Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/d5182fee-7a81-304a-a9e9-fe231156848b.roa
File:                     d5182fee-7a81-304a-a9e9-fe231156848b.roa (raw, json)
Hash identifier:          1q5GtwBqitSpPDOwLmPLpodXbk6qrYn2VYiZnEGAcm0=
Subject key identifier:   A5:6A:25:50:9E:3A:0A:CB:B6:DC:4C:A3:6D:24:83:7D:5F:8B:4A:05
Certificate issuer:       /CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
Certificate serial:       010D0C9F4328584DCAFB1CF55A7E2392F0E7A680
Authority key identifier: 26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/d5182fee-7a81-304a-a9e9-fe231156848b.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     10974
IP address blocks:        208.79.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:1c:f5:5a:7e:23:92:f0:e7:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=78c8d59a-a245-4e41-9f0d-fe10d36a2698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:ef:3c:43:01:7c:d6:fb:cb:f4:44:65:6c:
                    f3:5c:c9:14:5a:3b:e4:50:d7:50:46:2b:4d:08:53:
                    5d:e8:d7:a1:82:98:65:bf:37:90:15:fa:60:a6:b7:
                    94:90:2e:59:7f:b4:74:0f:f0:05:22:87:ce:72:0c:
                    ac:53:5c:fc:64:cc:bc:78:2b:30:1b:fc:dc:90:bb:
                    6a:41:eb:d7:03:86:fe:e2:2a:48:3b:8e:33:fa:60:
                    b7:fe:38:c3:25:28:92:a0:2b:87:35:c3:d2:97:3d:
                    e9:d6:37:07:15:03:77:bd:5d:c0:db:a3:e5:22:3b:
                    ce:f3:68:c2:d9:c6:e3:fa:85:66:85:5c:c2:1c:8e:
                    b1:8b:bf:63:d6:aa:6d:94:de:c9:32:e1:a9:5e:b1:
                    7c:7d:83:68:49:bb:7a:a6:fd:c6:80:94:2d:8a:36:
                    ad:e8:84:21:ab:8f:3c:c2:34:f0:a5:f8:96:1c:4a:
                    0d:57:43:d3:b3:23:f3:22:8e:a2:f6:24:c9:3b:9b:
                    2e:98:0c:1c:73:7b:69:0c:86:5a:a2:9e:6e:40:2e:
                    0b:13:a6:ca:d3:84:52:be:9f:b8:23:45:a3:15:9d:
                    2f:7a:07:49:cd:18:8d:d3:24:d0:cb:46:58:68:4c:
                    00:ca:f5:11:c2:5f:e8:cb:07:d3:02:55:6d:72:8b:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6A:25:50:9E:3A:0A:CB:B6:DC:4C:A3:6D:24:83:7D:5F:8B:4A:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/d5182fee-7a81-304a-a9e9-fe231156848b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl

            X509v3 Authority Key Identifier:
                keyid:26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:49:a1:c0:c6:cc:d8:12:59:4c:b5:83:9b:61:e0:4e:d4:b5:
         74:29:51:18:65:44:b8:a5:6e:7e:17:9a:d6:89:02:29:01:82:
         36:c2:e9:65:ba:79:62:68:61:8e:3e:18:71:f4:e7:d5:cb:18:
         0d:c4:63:c8:7f:d7:7d:ba:4c:89:d5:e4:6f:cb:9e:17:e2:e3:
         5c:23:97:ef:83:97:83:96:e8:92:a2:36:65:9c:3d:f7:c8:2b:
         ba:78:15:df:60:76:41:db:ea:84:e7:f2:1a:a5:dd:33:58:d0:
         10:6e:3e:17:0b:cf:26:3a:93:42:05:85:3d:c3:4e:3a:f7:b6:
         f1:4a:ab:e8:74:45:61:df:69:19:bc:88:f0:ac:12:8a:c1:ea:
         8e:3c:fb:d5:88:71:4b:fd:1f:ff:c8:1b:ec:73:1c:b1:4f:74:
         be:09:ca:d8:ec:da:d1:34:08:ef:b9:ef:ed:e1:fe:cf:19:8e:
         1d:66:e2:eb:24:c7:37:72:18:b3:2d:21:8e:b4:63:d9:87:aa:
         37:2d:db:67:ac:1e:a5:44:f3:43:47:dc:49:0e:a1:4f:ec:3f:
         2b:11:03:9a:f2:ce:cf:ff:18:7a:7d:91:4f:74:d9:14:97:5e:
         00:79:41:39:e2:0c:9b:97:4d:15:0f:1a:7b:80:cf:e3:78:8f:
         4e:5d:7b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:56 2026 by rpki-client