Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d068f27f-3874-3a93-9826-da4ac06de565.roa
File:                     d068f27f-3874-3a93-9826-da4ac06de565.roa (raw, json)
Hash identifier:          ZddPRbxKdjnLZ89RwYJoCx3PrC4cvAkAfWGEV6ihTDM=
Subject key identifier:   5A:AC:F6:1B:12:C9:A0:49:E6:F5:54:AE:34:BF:6B:4E:3A:4B:60:7A
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584E6F3A2EA150ADD246C6DE6380
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d068f27f-3874-3a93-9826-da4ac06de565.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        150.230.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:2e:a1:50:ad:d2:46:c6:de:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=fb6fb0e2-f6ae-497d-8ea1-85a185bdf849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:2f:3f:19:4d:ef:aa:0e:c5:e1:19:ff:bf:
                    02:22:4d:a4:29:52:9f:18:77:cc:c7:4c:eb:7a:9b:
                    74:1b:63:55:f9:fc:1b:1a:b6:e3:77:c4:59:53:57:
                    2f:f4:80:c5:31:5e:ed:73:69:1a:6c:fe:50:8f:bc:
                    1a:c2:e6:fc:75:d4:ee:60:17:1d:cf:88:7c:28:6f:
                    38:94:de:2b:39:93:dc:84:c5:9f:d6:77:fc:ed:0c:
                    17:c0:b7:ca:38:52:fb:13:a1:83:a3:13:91:4f:4b:
                    62:d3:ed:21:c9:08:3b:8c:19:64:bd:c3:18:90:ab:
                    1f:93:06:6b:17:d0:cf:34:91:73:5b:97:a6:8a:08:
                    12:a6:29:ec:d0:61:7d:e4:c3:e4:a2:ad:49:77:94:
                    c2:32:99:fa:68:b8:03:79:8c:3a:30:b2:29:16:31:
                    bc:c0:e9:8d:5b:99:16:38:fc:a4:d7:01:81:77:67:
                    ed:12:36:7a:67:06:20:69:ee:80:be:05:de:19:7e:
                    9c:46:30:16:40:b2:ad:a9:e0:13:d3:19:59:3d:59:
                    79:36:9d:33:30:aa:76:c9:a6:11:61:57:5c:b4:96:
                    95:85:4d:5d:f4:29:da:50:d6:61:75:0d:1e:cf:70:
                    7f:40:d1:f1:28:c6:b1:c0:e2:be:e2:fc:1c:2b:2c:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AC:F6:1B:12:C9:A0:49:E6:F5:54:AE:34:BF:6B:4E:3A:4B:60:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d068f27f-3874-3a93-9826-da4ac06de565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.230.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5d:ab:89:29:ce:3b:ee:8f:9f:f7:60:8c:32:5d:9d:0c:b7:
         13:18:b0:8c:40:83:20:d7:f6:a9:b6:3d:43:0a:22:10:61:8c:
         b3:ac:ac:55:9a:45:eb:4a:d6:0e:9f:ba:b7:0a:ea:4d:47:b9:
         8a:a3:8c:3d:6a:d1:ed:9e:fb:bd:ca:74:b0:54:0b:0d:fd:7b:
         69:79:87:22:9d:07:1a:23:0f:04:32:a0:93:5c:e4:f7:8c:0b:
         fb:eb:5f:5a:07:4a:ef:75:17:f9:2b:6b:70:a5:75:53:5c:d8:
         67:2d:a4:d2:fe:46:1a:9c:90:26:a1:be:9a:11:1e:4c:80:80:
         93:1d:85:70:26:0e:ce:52:0d:70:92:35:fa:31:ec:aa:ea:5b:
         18:8e:97:34:83:a4:7c:e5:bc:14:ce:bf:f8:e2:2b:46:9b:e0:
         ba:84:cf:51:c6:6f:b8:2a:22:07:4d:32:29:c1:5b:a4:e4:43:
         70:7e:61:9e:db:ab:52:94:f5:cb:87:d5:6c:ee:fb:11:e5:6a:
         4e:de:c2:13:47:cb:59:43:d2:8a:0c:79:07:b0:81:36:0d:fa:
         5e:76:7d:a7:30:67:d5:d4:bf:e2:94:02:3a:1b:b8:04:7e:b0:
         54:ac:0f:91:59:fb:54:19:8e:08:54:56:70:50:f7:e5:1d:dd:
         07:a4:2a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:50:38 2026 by rpki-client