Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5e5dde61-6fb0-31b1-ba1c-69031d17bde5.roa
File:                     5e5dde61-6fb0-31b1-ba1c-69031d17bde5.roa (raw, json)
Hash identifier:          P4L+NpXBWY7APrFLbuhjIYFMoTSJLqDScBAxUJLYSPM=
Subject key identifier:   0B:01:4D:57:08:B8:68:3A:15:48:8B:08:19:F0:DB:DB:BB:4E:9F:E0
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584E90BA46BDBCD60AC342748540
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5e5dde61-6fb0-31b1-ba1c-69031d17bde5.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     55081
IP address blocks:        209.127.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:46:bd:bc:d6:0a:c3:42:74:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=96091512-1bb4-4df0-b975-e3ff31e95e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:67:d3:4e:fc:3a:5c:4c:b0:66:de:de:1e:
                    58:78:01:2b:7b:44:48:77:1b:0e:3a:a9:b9:1c:69:
                    e0:1c:2d:0f:64:7f:62:0f:cc:cf:1f:b8:eb:e1:96:
                    cf:cc:2e:aa:77:5f:60:48:26:35:71:22:a8:64:f4:
                    6b:27:6e:97:80:47:c7:48:7e:90:89:fe:fa:99:0a:
                    5e:d5:a6:11:3b:1e:95:a1:8c:57:ab:05:fb:18:c6:
                    a2:bb:ef:26:9a:97:ea:ce:85:14:84:ae:3a:b5:6a:
                    b9:bd:43:41:dd:fd:09:34:f7:41:8b:1b:d8:d0:68:
                    ed:92:f0:0a:8f:f4:f3:4e:79:a3:de:2e:f6:e9:40:
                    ee:8b:3f:37:fe:2e:17:e2:bb:a3:09:e5:70:d0:0d:
                    8e:d8:d7:f7:f9:b6:6d:45:6f:72:3c:49:ab:9f:dd:
                    f2:1e:13:71:e3:1d:e8:5e:ce:eb:25:b2:de:12:e9:
                    33:dd:56:3e:9e:55:b7:75:4a:b4:be:38:b2:73:97:
                    00:3e:7d:28:27:48:7c:ba:f8:a3:53:a3:ea:bb:dd:
                    71:61:bc:30:04:da:a1:cb:73:a2:e5:d8:8f:f3:cc:
                    41:73:8d:67:5b:ab:ee:d5:e2:79:96:40:a9:0c:07:
                    2b:e5:a9:5a:72:09:57:5b:0a:1c:c7:ea:6a:39:09:
                    16:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:01:4D:57:08:B8:68:3A:15:48:8B:08:19:F0:DB:DB:BB:4E:9F:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5e5dde61-6fb0-31b1-ba1c-69031d17bde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:49:f4:8f:f9:f2:67:0f:38:9b:12:32:9a:de:66:d3:9b:37:
         37:fb:1c:4a:7f:af:24:0b:47:a5:50:71:06:ec:19:73:f5:88:
         88:3f:ae:dd:ed:fd:ef:94:72:22:b5:3f:cc:8b:ea:a3:97:a8:
         6b:49:61:0d:0f:f0:51:c2:c2:0d:41:19:3b:47:85:e4:9b:b2:
         80:0c:f1:99:c8:8f:c8:a4:1f:99:7a:b6:e1:23:30:b1:d9:12:
         20:39:b4:6b:36:81:74:c3:16:ae:ae:92:ca:30:c8:b3:8a:8f:
         15:6d:80:a3:ac:98:d0:a3:b5:d6:6b:63:4e:d0:d7:f3:f6:bd:
         0a:c2:3c:9b:04:91:c1:f2:64:5f:73:aa:d4:55:1b:15:77:61:
         02:1f:ea:9d:93:e8:0b:c0:ef:3d:3b:d0:d7:fe:c7:9b:ef:31:
         4b:a8:0a:14:30:81:17:af:aa:f2:9a:1a:33:e6:00:64:1d:1c:
         47:f2:86:2f:41:f5:b8:f7:82:ba:41:fa:72:c5:e9:2b:f6:7f:
         a0:ab:bc:28:ff:12:04:d2:24:4f:05:21:c9:53:b6:31:47:a7:
         25:e1:d4:a8:7d:b5:ed:92:e8:c8:2a:6f:97:82:e9:0e:4d:e1:
         bc:5b:13:3e:75:e7:ed:cd:66:0f:61:0b:ab:4b:3b:84:9f:c1:
         63:2b:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:58:33 2026 by rpki-client