Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/85a54aff-5d43-3350-b694-903671b40801.roa
File:                     85a54aff-5d43-3350-b694-903671b40801.roa (raw, json)
Hash identifier:          BCzWLHQ9YM51fyCPxIrgNZjc1GrosGGGgYSxpdYApKE=
Subject key identifier:   1E:81:68:97:BF:FF:8E:D4:09:D6:A2:A5:BD:A9:B0:65:0C:8A:60:CF
Certificate issuer:       /CN=111c4633-f730-480a-8516-3382e9a5eda3
Certificate serial:       010D0C9F4328584DB77022BA5A21F9F0B7AA1100
Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/85a54aff-5d43-3350-b694-903671b40801.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     13538
IP address blocks:        198.32.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:22:ba:5a:21:f9:f0:b7:aa:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=bae0728a-e203-4999-a0a0-eabac2c369d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:09:04:00:93:6b:5e:77:37:14:45:a0:31:
                    eb:0f:14:a0:0e:55:3a:39:d2:68:1a:61:21:37:52:
                    31:24:5f:c4:e5:37:16:aa:53:98:d2:8a:85:45:bd:
                    68:22:dd:e2:e9:27:f8:73:2e:82:7d:ce:68:c9:13:
                    df:19:76:cf:44:7d:60:21:b8:94:83:83:9b:13:e1:
                    1c:07:45:28:cb:8b:26:ff:24:56:81:03:35:6f:37:
                    1d:ce:29:f6:53:f8:75:c5:e4:fe:57:85:b9:b2:b1:
                    f9:10:d6:24:76:b1:31:9a:65:6d:ae:cc:11:35:5a:
                    a8:40:16:8a:d2:45:51:ce:8b:a2:4c:27:9c:d4:9c:
                    ac:71:c3:2a:57:e6:1c:f8:d5:42:6f:2e:52:30:e5:
                    12:87:97:c5:7b:b9:b7:d6:dd:da:f9:78:07:c0:f0:
                    6e:ef:b7:61:60:fe:1c:e1:64:0e:75:35:9b:0c:1d:
                    3c:c4:d3:b3:be:a7:e5:eb:79:e6:13:7c:76:28:55:
                    e2:29:3a:94:c3:09:a9:a3:dc:23:ef:9e:f1:26:53:
                    35:0f:f4:e9:40:45:0f:20:3b:21:cf:ce:f3:8f:b2:
                    99:9a:c2:ba:84:42:52:a3:8f:61:ac:38:2f:07:84:
                    18:03:8e:fd:15:3b:83:2b:66:80:44:08:19:6b:2c:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:81:68:97:BF:FF:8E:D4:09:D6:A2:A5:BD:A9:B0:65:0C:8A:60:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/85a54aff-5d43-3350-b694-903671b40801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.32.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:af:fd:6f:f8:52:bf:15:2c:a3:7c:60:9a:f5:9c:18:d5:b0:
         85:e1:05:ff:89:05:a8:d2:88:3f:bf:a8:46:74:29:c3:a2:39:
         cf:56:bb:25:e9:44:22:ca:a3:51:c4:e8:63:3f:8f:48:07:da:
         ab:e5:b4:8b:95:8d:72:f3:c0:bf:cb:bc:4e:61:8b:a4:d3:e6:
         22:ab:90:7c:21:82:1d:bd:44:2d:14:33:4d:6d:99:f1:a6:a9:
         36:02:54:6c:42:d3:46:2c:9e:f1:e7:1f:ba:5c:df:19:86:0c:
         4c:39:55:1a:27:e9:6c:f2:9e:a6:e5:26:12:10:e5:c8:df:21:
         d0:fc:f4:14:dd:3c:ec:8c:53:6a:63:79:98:a7:b3:8e:63:5b:
         3f:94:6c:1c:e4:c5:bd:4b:6d:e9:82:7a:6f:d3:15:14:bd:b3:
         a9:22:72:1c:e6:39:e5:91:d6:27:af:ca:39:41:1b:d3:97:54:
         ac:6a:86:75:00:e8:3b:e1:99:0f:e2:dc:8e:d0:64:23:c1:08:
         dc:92:40:dc:2f:41:a7:f6:8b:42:d6:63:24:28:bd:d4:5c:10:
         cf:58:8a:64:c4:80:48:f6:43:97:d5:cb:f2:19:f7:ce:cf:f8:
         26:d4:4a:c8:e1:b9:63:c2:70:6e:14:e5:96:32:87:c9:7c:84:
         64:48:68:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:40:11 2026 by rpki-client