Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/df1a1c5b-d0cc-39a6-8d78-ead591f7cba6.roa
File:                     df1a1c5b-d0cc-39a6-8d78-ead591f7cba6.roa (raw, json)
Hash identifier:          7XM7l/ZMRL/8yDuMK+c82NOPfE5zroXQKJWX37yknbo=
Subject key identifier:   19:5F:7C:EA:A6:CB:02:39:99:9D:CB:29:C7:C6:24:35:4A:DB:DA:44
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584DA6B0213C652A4B6DDEDE2A80
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/df1a1c5b-d0cc-39a6-8d78-ead591f7cba6.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     4922
IP address blocks:        184.170.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:21:3c:65:2a:4b:6d:de:de:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=e4652b31-4a64-4e13-a607-21f9231cc510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:ca:13:76:f1:31:36:45:96:b4:88:95:23:
                    ef:13:30:dc:d9:e8:96:bd:97:36:06:2f:7d:29:35:
                    71:82:87:8d:fb:a9:6d:c1:1b:be:cc:c1:aa:d9:32:
                    22:1b:6b:ff:29:95:13:20:85:c9:6b:21:29:0a:a5:
                    1b:a1:47:cd:f8:94:5d:8e:15:ad:79:a3:53:01:1e:
                    6a:50:af:06:d1:75:56:f5:33:5c:cf:31:39:a7:1c:
                    a3:2e:5b:7d:81:bb:a1:f1:e5:e8:e3:2d:cd:92:73:
                    23:ee:3c:2c:49:9a:d9:b0:44:1a:13:b2:52:4f:c8:
                    6b:42:2d:bb:ce:57:9b:14:fc:eb:d3:8c:db:72:49:
                    91:78:98:ce:ac:ab:aa:4c:8e:13:56:a6:f1:ad:e6:
                    f8:dd:65:82:1c:a7:f9:92:d7:bb:38:15:7a:eb:64:
                    11:97:e3:cc:17:fd:fa:d1:af:07:8b:7c:67:e3:39:
                    73:57:e9:88:43:40:4f:77:5e:48:1b:b9:22:87:b7:
                    ff:2a:f4:2a:65:23:52:f3:cf:aa:57:99:ee:d5:ec:
                    e4:9f:a6:f2:30:a9:d8:15:64:0c:d5:8b:70:dd:b1:
                    ca:7f:11:87:22:9b:cd:a0:71:68:b3:7d:65:ab:74:
                    f9:8c:5d:10:16:e0:23:bd:ce:4f:33:ac:bb:9f:aa:
                    5f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5F:7C:EA:A6:CB:02:39:99:9D:CB:29:C7:C6:24:35:4A:DB:DA:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/df1a1c5b-d0cc-39a6-8d78-ead591f7cba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.170.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e3:34:f6:87:87:a0:23:44:6a:f2:1b:7b:26:ea:ec:c0:50:
         71:a3:94:0b:03:5f:45:80:92:77:31:04:25:56:18:a1:53:88:
         1f:50:5a:96:2d:25:66:8a:06:a1:86:98:99:f0:8a:bc:02:40:
         01:88:bd:10:d4:60:31:c9:44:a1:eb:91:36:64:66:a2:15:c9:
         e1:68:59:ba:4e:14:10:79:9b:ea:b1:53:10:41:bf:c8:e4:ab:
         0f:2e:44:e7:ee:c9:06:29:73:94:ef:fa:7d:d1:7e:0c:93:13:
         d6:0d:44:b7:2f:46:ee:aa:93:74:a8:50:a0:a0:c8:54:9f:78:
         bf:5c:7f:cf:5a:0d:1c:d5:a1:67:43:5e:c5:00:9c:1c:18:d5:
         8d:67:83:ef:29:b4:0c:8d:be:c9:bc:84:bc:fe:b9:4c:44:95:
         42:3c:a3:36:76:c4:c0:02:ef:4f:cf:ce:b3:5a:18:15:d6:d1:
         d1:21:85:95:12:05:fc:c3:02:c6:7f:42:8c:e8:af:8e:06:c2:
         23:a5:92:91:41:31:3f:1a:fb:20:18:71:07:15:c5:41:3f:9c:
         f8:65:af:c0:b6:1b:28:3b:ab:e7:34:6a:2e:4a:0c:69:0e:5c:
         5c:0c:ce:b3:0f:c5:80:d8:9d:57:b1:b2:9d:3a:b9:63:49:cb:
         59:99:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:52:05 2026 by rpki-client