:
                    34:04:bc:9d:34:01:7c:05:ae:20:64:7f:0e:df:f3:
                    e7:f0:02:e0:9d:ec:c6:e8:5a:05:7e:73:c1:38:84:
                    f0:76:dd:25:62:20:a8:db:bb:8c:ec:28:34:25:28:
                    3c:db:8e:b8:6c:3a:34:37:a9:4a:34:e7:aa:9e:7e:
                    48:c6:6a:54:4f:af:7d:8a:ce:80:7e:27:55:63:e0:
                    de:e2:de:7f:43:2f:16:ae:4f:d8:4b:c5:90:fd:e3:
                    4f:74:06:5e:35:5f:00:4f:8c:c4:0b:19:3d:0d:18:
                    27:92:92:79:4c:99:6f:21:9f:f3:bd:b3:19:d3:e9:
                    a5:29:bc:94:d3:72:45:2c:f9:1e:ef:25:a2:ca:62:
                    cc:f7:10:df:2c:28:fa:65:d3:76:a9:38:5a:d9:10:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E8:98:C9:4A:D8:CA:47:E8:BD:0D:6C:E0:CA:0C:CF:EE:4B:F1:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/14546430-4c5f-33d3-92da-339d03d282fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.crl

            X509v3 Authority Key Identifier:
                keyid:3A:A8:AF:11:24:B3:DA:34:6C:5D:87:E3:CB:FD:87:CC:E6:82:C5:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.173.0.0/16
                  198.82.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5d:f0:cb:1d:14:2e:69:dc:62:08:26:ab:44:93:44:7d:68:
         97:ca:6f:c4:f3:a8:3b:36:24:2c:6c:7b:6d:70:c9:c1:be:26:
         e5:89:34:a4:49:24:69:eb:15:a7:ac:1f:86:c2:91:d1:37:90:
         8b:68:ab:d7:06:c2:ad:7f:df:82:9b:1d:3c:c4:11:a7:12:0b:
         80:11:86:41:bd:2e:c5:67:e9:84:7c:d5:23:24:a6:05:41:ee:
         f8:3f:d1:da:08:be:6d:cf:66:c9:b2:3c:23:4e:3f:f0:a0:16:
         31:4b:2b:a0:f6:7c:a5:71:56:c3:87:c9:05:4e:5e:32:10:48:
         ab:b0:5b:7d:0c:5f:5a:6a:3f:17:13:3e:2f:33:ad:3a:29:73:
         d1:0d:2a:33:e5:b4:ac:7f:91:83:71:74:a9:b2:37:96:15:00:
         ae:7a:a8:63:57:aa:ee:6c:de:4e:10:e5:c8:29:99:c2:8e:da:
         a8:f7:33:a0:e0:d4:cd:0b:22:27:3b:f9:04:9a:9a:47:d3:b8:
         c3:21:18:a6:4a:ae:f4:27:7a:53:47:6e:84:85:22:52:04:95:
         02:df:f8:55:68:73:4a:f6:8a:33:b5:4c:a3:e1:88:bf:81:3d:
         83:bd:7f:23:f2:42:0f:84:13:9e:c6:93:89:52:a5:47:93:fa:
         d7:76:72:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:58:43 2026 by rpki-client