Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa
File:                     0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa (raw, json)
Hash identifier:          r1WjcWOED3Ss6SP/JJTK1o6AfrjhQY3TwsgtLVJ/yVI=
Subject key identifier:   19:08:EA:36:2A:F0:5A:35:B4:EA:66:D4:60:E9:FC:6F:EB:4F:19:4E
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F4328584EA2DFC4C555E6A87A9AB77C00
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     8987
IP address blocks:        198.22.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c4:c5:55:e6:a8:7a:9a:b7:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=5a6a1efb-99d7-4c9d-9624-5fc47e7467b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b4:33:57:93:b1:55:a5:5f:48:e2:60:26:de:
                    dc:d0:80:c0:e9:54:9d:87:2d:7d:0c:13:ed:75:d8:
                    47:6c:3f:20:f4:15:f8:2c:03:ac:9a:35:ea:46:a2:
                    12:09:b9:26:27:5f:90:fc:0f:2a:db:b9:44:f9:06:
                    7a:58:2f:39:b7:6a:de:55:9a:e7:e0:c0:b9:44:2c:
                    94:16:ba:55:5a:e0:74:f1:1e:dd:bf:1e:98:2e:14:
                    28:3d:e5:bb:b6:20:aa:6a:23:16:9d:10:45:0c:41:
                    ae:ac:00:2c:25:47:d3:ec:d9:a9:b2:05:6f:fa:a4:
                    c2:29:61:da:97:51:08:ec:70:73:9e:bc:ff:3b:bf:
                    7c:69:9c:00:cf:5b:86:30:a7:a7:01:a3:65:39:a4:
                    df:7e:85:30:56:79:68:4b:ed:3b:16:69:5c:63:6c:
                    de:ce:d8:26:be:f8:f9:1a:47:09:9f:e1:bc:2d:bc:
                    73:4d:47:f5:d7:6c:f7:6d:0b:41:80:f6:e4:3f:2d:
                    66:79:f5:79:15:92:08:7e:cc:5e:f6:47:9e:24:a4:
                    c2:b3:51:07:e3:25:60:3d:fa:4c:a8:ca:42:00:6b:
                    21:c5:94:ce:70:36:be:fa:99:44:21:a4:6c:de:34:
                    54:be:1f:dd:7b:6c:94:d2:b0:30:67:bf:bf:5d:3d:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:08:EA:36:2A:F0:5A:35:B4:EA:66:D4:60:E9:FC:6F:EB:4F:19:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.22.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ba:c5:2a:29:a2:9c:d8:7c:ca:23:3d:d2:77:2f:db:61:d1:
         d1:be:36:e2:6f:cb:9f:16:56:a0:32:0f:d4:85:f0:70:7c:8f:
         6e:a6:e3:f0:3c:87:7b:f8:4c:97:8e:ed:fc:27:2f:26:a0:9f:
         61:a8:bb:18:ad:2a:54:18:3a:f8:3e:d5:aa:cc:87:f3:a9:72:
         27:23:38:5d:0d:f5:da:87:c6:29:50:2f:98:f3:f0:c0:5e:94:
         a7:74:fe:96:6f:a9:e0:92:69:a0:d4:b9:2d:8a:ae:82:b1:87:
         d1:79:d9:66:f1:11:27:ae:49:60:a4:d7:b2:1d:c5:5a:5e:13:
         4e:19:a3:75:71:d7:07:71:5d:8a:d7:b9:1b:b7:5b:62:85:81:
         d3:4c:6f:e3:d2:f8:06:d0:b4:19:64:70:76:1d:1d:2e:3f:44:
         9c:fb:88:55:a4:f9:21:6d:a2:c0:17:7f:53:92:14:e0:5f:39:
         91:74:ed:8b:78:f5:9e:84:3d:2d:a3:9d:93:1d:4f:3a:51:32:
         3f:8e:d0:d7:da:14:de:03:a5:ff:96:21:09:95:d6:07:08:b4:
         50:20:8d:93:17:29:3f:97:77:1e:fe:dd:34:15:46:49:81:ec:
         73:49:49:ce:85:ce:9c:45:ac:cf:55:28:cf:f0:9b:26:c3:66:
         3c:d7:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:11:44 2026 by rpki-client