Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bb4519e9-c947-3f82-955c-6cdbc4bc04d4.roa
File:                     bb4519e9-c947-3f82-955c-6cdbc4bc04d4.roa (raw, json)
Hash identifier:          +r+AcdMK9+y2gzmPFAETWSLXD4z9V0brIiQqSlMOhGQ=
Subject key identifier:   E3:C2:C8:0E:A1:5E:91:E7:59:B3:E5:1B:B1:A8:47:44:67:57:94:C7
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA7D856BCD21A5E442F080
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bb4519e9-c947-3f82-955c-6cdbc4bc04d4.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        151.101.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:7d:85:6b:cd:21:a5:e4:42:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=50ca4fba-90e5-4f11-aff6-1e3fb54bfcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:55:d3:94:dc:cc:a1:8e:e0:21:23:c3:3e:08:
                    7b:cf:d9:c3:ed:12:28:4b:08:44:c5:c4:61:b9:33:
                    c9:06:d6:82:14:78:9d:c5:d9:df:9f:dd:60:12:63:
                    0b:60:d6:da:82:c6:fb:bd:e1:2d:be:be:eb:1f:bf:
                    7e:42:1c:52:22:60:4c:92:f5:98:d2:e7:ec:6f:f3:
                    31:f6:ef:13:05:c8:0f:73:d9:3a:43:5f:d2:5f:79:
                    78:b7:2f:c1:9d:d8:94:39:02:ac:1b:7c:d7:0e:22:
                    03:95:ac:8d:23:a5:83:47:2d:85:7d:83:44:69:a8:
                    1d:d1:3b:3a:a2:c6:4b:9a:d7:86:9c:8d:4e:dd:c6:
                    8b:89:c4:4c:f8:3d:28:9a:2e:95:b5:e1:49:99:03:
                    c4:04:a2:b5:82:99:5b:80:d0:cd:7a:49:8b:48:11:
                    c8:b5:3d:81:a9:de:fc:0b:83:73:60:ae:e2:ee:0a:
                    d2:14:34:5f:3a:d2:3a:ba:00:a3:88:9d:d4:78:54:
                    1b:21:45:30:92:35:b0:1b:1b:1c:c9:0d:ae:70:2b:
                    38:71:56:ab:e3:38:c1:e3:30:6b:01:eb:fa:75:dc:
                    f2:a8:e1:83:ec:7e:3a:74:87:96:82:fd:9a:85:3c:
                    c7:56:b4:e3:dc:11:77:4c:8e:f6:d7:b6:c1:97:c7:
                    06:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C2:C8:0E:A1:5E:91:E7:59:B3:E5:1B:B1:A8:47:44:67:57:94:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bb4519e9-c947-3f82-955c-6cdbc4bc04d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:42:1e:36:7c:31:cc:43:55:aa:57:ad:fc:12:c0:64:d2:19:
         68:09:7a:74:21:fe:5c:07:77:a6:3f:b6:8e:1e:c8:0f:81:aa:
         9c:66:00:5d:39:d6:37:80:d3:63:e6:11:03:a6:96:1c:d9:7e:
         8a:d1:87:8f:22:91:a7:b9:9d:34:5d:c6:54:f5:d8:03:36:63:
         03:77:e4:fd:2b:c5:f1:81:48:d8:33:55:39:a8:5c:c0:9f:e4:
         95:bc:84:dd:fd:4c:0c:08:63:c0:39:d4:91:be:98:be:9c:23:
         be:a9:f3:41:06:7e:28:40:e2:c6:25:e3:57:b9:2b:11:96:00:
         4a:5b:48:c5:22:c2:fa:42:a0:ad:23:ec:bc:00:48:fa:ba:a8:
         7c:bf:a1:d9:da:19:34:a6:21:83:ba:54:6d:23:67:2e:9e:69:
         d2:1b:d8:25:01:ae:59:6a:10:95:35:a2:b8:e2:8a:ec:5e:63:
         6e:c4:02:02:14:7d:72:de:83:52:36:be:73:95:ec:ed:a1:75:
         fd:0b:09:45:95:6b:bd:30:20:d1:e9:81:af:0a:27:ea:bc:91:
         a1:a2:4c:cc:2d:9e:0f:0c:ae:53:83:8c:3a:18:21:cf:9f:88:
         03:0b:9b:87:64:5a:4a:62:be:a6:df:ed:0d:bd:01:c4:8c:30:
         76:95:b4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:11:05 2026 by rpki-client