Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bd66d5a9-c9ec-3258-a868-cb9f47a6bbda.roa
File:                     bd66d5a9-c9ec-3258-a868-cb9f47a6bbda.roa (raw, json)
Hash identifier:          xQMG4rNmaEYPnFYRIFQYeEzi/Q7vP91aEsJmtYMVkz4=
Subject key identifier:   28:06:9D:DB:70:04:F6:30:5B:39:52:A9:31:2F:BF:C3:A9:AD:D5:F1
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F4328584EA798D9C47B7BA5D34998F280
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bd66d5a9-c9ec-3258-a868-cb9f47a6bbda.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     188
IP address blocks:        198.22.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:d9:c4:7b:7b:a5:d3:49:98:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0f91f9c3-7ada-4d7e-9240-565751fa177a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:77:d1:48:23:d2:7f:52:58:68:dd:2a:65:
                    93:21:b5:65:f0:bc:c6:ff:29:26:c8:a0:49:5a:a6:
                    9f:38:f0:e9:b3:54:9b:51:45:23:b2:cb:21:56:ec:
                    dd:60:af:a1:f0:cb:57:c1:7e:a0:04:b8:6e:5a:54:
                    31:8d:0b:7c:40:c4:70:d7:4b:f1:eb:5a:de:37:fb:
                    57:2e:63:f5:78:cb:e3:51:9d:ed:55:0b:9f:71:5b:
                    3e:c6:83:7b:02:c5:9c:b1:ea:e8:ff:12:c9:45:f3:
                    3d:45:ac:6f:0c:29:36:ad:f9:cd:57:85:9d:e8:3a:
                    5e:6f:87:3b:7e:fd:30:eb:06:d1:52:67:b3:f1:58:
                    c9:f5:3d:91:d3:76:d5:e1:d0:e6:a5:ac:42:23:06:
                    bb:7e:08:de:69:11:a4:1b:71:82:60:00:57:8f:88:
                    c8:0c:2d:66:c8:92:10:04:c3:6d:ea:9e:44:48:cb:
                    8d:be:f9:e1:18:91:18:1f:8d:1f:05:b7:40:9b:d3:
                    f2:5a:fd:ba:62:a3:07:3d:6c:d7:42:e7:52:20:0a:
                    bc:02:e6:12:2d:67:7e:b0:62:52:4f:02:3c:cc:f0:
                    36:9c:54:f3:b4:77:77:02:3c:cf:9b:23:20:c6:d6:
                    66:7c:81:87:85:28:c0:76:05:7c:6f:9d:f1:ca:58:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:06:9D:DB:70:04:F6:30:5B:39:52:A9:31:2F:BF:C3:A9:AD:D5:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/bd66d5a9-c9ec-3258-a868-cb9f47a6bbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.22.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:95:eb:49:47:1a:e2:d5:df:e2:da:c1:a8:3e:f0:35:84:19:
         cb:1e:6e:cc:43:d8:7b:ad:71:81:93:b5:38:46:b2:8a:ec:35:
         1d:c9:01:7a:30:f1:de:07:a6:1f:7e:3f:ba:f4:af:b1:18:08:
         db:0b:6e:01:1c:1b:0a:ce:9e:ff:8b:df:ec:39:b9:30:94:12:
         ea:fe:f3:14:96:91:38:2f:fa:1c:1a:d2:34:e6:78:08:7c:59:
         e0:95:f8:95:e6:70:3a:71:a2:67:88:a5:ff:08:d9:98:90:c7:
         fa:d9:40:53:66:eb:3b:21:7a:1c:29:a3:81:f7:a0:bb:fb:1a:
         ef:58:84:14:7c:4d:90:3b:72:a2:7f:cf:7d:3e:5b:eb:75:be:
         30:19:f9:42:6c:ec:16:08:16:1c:2a:48:4b:83:87:56:fb:a7:
         eb:48:f1:bd:61:d5:81:e7:8a:c4:e4:79:c3:c7:89:bc:77:8b:
         b7:01:b1:bb:b5:1a:3b:17:56:3b:6e:73:de:3c:bf:ae:66:a9:
         8d:d3:fc:6e:30:bf:1f:d3:36:eb:47:35:12:f0:9b:36:e0:58:
         44:1e:0d:14:db:a4:96:d1:02:a0:ec:34:b2:fe:51:d8:6b:4b:
         87:42:cb:6b:c1:d5:a5:56:58:05:f8:aa:1c:e5:98:ed:9c:0d:
         5d:f8:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:13:55 2026 by rpki-client