Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/5faa1dc1-711a-34c1-846d-2c44c36214c3.roa
File:                     5faa1dc1-711a-34c1-846d-2c44c36214c3.roa (raw, json)
Hash identifier:          TNBWOVLgLCdu7fidcbVWgAQFOVVGFfXO7BMxTgmEz1g=
Subject key identifier:   03:E1:00:C2:EB:65:2D:6A:D5:7E:8C:6D:37:2B:E0:8C:6B:0F:77:1A
Certificate issuer:       /CN=8fc21c27-e8e6-433a-86da-315992f3e55a
Certificate serial:       010D0C9F4328584DDBBB21A18B6036AA46976400
Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/5faa1dc1-711a-34c1-846d-2c44c36214c3.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     14537
IP address blocks:        199.45.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:21:a1:8b:60:36:aa:46:97:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=9fa9f4aa-9e0c-470a-afc1-80c993683ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:36:4b:9a:88:8b:ec:a3:55:7d:20:71:b2:
                    1a:4d:d6:c5:42:a2:dd:52:6e:0f:92:b6:ad:11:83:
                    34:8f:fe:08:6a:2e:92:71:c6:4f:ab:91:cf:a0:6a:
                    5d:ff:67:b1:62:6a:6c:26:4a:39:90:11:00:de:96:
                    31:6e:15:7c:13:c5:1d:b9:f7:cd:fb:67:b6:2e:4b:
                    dc:a6:e2:91:39:63:ba:fb:4e:21:be:6b:5c:b0:31:
                    3c:25:dc:68:c7:ab:a9:3c:90:06:8a:bd:34:f6:16:
                    34:97:00:c8:2a:d7:26:fb:4c:32:ed:d6:d0:2c:fd:
                    2f:18:ae:45:a4:ec:f5:bf:3e:e9:a4:00:3e:aa:16:
                    d4:35:2b:20:1f:3a:10:68:cc:32:b1:15:ff:88:64:
                    4b:f0:a5:bb:8c:68:28:55:80:aa:b0:db:80:30:f1:
                    71:a6:f6:21:01:45:14:f8:a0:09:10:62:f1:a8:57:
                    c2:b1:7e:94:c0:80:3c:79:8c:00:80:a6:3e:79:ac:
                    7c:c3:5b:c2:72:82:fe:7d:39:0a:b3:86:88:3b:93:
                    9a:d8:76:f9:49:75:76:79:f9:16:be:aa:39:c1:32:
                    f1:fe:de:d5:84:e4:4a:a8:e9:93:31:c4:0c:4d:2e:
                    db:94:90:09:78:dc:1d:99:ea:04:97:d8:1f:a0:f2:
                    d1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E1:00:C2:EB:65:2D:6A:D5:7E:8C:6D:37:2B:E0:8C:6B:0F:77:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/5faa1dc1-711a-34c1-846d-2c44c36214c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl

            X509v3 Authority Key Identifier:
                keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:1f:fa:d5:ee:9d:e7:3e:bb:e2:15:72:82:da:98:79:8e:09:
         9c:7d:e4:b5:17:31:4c:9c:c0:e9:b3:2f:c2:23:8a:97:dd:12:
         6f:2b:33:ea:65:6a:1c:7c:f6:a7:79:71:3f:2e:dc:32:4f:a2:
         9d:54:4f:d0:27:8f:c1:56:c7:df:6d:2a:da:98:da:70:2d:1e:
         eb:d8:d4:81:9f:9a:4c:ed:65:bb:82:59:29:75:a8:84:42:eb:
         b1:1c:43:63:8c:26:bb:20:70:33:41:82:e3:be:85:ff:b5:b9:
         a0:37:5c:1e:8e:08:6b:19:40:8a:a8:32:90:be:04:81:88:1a:
         bd:a5:9d:b3:05:f1:75:b5:de:db:8b:f1:f7:c5:fd:da:cb:f2:
         d7:3e:f4:72:f3:22:dd:d1:6e:84:c0:50:69:de:66:77:4d:7d:
         ee:a7:70:f7:53:90:ae:e5:e2:34:c0:5c:55:24:f1:1d:89:2c:
         5b:cd:dd:68:78:61:24:0b:c9:3c:e4:f0:e0:8b:63:71:28:58:
         a5:95:90:29:3a:a9:64:42:e8:04:64:28:55:b8:f3:23:b1:d5:
         e0:5b:6c:95:c4:8a:b7:f8:d3:c9:52:d2:c3:49:e9:40:b9:e5:
         b9:d5:e6:bb:b6:a8:16:85:45:e2:db:d4:5b:c6:6d:72:1d:58:
         cd:49:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:33:38 2026 by rpki-client