Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa
File:                     587fa17e-6074-36b9-a166-4b4cac46f9a8.roa (raw, json)
Hash identifier:          Lf4RVr0zNiUd4ep5JUQAdNIWsDgbzrCl76cb2eUVbPI=
Subject key identifier:   0E:06:89:36:02:CD:55:7C:AF:90:2F:8D:1E:A4:CE:B4:F5:D2:2C:F7
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584EA79B645F16CDB3EA9F46AE80
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     213122
IP address blocks:        170.39.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:64:5f:16:cd:b3:ea:9f:46:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9e179a1d-795a-403a-82f5-699133905b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:0a:de:2a:ea:10:ae:3d:de:2e:fb:e0:9f:
                    6b:86:4d:67:e5:99:4d:ac:34:6c:b5:b6:11:24:e5:
                    81:01:e4:ca:3f:ac:6c:64:ff:a6:36:56:31:35:7a:
                    71:ec:ea:dd:24:bd:d3:46:5a:56:d3:fd:c9:b9:6c:
                    57:5d:93:5e:2e:ea:57:88:d3:de:0d:fb:9f:55:e6:
                    04:ed:26:56:17:d3:c8:75:47:ac:e8:a2:fc:db:61:
                    06:2b:f1:54:3b:30:a1:e5:c0:2b:ab:90:e4:c3:9e:
                    2f:d9:a2:c5:29:f3:92:57:21:a7:54:7e:01:06:68:
                    cd:5d:9f:9a:d6:86:bf:0c:d9:f7:c6:48:21:3a:ec:
                    f8:19:2a:05:ac:63:16:d4:b7:6d:fb:18:c3:a4:c1:
                    a2:f4:c2:06:5f:92:15:5e:b0:3b:5c:79:25:be:f0:
                    77:68:3a:21:ab:25:b2:5a:0d:55:71:03:11:51:88:
                    c5:04:a5:fa:92:51:d4:88:ef:19:9e:1e:62:fb:a6:
                    c1:79:75:5a:48:65:63:32:b8:3b:9c:e5:81:54:68:
                    4e:e2:0a:23:d6:86:5e:a7:93:4d:d6:77:f0:ee:1a:
                    a9:68:8e:5c:cf:5e:04:c0:3b:39:ae:c3:8a:f2:94:
                    e0:97:5f:dd:39:e3:08:27:07:fa:0b:71:c8:4f:f0:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:06:89:36:02:CD:55:7C:AF:90:2F:8D:1E:A4:CE:B4:F5:D2:2C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/587fa17e-6074-36b9-a166-4b4cac46f9a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:77:57:8e:04:46:cf:2f:08:44:8f:89:5b:d2:e7:16:fa:1d:
         c4:9f:e9:c7:60:43:0e:89:24:8d:58:9e:ee:fe:14:84:97:df:
         36:1c:07:ca:59:86:10:5c:cb:70:62:08:c4:d8:dd:a7:a7:86:
         85:8c:20:9f:92:e9:55:68:f5:85:c4:2f:64:ca:db:8c:4a:5d:
         ee:eb:88:16:c0:38:b0:7f:f5:b1:45:12:ce:e4:92:b3:ab:f7:
         24:42:a6:c5:24:fc:a7:d6:ff:1a:91:66:37:f6:37:9a:89:8e:
         f1:12:66:38:58:81:fe:79:55:c1:ff:89:ea:db:52:35:78:bb:
         a3:b8:bd:60:11:10:d9:62:ee:9a:b6:68:a8:6f:92:d0:2c:97:
         ff:2d:d8:09:97:bf:df:fb:b4:d1:46:2c:5f:68:2a:73:f3:a3:
         8a:04:d9:c8:02:51:fa:7a:8c:77:ab:53:8e:39:2d:4f:5b:fa:
         1b:ef:b8:5e:22:1a:cb:e4:8a:bf:71:fa:5f:64:27:95:80:33:
         8c:88:26:2a:01:c6:59:04:fe:f1:3f:7b:48:28:32:c2:29:27:
         0d:07:17:b3:3b:ff:54:21:6b:3d:39:b4:92:6d:84:79:c9:95:
         65:77:46:b5:9b:72:6d:fd:f1:62:ea:d4:6f:97:2a:f2:77:13:
         19:fd:b9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:09:20 2026 by rpki-client