Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/8ad369d9-1596-3233-9e2e-1fe3ec5d8d21.roa
File:                     8ad369d9-1596-3233-9e2e-1fe3ec5d8d21.roa (raw, json)
Hash identifier:          7Ty/Yc6TZaQLf10n9s/aoKlQUBuQ19a40XfYrIonT4U=
Subject key identifier:   B5:AC:D1:19:28:9A:AE:41:69:A5:F0:E6:F9:19:83:D9:A9:96:57:29
Certificate issuer:       /CN=9a22d04d-6f88-4738-8ecf-c41ae7da9b73
Certificate serial:       010D0C9F4328584E534F3A68A3FCDEC3B1977780
Authority key identifier: 44:0D:5A:2B:EC:B8:BA:21:3E:A5:82:6D:7C:6A:4A:A2:F2:14:A6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/8ad369d9-1596-3233-9e2e-1fe3ec5d8d21.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     399138
IP address blocks:        204.16.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:3a:68:a3:fc:de:c3:b1:97:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a22d04d-6f88-4738-8ecf-c41ae7da9b73
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=c585591f-5cbc-41db-b5e4-fb3453dc83ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e2:8b:20:20:ec:60:54:a5:31:86:cf:11:c0:
                    b4:76:8b:fa:a8:06:f8:db:c4:f4:28:13:8c:59:ac:
                    ed:0e:83:0b:bf:53:83:38:12:97:ed:ce:f6:e9:52:
                    b7:cc:a0:27:11:67:be:53:1a:91:ba:6c:fc:75:82:
                    ac:f0:7b:bf:ad:64:16:80:7a:63:6c:09:58:8c:c4:
                    54:3e:f4:70:07:40:b9:bc:bb:c3:c7:17:b3:f1:32:
                    47:4c:e6:a1:84:6a:01:73:8b:19:b8:9b:fe:d4:83:
                    e4:40:cc:11:aa:c9:fb:de:9c:8c:18:43:98:54:29:
                    05:df:57:5f:13:72:b7:5e:d5:a1:90:e0:cd:58:26:
                    81:33:cf:2a:bf:c2:b3:98:75:27:b2:cf:ef:4d:d9:
                    06:5d:1d:75:1c:9a:4b:ce:66:d7:c1:d0:f3:ca:58:
                    eb:62:36:e8:44:75:14:a8:69:dc:ae:34:4a:28:5e:
                    2c:c3:5c:0f:d4:9b:3e:58:11:47:2a:a8:39:b8:c0:
                    21:cb:a5:eb:20:dc:c1:51:6f:50:d9:8c:66:ce:f3:
                    d4:82:51:26:43:4e:0d:85:65:38:8b:3b:46:8d:97:
                    b4:2d:d0:79:1a:4c:0c:5b:40:cd:80:fc:01:13:93:
                    26:f7:16:80:00:42:38:1f:0c:06:9a:34:20:5f:e4:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AC:D1:19:28:9A:AE:41:69:A5:F0:E6:F9:19:83:D9:A9:96:57:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/8ad369d9-1596-3233-9e2e-1fe3ec5d8d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.crl

            X509v3 Authority Key Identifier:
                keyid:44:0D:5A:2B:EC:B8:BA:21:3E:A5:82:6D:7C:6A:4A:A2:F2:14:A6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9a22d04d-6f88-4738-8ecf-c41ae7da9b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:25:aa:43:ff:bf:4b:12:cd:f1:76:8a:7e:fb:1d:84:ac:77:
         a1:d9:2b:2c:20:7a:2a:61:a3:3f:93:7c:4e:f7:c0:0c:82:6d:
         68:9c:c3:b2:49:51:52:2d:8c:c2:db:9e:d7:be:04:79:5d:de:
         bc:2a:8f:9b:a4:9c:be:d8:bc:6e:b4:10:70:48:e1:37:3f:76:
         32:3a:e2:8d:88:36:da:4e:e1:61:2c:08:27:45:b9:f7:5b:79:
         a9:3b:de:25:cd:24:0f:d6:f6:a3:84:48:e1:b4:8f:d0:83:34:
         43:61:90:11:3d:2f:0f:41:47:db:91:4f:d2:c7:44:22:5c:27:
         49:5a:af:98:e1:cc:8d:87:f2:06:00:78:10:0d:7b:74:b5:a3:
         49:30:60:26:cd:f7:38:c8:08:92:47:02:b0:44:cf:b3:34:32:
         f3:13:da:4a:1b:5c:08:7d:15:4e:b6:70:72:f1:e8:84:c8:6b:
         d5:c0:ba:45:4c:7c:38:04:0f:c6:71:d0:b2:17:0f:36:07:f5:
         bd:5b:bb:4f:58:ff:9d:65:3e:38:30:fe:19:b7:ec:9f:96:ab:
         54:c6:a6:d1:02:e3:6d:88:c7:9a:2b:96:97:d0:1c:e0:cc:11:
         16:a0:58:23:d4:b4:c1:24:37:7c:16:44:e3:18:78:8e:5d:6d:
         71:48:17:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:40:37 2026 by rpki-client