Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/66d9d811-ace7-3b5b-bfa9-8da3be937a89.roa
File:                     66d9d811-ace7-3b5b-bfa9-8da3be937a89.roa (raw, json)
Hash identifier:          RazGNJvDWKuxs8YY+/objicrLOVzs9PxYJSfEfR5YSI=
Subject key identifier:   D3:EC:DD:C9:6D:F2:E1:35:1F:A8:3B:08:06:95:5B:EA:9F:C4:F3:9B
Certificate issuer:       /CN=bf895287-fee6-4682-8ac4-732f64947fe4
Certificate serial:       010D0C9F4328584E853EB7D52641FA0B04B37468
Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/66d9d811-ace7-3b5b-bfa9-8da3be937a89.roa
Signing time:             Thu 16 Jul 2026 18:17:24 +0000
ROA not before:           Thu 16 Jul 2026 18:17:24 +0000
ROA not after:            Wed 14 Oct 2026 18:17:24 +0000
asID:                     30530
IP address blocks:        208.98.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:3e:b7:d5:26:41:fa:0b:04:b3:74:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4
        Validity
            Not Before: Jul 16 18:17:24 2026 GMT
            Not After : Oct 14 18:17:24 2026 GMT
        Subject: CN=c667df5e-1f2d-40d8-881d-15b5769988e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:ff:dc:30:56:17:f0:11:e2:a8:6c:40:5d:
                    f3:cf:8a:bf:92:71:02:34:00:e7:5d:39:35:1b:16:
                    6e:ea:09:5b:12:1d:29:d7:cb:0b:07:c0:92:90:54:
                    87:3a:66:02:cc:f3:0f:7a:a0:e8:06:0c:51:e8:4e:
                    3f:4a:82:74:dd:a8:8c:5f:82:d3:dc:fd:1f:6d:f7:
                    79:cf:ab:74:6f:e0:21:c6:ae:d6:f8:44:44:45:3a:
                    58:5e:43:7d:88:df:ae:3c:6b:f2:7d:07:4a:ef:e9:
                    fa:da:4d:c9:a5:ac:33:df:71:04:3a:05:26:6a:0a:
                    f0:f9:e6:dd:dc:4c:dd:e2:02:ee:3c:e7:68:77:79:
                    b6:84:4a:c3:3e:37:9e:d0:e5:36:c7:00:f9:e3:bf:
                    5e:2d:c2:ea:9b:13:86:3f:6f:7b:68:83:49:79:82:
                    b2:01:39:c9:17:6c:5c:db:f2:ea:cc:d8:6b:20:89:
                    6b:b3:e0:6f:be:47:22:22:5e:a1:fa:05:35:d7:3a:
                    24:8c:de:e6:93:07:0e:1e:1d:4b:6a:8d:0e:a8:e2:
                    c3:c3:cb:e3:47:11:9a:fd:e0:db:0b:c6:a2:ea:06:
                    1e:44:78:c1:e5:a3:0c:2d:eb:fc:67:a4:60:08:12:
                    de:e8:ae:88:ec:6d:16:c6:0b:10:77:0a:d2:a5:37:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EC:DD:C9:6D:F2:E1:35:1F:A8:3B:08:06:95:5B:EA:9F:C4:F3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/66d9d811-ace7-3b5b-bfa9-8da3be937a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.98.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:af:9a:e6:8a:b5:4d:00:7e:c4:28:bb:89:b2:3b:bc:c5:76:
         10:d2:9e:93:f9:19:91:3e:43:b9:c6:b0:c4:a6:dd:19:2e:34:
         f2:ad:37:db:25:43:54:77:a3:68:8d:b9:55:9e:0c:f9:68:12:
         33:c0:c8:f3:87:95:b9:5a:1f:de:cf:6e:55:c9:45:72:4c:1c:
         aa:3a:ad:c2:df:78:ca:49:64:be:f1:f9:81:e0:e3:30:42:f5:
         1b:44:d5:be:10:a2:06:71:a6:ea:e2:9a:aa:90:8d:7d:c6:c3:
         da:c6:8d:fe:6c:00:b0:b0:75:9b:6d:11:20:82:e5:dc:13:99:
         06:cf:a7:41:b5:2e:b0:dd:07:cb:79:a2:c9:14:42:a0:70:bd:
         50:32:8a:dc:17:b7:6f:e8:f9:88:96:9b:e2:d6:f3:c8:df:62:
         b5:f5:49:a7:c9:f7:a3:e7:f7:9b:77:31:60:a4:60:f9:91:5c:
         5a:06:1f:7f:ed:24:53:91:12:71:e5:64:8a:6d:9d:9b:82:e4:
         93:80:8b:19:74:3b:45:04:8b:d2:c6:9a:70:d7:19:09:2d:23:
         d8:7d:36:7d:1c:f2:e8:20:22:14:d1:bc:89:52:92:f2:9c:d8:
         a6:65:c1:96:bf:61:87:de:a4:73:3e:c3:42:63:b4:fb:f4:5a:
         4c:3b:7d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:13 2026 by rpki-client