Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/b159e9bd-8032-3795-956f-fbd9f5f1424a.roa
File:                     b159e9bd-8032-3795-956f-fbd9f5f1424a.roa (raw, json)
Hash identifier:          QJ8kgUSbY5TLOLk47MbfLH0iWLg20A6rNro6A1h5l2g=
Subject key identifier:   B5:C2:45:03:CC:65:96:BA:2B:CF:8D:1C:46:D3:EE:C9:2A:29:07:7C
Certificate issuer:       /CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
Certificate serial:       010D0C9F4328584D1A51B250B731865FBE4CBD00
Authority key identifier: 26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/b159e9bd-8032-3795-956f-fbd9f5f1424a.roa
Signing time:             Sun 08 Mar 2026 18:17:12 +0000
ROA not before:           Sun 08 Mar 2026 18:17:12 +0000
ROA not after:            Sat 06 Jun 2026 18:17:12 +0000
asID:                     55002
IP address blocks:        199.189.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1a:51:b2:50:b7:31:86:5f:be:4c:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
        Validity
            Not Before: Mar  8 18:17:12 2026 GMT
            Not After : Jun  6 18:17:12 2026 GMT
        Subject: CN=9a7db270-d86c-47b4-aa40-d3f0b004dfac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:ab:0e:84:e6:f3:cf:f7:df:93:15:5f:31:
                    70:bf:86:d3:22:75:ca:c4:bd:2a:a1:4a:f4:e6:93:
                    9a:92:5b:b7:d0:3b:a5:bf:03:97:5a:8d:4a:e9:68:
                    89:a0:a4:7f:d1:64:7a:db:7e:62:2e:5b:95:61:91:
                    e3:e3:28:f8:03:61:08:01:b4:63:23:ba:f2:3f:a1:
                    80:49:31:2d:8c:ad:52:91:cf:6d:59:2d:6d:a9:66:
                    8b:62:e8:18:52:14:2e:03:2d:0e:cd:f9:3b:eb:f2:
                    e8:30:34:6d:33:7e:42:7c:7b:8d:67:74:a4:80:23:
                    af:35:42:7f:cf:51:14:a1:8e:12:43:61:68:b1:37:
                    73:81:d9:bd:73:86:c4:1c:51:c2:1c:80:eb:5c:3f:
                    10:51:cc:36:b5:d5:f5:18:0e:5b:9e:d7:cf:da:f0:
                    17:99:8f:24:43:10:90:a7:3f:ea:59:98:23:ee:5c:
                    9f:b1:5c:4e:90:b1:83:fe:b4:92:7c:ad:9a:03:94:
                    81:a7:60:64:95:3a:80:e3:ed:53:49:ce:a4:7b:82:
                    8d:b9:ae:2b:fe:22:14:0e:db:dc:86:8e:6b:8d:52:
                    b6:c8:83:f0:b3:b3:6b:78:ee:9a:5c:1d:f1:44:b6:
                    90:e6:3f:d8:69:2f:47:fa:f8:16:c0:b6:c5:ce:b6:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:45:03:CC:65:96:BA:2B:CF:8D:1C:46:D3:EE:C9:2A:29:07:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/b159e9bd-8032-3795-956f-fbd9f5f1424a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl

            X509v3 Authority Key Identifier:
                keyid:26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8e:66:9a:66:3a:30:1b:f5:76:7a:dd:33:47:1c:92:20:ee:
         5d:3f:4e:78:eb:b1:44:98:9b:73:41:4b:e7:a5:af:d2:2f:29:
         b5:e4:6b:02:97:ab:b2:a5:ce:bd:a5:6f:fd:4c:c3:e5:e0:07:
         a5:a2:b7:d0:47:1f:d8:f4:19:24:e9:d2:e3:55:e5:df:6f:66:
         44:69:15:e1:28:91:66:4b:a6:58:5a:e1:f9:c4:83:8d:af:e2:
         d5:a5:4d:13:12:89:3a:ef:22:99:64:cc:93:bf:2b:78:4e:3d:
         35:2b:1d:f9:ef:89:4b:f4:6a:dd:d0:66:95:95:46:0c:a1:ba:
         5c:2e:ab:b6:22:f8:d5:b0:5f:c1:52:34:1e:f4:e1:cf:2f:03:
         3d:f0:6b:49:36:91:3e:fe:1c:d4:15:92:4d:28:9b:d4:46:ad:
         00:a4:9d:1c:3a:d6:2d:a1:0a:e8:d6:09:2b:bc:a7:2d:4a:81:
         11:53:9e:93:54:db:84:64:bc:fa:ef:24:c4:da:29:d9:72:4b:
         6c:3e:05:39:07:d1:25:06:e4:df:dd:a7:62:d6:b2:c2:dc:76:
         f2:e7:70:5a:1a:55:18:ff:c2:41:c4:ed:b1:f0:f3:8d:53:c4:
         8a:17:b5:3f:88:78:9f:99:20:60:79:4f:f7:fa:ca:a9:36:a4:
         0f:ff:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:02 2026 by rpki-client