Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/9a20493f-3df8-39b2-beb5-aafa944c96f1.roa
File:                     9a20493f-3df8-39b2-beb5-aafa944c96f1.roa (raw, json)
Hash identifier:          qr0ILVYuRfi1XlHGlUZT+V8uzR0I4HVXEczs+N2u/Js=
Subject key identifier:   1D:2B:77:5A:47:50:0E:20:C1:F4:36:66:ED:5A:F0:0D:49:53:44:72
Certificate issuer:       /CN=ea4790bc-4699-4a2d-8cae-17f809013230
Certificate serial:       010D0C9F4328584E4129CD1276515354CD1AD480
Authority key identifier: BB:7E:52:56:B2:3A:0C:40:CC:7F:81:32:9E:48:87:05:56:80:E9:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/9a20493f-3df8-39b2-beb5-aafa944c96f1.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     397550
IP address blocks:        199.231.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:cd:12:76:51:53:54:cd:1a:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea4790bc-4699-4a2d-8cae-17f809013230
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=be2ca5b0-8067-4dd3-9c29-7155bf19621f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:e5:fa:99:36:65:e7:9e:77:e9:dd:c0:de:
                    78:33:49:b9:c5:72:ab:87:fe:5b:33:50:18:af:58:
                    5b:d2:89:41:2a:e2:03:89:13:56:e1:32:ea:82:37:
                    cc:28:ed:0d:aa:c1:48:26:e7:34:bd:80:f6:10:8e:
                    e0:5c:3e:45:8f:9b:17:ba:df:e9:07:34:99:98:d3:
                    de:ce:d5:02:b7:91:81:5d:c0:2a:99:c3:88:43:e6:
                    a1:53:aa:7c:74:62:20:e4:b1:a8:b3:cf:67:a0:fb:
                    71:2a:20:71:61:5f:11:25:28:36:54:26:8f:02:8d:
                    b3:c5:e8:15:2b:e0:50:7d:ff:0a:27:bb:76:de:de:
                    eb:0d:8e:71:77:2e:f1:11:fa:4b:f2:dd:46:4a:96:
                    a2:1e:0e:28:e0:9b:26:6f:16:40:2b:73:8b:16:59:
                    25:8d:16:79:cd:48:d7:37:7e:fd:64:77:df:6e:a2:
                    e7:51:ce:06:7f:8f:3c:84:84:81:f5:b7:7b:77:37:
                    15:a3:46:21:7c:ed:7f:7e:8b:73:d4:59:17:94:58:
                    c5:03:27:7a:9a:9f:f5:cb:19:9a:b3:81:f5:fa:67:
                    eb:09:28:9f:ee:5e:6c:1e:2b:f7:f7:8c:a1:5f:01:
                    61:ce:75:57:d5:f8:3b:b7:83:50:59:2d:21:6e:20:
                    f8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2B:77:5A:47:50:0E:20:C1:F4:36:66:ED:5A:F0:0D:49:53:44:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/9a20493f-3df8-39b2-beb5-aafa944c96f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7E:52:56:B2:3A:0C:40:CC:7F:81:32:9E:48:87:05:56:80:E9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:65:95:4b:72:c5:29:dc:7e:cf:d5:dc:d6:68:31:d3:f4:f9:
         7a:91:77:33:8a:9f:84:48:ff:6b:87:f3:39:f0:a2:5c:7f:2b:
         a8:51:ce:73:c6:88:5d:ce:b2:8d:9e:7c:9e:9c:d5:b0:c2:de:
         96:f2:3f:7b:53:09:fc:a5:29:26:f8:02:99:0f:5a:34:11:4c:
         47:10:5c:e5:2b:3f:18:fd:85:8a:a7:88:7b:72:cd:0f:aa:cd:
         f7:4b:39:2e:9a:d5:53:e9:e9:63:e1:42:f3:b0:e3:81:e7:b9:
         9a:a6:8b:10:a3:c1:e5:56:1a:9f:c5:9e:72:0f:64:22:88:61:
         17:81:4d:8b:de:11:bd:13:a9:d2:bf:8a:84:c6:65:1d:6e:99:
         fb:83:db:31:79:b6:63:e8:b8:d1:74:31:60:ec:e7:af:87:c5:
         7e:80:af:0c:fb:de:9c:e5:99:82:6e:20:d4:f7:ec:0d:d3:18:
         cc:0b:f4:64:0d:bb:2f:92:66:a8:69:da:f3:dc:7e:8c:e5:49:
         b2:e0:6f:96:9d:e2:b6:3e:3e:e4:86:8a:d2:79:0b:ca:21:29:
         3b:ca:49:2d:e9:dd:fd:dd:e7:b8:82:6a:29:12:a7:b4:6e:01:
         1b:fd:b9:b4:f0:dc:34:7e:cd:d2:fa:33:02:8d:8a:2e:fc:89:
         15:dd:67:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:36:19 2026 by rpki-client