Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/e240baa6-82c8-35cf-bea1-7070aa352e51.roa
File:                     e240baa6-82c8-35cf-bea1-7070aa352e51.roa (raw, json)
Hash identifier:          rexWD8lbc3BeGSntDTPU6vRq4C7SkKBW1nR9RUtbP+Y=
Subject key identifier:   2A:F0:B6:EF:C3:3A:1A:01:FE:4A:B5:DB:FF:4D:D3:12:23:80:04:8B
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584E94EA540AC4BB9256D7BE9B00
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/e240baa6-82c8-35cf-bea1-7070aa352e51.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     16504
IP address blocks:        172.85.128.0/17 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:54:0a:c4:bb:92:56:d7:be:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=2405f06e-4ac2-4ce7-97b1-1f3bf5fa8f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0c:37:c4:4f:0f:03:b0:da:8e:11:29:71:7b:
                    8d:b3:b6:81:16:60:0c:a6:b5:b2:c8:cd:4b:42:11:
                    4d:89:c5:1d:a3:33:61:59:e2:c9:72:69:82:c7:57:
                    98:25:ae:81:3f:f2:84:6c:b4:88:01:21:5d:52:2f:
                    41:02:71:bf:dd:37:39:54:9e:6b:8c:3b:a3:ff:b3:
                    29:21:f1:ed:3b:8e:09:f4:87:1f:2c:09:28:d0:04:
                    d3:95:5f:61:66:96:0c:aa:32:15:b8:bb:9d:75:19:
                    f0:f6:4f:8e:d8:d4:55:0e:d9:f3:76:be:06:50:35:
                    8d:ef:19:5b:bf:72:e0:a4:cb:5e:76:61:c1:90:77:
                    fa:6b:bd:c1:3b:b3:a6:73:53:05:2c:db:2e:50:ce:
                    1f:c6:b2:97:09:65:06:df:1b:7d:c1:a3:61:a6:45:
                    a8:8d:18:84:99:3f:b6:43:f9:54:e1:cf:fc:fb:25:
                    6d:1d:7f:48:41:d2:d6:b8:52:74:e3:16:e4:4b:d8:
                    cf:84:9c:54:5d:bb:65:8d:9e:11:e9:17:27:3a:13:
                    ea:98:68:40:92:40:65:f7:43:a7:55:ba:54:27:44:
                    65:8d:43:7e:82:2b:ba:5e:09:63:80:5d:89:d7:50:
                    77:d3:ce:cf:9b:d9:95:99:f6:81:2d:c4:d4:97:a6:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F0:B6:EF:C3:3A:1A:01:FE:4A:B5:DB:FF:4D:D3:12:23:80:04:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/e240baa6-82c8-35cf-bea1-7070aa352e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b9:fc:74:54:de:bf:de:5b:cf:c2:79:26:6a:64:76:f7:c1:
         bf:b6:12:c8:71:3e:06:35:b0:11:e6:e2:18:4d:3b:aa:99:43:
         de:c9:bb:09:34:fc:2f:bf:6d:92:e5:43:7e:42:2a:c6:f8:dc:
         cb:63:8a:27:86:cc:b9:b6:82:44:c2:3c:7b:ed:4a:36:f4:3b:
         79:be:da:3a:5d:ae:ae:78:2a:e9:de:41:14:95:bf:c6:67:62:
         4d:7b:dc:d8:aa:17:53:56:9f:26:78:64:1f:fb:19:f7:23:ca:
         e1:13:27:a3:42:ef:a3:e6:9e:50:4b:b6:18:e7:22:81:8e:c0:
         f8:01:98:cc:0b:39:07:40:84:c2:59:fb:db:c0:31:3b:0e:8c:
         b8:8d:70:c1:11:4c:c2:1c:54:40:a3:82:4d:30:79:7a:62:aa:
         b0:f0:b4:91:2c:3f:c5:4f:16:49:56:46:8e:aa:29:94:f4:b6:
         b3:e6:87:98:e4:91:1d:9b:3e:45:e4:4d:90:58:90:b5:46:4b:
         67:1e:16:51:24:34:5f:90:21:49:5f:aa:89:5f:b6:79:6e:0d:
         22:35:cf:4c:c1:13:a2:1e:1a:d5:f7:25:ff:f7:a4:33:c7:57:
         6d:0c:81:45:f3:4b:98:09:35:ff:f1:e3:5e:32:40:1e:37:7e:
         d3:6c:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:22 2026 by rpki-client