Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/299cd2db-655a-3cdd-9cad-92d013df4297.roa
File:                     299cd2db-655a-3cdd-9cad-92d013df4297.roa (raw, json)
Hash identifier:          ZDBx8CYO1XG5sBpidlNdUOk/xDzp2qGI1/6qrauFIYE=
Subject key identifier:   B4:EE:54:01:74:16:76:F0:0B:62:6C:C1:BD:A4:9A:D5:72:4B:41:F8
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328584E885A3E475B6A093A356E6C80
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/299cd2db-655a-3cdd-9cad-92d013df4297.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     803
IP address blocks:        96.125.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:3e:47:5b:6a:09:3a:35:6e:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=859a1251-be5f-42dc-8f83-cba9c5fe6a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:95:bd:22:ed:72:bd:bc:98:2a:c4:22:84:
                    e1:0d:15:54:81:b3:f4:4a:6d:b1:f8:df:3e:04:ad:
                    b7:67:eb:e7:17:53:d9:52:f9:9a:8a:94:3e:5e:e9:
                    7e:f7:43:05:f2:aa:9c:ec:b0:e0:3d:a6:68:e8:2d:
                    f3:83:26:63:b7:76:b8:45:d2:ff:91:9d:4d:43:56:
                    97:9c:fa:c1:f8:c1:39:03:0d:03:c6:28:31:98:aa:
                    42:97:6d:2f:a1:e6:1b:82:1f:09:e0:bf:bf:3f:c7:
                    ff:fe:0b:36:f7:77:4a:b9:fb:dd:f5:15:38:b5:df:
                    06:c3:6d:54:64:6b:e5:c0:8d:41:0a:fe:b3:ad:70:
                    3b:aa:2a:df:c4:97:07:a9:71:a1:0b:b0:18:ef:06:
                    75:d3:5d:1b:32:a2:55:ad:c7:ec:c9:2d:b3:de:f6:
                    7a:dd:e0:68:55:79:05:0b:13:49:69:28:7a:be:6f:
                    dc:da:82:3a:41:6a:79:63:d1:3d:6d:c6:80:1c:a1:
                    27:12:b3:2f:87:0e:30:76:b4:bb:05:58:29:8d:a9:
                    fa:16:1f:cf:39:16:c5:87:2b:8c:0c:ef:cc:9a:50:
                    42:67:a2:29:1c:4e:1d:c8:c3:e2:54:aa:8a:05:ca:
                    d9:56:d1:cc:b7:b1:f9:16:ba:95:75:17:80:db:43:
                    40:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EE:54:01:74:16:76:F0:0B:62:6C:C1:BD:A4:9A:D5:72:4B:41:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/299cd2db-655a-3cdd-9cad-92d013df4297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.125.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:38:f2:1e:e8:d7:fe:2f:73:b3:87:17:0c:d5:27:81:06:e5:
         a5:34:b6:f3:f1:6a:d4:dd:91:16:f8:db:4d:71:82:12:92:0c:
         e3:f6:c8:d9:93:69:52:a4:7c:96:b1:e9:68:28:9e:05:03:46:
         15:86:55:f1:bd:b6:db:57:44:65:da:70:58:74:2b:13:8e:8c:
         90:78:34:7f:df:83:d5:d9:f7:dd:5d:d2:01:e4:c5:43:54:a5:
         15:00:cc:56:5c:35:91:83:09:1a:99:cf:c8:aa:17:ec:56:6a:
         9e:82:7d:ef:2e:3a:63:eb:63:59:81:48:15:67:14:42:f5:0b:
         ff:74:b4:68:6e:35:ae:b8:a5:1c:82:00:02:6c:89:a4:fb:6c:
         8c:d1:bd:a8:8d:d7:40:d5:3e:3d:61:33:52:c8:2e:f5:f8:5c:
         db:12:3f:f9:66:1c:63:6b:b1:1b:81:85:bd:f2:7e:39:17:91:
         21:de:6b:5f:c8:bc:59:ff:43:2b:cc:fc:59:80:71:12:49:9f:
         98:70:b5:da:9a:2b:de:dd:42:7b:fd:2a:31:1f:8e:88:dc:50:
         51:f8:d0:48:10:6a:a6:80:36:b6:0a:63:13:64:93:c5:ab:f0:
         0e:91:41:3c:e4:7e:51:9b:9c:78:f3:70:3a:0b:b0:f5:36:05:
         52:cb:7e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:58:00 2026 by rpki-client