Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa
File:                     6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa (raw, json)
Hash identifier:          K7QfX6dBPzlAZkSRKXVIjPEXXpnfPd9CdW3Aqs042mM=
Subject key identifier:   2D:DE:D7:AA:7A:CC:4B:60:4C:DC:64:EC:23:B6:70:0B:CB:B3:F6:38
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F4328584DADAAE148FBF35AA37500FB00
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     3464
IP address blocks:        199.88.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:e1:48:fb:f3:5a:a3:75:00:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=007ebb8d-2bd7-4ae5-a393-513dca29f083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:82:fa:23:8b:09:3a:94:55:fc:da:ae:f2:20:
                    ff:73:93:fb:1d:d3:b9:60:89:43:25:3d:e7:a7:39:
                    ab:93:ee:fb:90:9e:6d:9b:bb:b7:5a:92:03:a3:ea:
                    38:47:87:1d:36:9d:e6:c3:00:be:5e:06:52:67:e3:
                    35:d7:4f:6f:db:be:3e:a8:4f:af:61:41:6a:3c:83:
                    b2:33:10:1c:ac:3d:d7:8e:9b:ca:c9:13:c8:78:b9:
                    19:a3:d3:50:82:ad:b3:2d:b9:f9:ba:57:8a:dd:33:
                    56:6d:3e:25:c2:dc:ab:da:c3:86:8d:52:9e:d7:ae:
                    f9:8e:2e:f0:22:f4:27:b7:a7:a7:fb:14:a1:82:05:
                    d8:b3:3d:aa:08:35:7e:32:80:41:df:9a:01:12:d5:
                    f6:0d:fe:ea:60:86:d7:85:d1:84:d6:e1:81:21:bd:
                    d9:53:8f:3d:f7:d2:04:ab:2f:9b:11:4e:5b:5a:98:
                    9c:38:77:e0:a9:ec:ed:45:be:a5:ff:76:eb:51:bc:
                    13:32:c2:6b:a1:f1:29:20:36:fb:78:23:3b:9c:a4:
                    d7:1b:f4:fb:e1:81:85:a4:6a:a4:c1:21:cd:f3:ed:
                    e4:0c:3f:6c:79:95:6b:fb:14:a3:de:56:48:65:76:
                    5b:f8:1b:ba:4a:cd:4c:34:33:18:2e:5f:5c:c9:d0:
                    98:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DE:D7:AA:7A:CC:4B:60:4C:DC:64:EC:23:B6:70:0B:CB:B3:F6:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/6a9aa8c6-e387-3bb7-a185-fc2e357e33d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.88.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e1:ba:35:05:51:a1:40:f4:9c:de:24:ee:65:e6:47:c2:39:
         5f:80:48:fe:96:93:9c:f6:2b:3e:09:f3:17:40:1f:04:86:20:
         b5:2f:59:e8:8d:12:a8:ef:5a:85:c7:eb:dc:38:c7:38:8c:e3:
         fe:e8:e0:c7:84:4c:31:4f:10:3c:ea:b7:84:79:48:cc:a6:80:
         a4:de:e1:a0:c2:49:b7:98:87:bb:c0:d6:49:43:84:ae:b4:45:
         db:45:76:a7:9c:9e:d1:db:7a:c4:ac:32:b3:a4:ca:2f:d1:27:
         cf:2d:c6:ad:ec:94:58:cc:6a:9b:09:37:59:67:1f:a6:30:3c:
         e2:48:dc:08:e3:5f:d2:de:b3:cb:0e:be:5a:99:45:37:0d:d7:
         ac:56:33:86:6c:8b:a5:9d:8c:07:c6:45:ae:98:0f:e5:b9:95:
         b5:f0:72:ce:f6:8e:44:e9:44:9b:af:29:92:3c:a8:ed:71:a9:
         00:e1:d2:ed:04:4a:42:27:2a:80:73:a7:10:64:6f:65:2c:a2:
         3f:7d:d8:52:bb:3f:76:5e:96:ee:7d:7f:c8:de:da:0c:75:9e:
         c4:f4:a1:2b:b4:8d:c8:ba:4e:76:d3:40:c7:45:bc:5b:fb:b3:
         7b:f1:d3:b7:e6:ab:e2:c5:fd:ad:fc:57:46:69:3f:0d:21:73:
         48:a9:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:27:36 2026 by rpki-client