Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bbd9593d-f1ba-3397-a021-e3f5d56a1115.roa
File:                     bbd9593d-f1ba-3397-a021-e3f5d56a1115.roa (raw, json)
Hash identifier:          BXYQ8nOG0Mh5cUWxdbDl+7SmfDK8kjEKPH4NSymDrV8=
Subject key identifier:   B2:82:7D:03:CF:2D:CF:2C:5A:49:0B:CD:1B:C0:3F:05:B5:37:86:9C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA815E72C6831EAF230200
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bbd9593d-f1ba-3397-a021-e3f5d56a1115.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        167.82.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:81:5e:72:c6:83:1e:af:23:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=3cea3027-07d8-4f60-baba-e53915d312d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:e8:ae:78:50:90:8a:73:30:1c:91:92:fa:
                    74:00:4d:c0:bf:02:5c:87:5b:a5:c1:8a:ce:a5:88:
                    66:f9:0e:f2:7a:06:d7:fb:b8:a6:96:70:43:3a:1a:
                    15:10:48:7e:3e:89:ab:05:d6:e5:28:d0:e6:e9:7b:
                    b5:09:de:47:b0:c2:3b:b7:e2:9c:00:3b:7f:b9:59:
                    11:12:da:94:8b:fe:ae:fe:39:b7:8f:40:40:84:9b:
                    f3:22:3a:5d:9d:a3:c7:01:45:be:39:80:e7:11:8b:
                    87:ad:fc:db:39:70:2c:bf:6a:9c:09:27:d8:5b:dd:
                    ed:50:40:18:2b:c9:21:43:73:eb:cf:d2:e4:5e:b4:
                    39:70:f1:37:02:df:74:b5:c2:b0:bc:19:38:dc:51:
                    9c:dc:fa:3c:79:22:3a:70:63:46:36:d0:45:b1:dd:
                    e6:a7:d8:79:4d:87:32:f7:af:e8:cb:f3:11:f6:6d:
                    07:40:ae:4a:94:a0:c6:fb:eb:27:94:33:14:90:16:
                    b9:2a:e1:6a:b0:5c:74:37:6c:75:eb:43:0f:85:31:
                    1f:f5:c1:b9:fe:e7:47:6a:b0:6f:0c:d6:e7:e3:e0:
                    7e:18:0a:b5:17:f9:71:0f:88:55:36:9b:1c:d1:39:
                    30:7b:53:b2:00:bc:28:46:68:10:c0:46:90:ab:6b:
                    18:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:82:7D:03:CF:2D:CF:2C:5A:49:0B:CD:1B:C0:3F:05:B5:37:86:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bbd9593d-f1ba-3397-a021-e3f5d56a1115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.82.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:95:52:5c:9b:89:05:5d:ed:a7:73:90:55:82:83:a4:43:24:
         42:8b:c0:17:05:d8:f3:0f:b7:f5:0e:7f:f5:7a:97:74:3c:0e:
         b0:ec:dd:2b:2d:fb:dd:09:eb:0e:b9:eb:2a:e7:9a:d5:39:9b:
         cb:96:db:5a:b5:bd:24:b7:dd:d8:49:4a:b4:96:ae:61:e4:93:
         a3:00:56:95:45:74:01:1d:7f:86:1e:d9:0a:57:02:d6:f4:99:
         6b:b2:d1:5c:5b:52:a4:51:1f:b9:af:2b:68:b9:8c:d3:f3:8a:
         eb:9f:3a:cd:c3:77:2d:3c:27:61:5e:de:ef:7d:4a:b3:ea:07:
         38:b1:0f:5e:7b:8b:d1:93:30:9f:46:85:cb:78:be:53:2c:ec:
         3d:28:6f:69:ca:e7:ec:95:01:19:08:9b:f2:91:98:20:12:95:
         8a:02:37:83:72:e6:75:82:9d:01:99:94:6f:d5:7f:36:99:64:
         5b:04:8a:af:cf:07:5a:52:d4:48:48:ae:d0:d0:f5:af:80:0f:
         04:1a:aa:a1:05:4f:0f:a5:10:6e:7b:db:ef:ad:85:ac:ad:3c:
         06:cb:37:27:c0:95:6d:af:82:58:2e:0b:c5:50:a3:85:df:99:
         30:2c:d5:27:10:82:5a:cf:7a:ca:d3:17:59:43:17:6f:d5:c4:
         86:45:78:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:06:52 2026 by rpki-client