Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f1b37e34-0530-3d7a-bf38-76831b59972d.roa
File:                     f1b37e34-0530-3d7a-bf38-76831b59972d.roa (raw, json)
Hash identifier:          ape2ydKjhqeqtkjjUT6NsExMPEw/H2GW/fCM2yyGMyY=
Subject key identifier:   44:AD:80:B0:6B:F6:91:A5:A2:1C:EA:D2:F6:F8:DB:82:1B:72:42:89
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F4328584E6F3A2601E0D2EC756D984400
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f1b37e34-0530-3d7a-bf38-76831b59972d.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     22612
IP address blocks:        199.85.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:26:01:e0:d2:ec:75:6d:98:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=c0b6a23d-6d4c-48d6-9063-41bc49a2125b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:5a:5c:d0:1d:ea:c2:d8:d8:4e:cf:c1:41:
                    82:f7:cf:dc:fc:8e:32:9a:2a:c8:00:1d:c8:6d:38:
                    8c:16:6b:71:1a:70:f1:b6:67:b8:4c:af:e5:fd:af:
                    db:62:e7:30:1b:9a:09:7b:e9:b1:5e:4f:8c:db:01:
                    5c:0b:eb:b0:3e:c6:68:a1:80:01:8c:04:0a:36:a5:
                    8c:da:33:3e:3d:02:f1:a6:43:6d:1f:56:a8:ea:1d:
                    fb:33:bb:6c:14:e5:3f:cf:65:5b:54:a4:c0:2e:15:
                    34:5c:01:6e:ae:98:e5:b7:20:e2:2b:96:4f:90:92:
                    8c:58:64:70:d3:bb:e1:b7:cc:4b:9e:da:1d:03:91:
                    6a:7c:cd:bb:71:cc:90:90:00:0d:f1:cb:24:0d:c1:
                    cc:7c:8e:fb:91:8a:f2:db:b9:2f:35:ea:e4:5e:61:
                    67:35:0c:5c:c5:c6:4f:60:45:71:ca:c3:4d:6c:71:
                    b8:68:8b:23:fe:aa:61:79:ab:d0:de:24:c7:ba:91:
                    50:40:12:8b:c1:f5:f7:e5:26:0e:14:42:72:84:a7:
                    95:97:52:fd:6a:d7:0a:a4:9a:b9:81:a0:47:c6:da:
                    c1:d7:5e:bd:28:eb:c9:ae:21:9b:cb:60:43:c9:5d:
                    93:e1:70:2e:b5:a3:32:04:be:02:4d:8f:c7:38:8e:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AD:80:B0:6B:F6:91:A5:A2:1C:EA:D2:F6:F8:DB:82:1B:72:42:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f1b37e34-0530-3d7a-bf38-76831b59972d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.85.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:77:ac:74:1f:2b:e3:d4:b5:76:fd:e1:23:d4:c3:5a:25:cb:
         98:af:02:36:3c:da:c1:b7:01:d5:9b:f8:51:1c:1b:21:8c:18:
         2c:45:c7:88:ba:09:22:e2:7b:3c:d3:1f:6f:1e:a3:ab:b6:d8:
         ab:5b:c6:f8:aa:7f:6a:0e:d7:bb:c8:f0:41:4d:aa:f1:54:29:
         1f:72:1b:d7:d2:72:29:58:9d:9b:36:77:5c:e2:ab:34:f9:15:
         74:ad:f0:f6:1b:24:14:b9:5f:da:e6:bf:72:b9:02:1b:9b:e4:
         aa:47:3b:5b:62:3e:0a:ec:31:90:46:90:35:4c:74:a6:e9:09:
         2b:7c:f4:37:04:05:7a:72:25:8c:ec:9a:93:32:29:3c:eb:9f:
         f3:1c:c7:00:f6:ab:9e:d3:1c:25:fe:e8:3f:e1:e6:d2:eb:4d:
         e6:9c:8b:8c:74:1f:74:42:25:62:a3:62:d5:e7:a2:83:f3:fa:
         05:0d:64:e2:9a:21:05:8a:98:21:df:00:b3:4a:5f:b9:6f:c8:
         5f:34:5c:e6:2b:4f:48:80:42:7f:c9:4f:e3:ca:d1:d9:2e:f9:
         22:cc:56:2f:48:1f:6e:6c:65:64:b6:11:c9:6e:42:84:80:c1:
         5b:5a:bb:11:40:42:8e:b6:41:b1:b9:d2:c6:df:01:c5:cc:6e:
         a1:ff:94:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:43:58 2026 by rpki-client