Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa
File:                     50638985-01ed-37b5-8f1a-7c3230a86a9d.roa (raw, json)
Hash identifier:          rsnBopmtF6SNujnQeGW752hN4RvEe39tE3+eU/gn1ag=
Subject key identifier:   CF:DF:C2:ED:EC:BB:82:52:3E:77:38:84:1B:4C:04:12:4C:00:5E:A3
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584EA79B63BE9DDD05769FC4D200
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     213122
IP address blocks:        128.254.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:63:be:9d:dd:05:76:9f:c4:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7a5ffa7f-2b75-40a1-848f-664d65cf2b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:b9:bf:1f:a6:88:a9:bd:31:87:e6:d0:56:
                    5e:9a:13:af:8c:94:dd:ac:86:31:40:47:e4:18:98:
                    2f:31:1e:43:ae:71:48:38:75:ae:be:f9:dc:1d:a8:
                    71:ec:6f:36:f3:76:12:24:24:08:ab:df:af:3b:47:
                    81:46:5d:2b:e5:22:24:b3:58:ea:da:43:7a:c0:38:
                    1f:0e:5a:79:c5:27:25:1b:00:09:9d:d5:c6:86:00:
                    12:1b:fb:86:9a:88:88:68:d6:67:b3:01:33:98:3b:
                    39:d2:c2:5a:0d:e1:9a:ca:be:d6:ca:61:58:69:9d:
                    cc:b2:89:bb:ba:f4:bb:9b:f4:54:38:a9:cd:33:52:
                    fb:35:96:ae:30:b3:3b:a9:37:f6:1e:76:02:75:58:
                    60:2d:6f:f0:1c:d2:97:59:84:35:1d:10:7a:7f:36:
                    02:c3:63:b9:7d:d5:31:3b:b1:fa:34:14:38:85:e9:
                    17:c7:3e:92:90:49:c4:ef:57:78:d8:f5:79:d1:40:
                    3d:6c:89:94:0e:b8:23:42:5c:11:74:84:c5:43:df:
                    64:6d:28:d3:7b:94:8b:e6:77:86:e6:60:72:84:1d:
                    dd:55:62:8e:73:4f:76:57:d7:88:ec:d5:a2:6b:b2:
                    cd:2f:4b:f4:e8:2c:bf:4c:07:f2:9a:ae:2f:2a:37:
                    18:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DF:C2:ED:EC:BB:82:52:3E:77:38:84:1B:4C:04:12:4C:00:5E:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/50638985-01ed-37b5-8f1a-7c3230a86a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:fd:61:23:31:08:04:77:8a:0e:95:bf:01:9f:92:c9:8f:72:
         15:09:47:1f:1d:f2:65:2e:af:f4:3d:84:64:18:57:08:e1:a6:
         5e:aa:89:64:95:d1:7d:3a:b9:f6:c4:63:f4:70:f4:3c:4a:05:
         49:20:c2:9b:c4:26:14:ff:67:ca:f5:a7:a0:84:de:e1:f2:65:
         b4:34:86:9b:cc:dc:0e:b2:b8:d6:04:8b:e1:bb:99:41:4c:cc:
         90:ed:7f:c8:a0:97:de:5d:20:84:58:97:64:cd:b7:b5:2f:13:
         9a:f9:73:0d:bd:d6:43:7e:5f:1c:73:21:e0:1d:89:37:d7:b1:
         aa:02:1a:ef:7e:da:bc:9f:f4:68:85:4c:e7:48:14:3b:df:70:
         d9:0f:85:b1:a3:64:50:45:bd:df:c7:4f:2f:03:96:b9:83:dc:
         68:f1:ba:39:ed:90:b0:45:18:85:8b:bf:e4:da:a2:92:fd:ba:
         82:bf:a7:10:5b:80:ae:8a:54:63:20:9e:b2:a3:d6:0b:b7:65:
         ac:67:95:fa:bd:04:bf:b9:12:5f:68:6f:ca:bb:5a:55:48:4a:
         a8:3d:38:68:37:83:88:71:36:41:34:7a:e2:da:31:30:f1:7d:
         14:38:3b:c7:68:1e:de:e5:15:5b:4d:29:12:57:4c:9d:c1:1e:
         3d:55:2b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:58:29 2026 by rpki-client