Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa
File:                     f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa (raw, json)
Hash identifier:          HeFbMtPWESVD8RU3XlIPwOVdVXevz6qW7Ki7oDZscAk=
Subject key identifier:   AE:AE:39:83:B3:D5:00:1F:89:69:C1:0F:E5:9B:A4:AA:DE:A2:61:EB
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584EA79B646A753A3BC9629D5700
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     213122
IP address blocks:        170.39.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:64:6a:75:3a:3b:c9:62:9d:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c7022b5c-4ff9-48d1-aba8-192d241461fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:18:32:1c:4d:f3:e3:9a:b3:5a:d6:d6:44:c5:
                    c1:c6:48:6c:36:4d:45:c0:be:b3:93:6a:3b:17:c1:
                    d8:d2:61:4f:63:36:de:28:32:c8:3c:52:47:30:7f:
                    7d:3f:60:91:cd:bb:31:b4:43:50:22:5d:38:eb:a9:
                    01:d1:1c:7a:f4:9a:bd:e1:45:3b:a1:25:6b:2a:f5:
                    7c:3a:ff:dd:41:8e:fe:5c:6f:dc:f7:98:87:47:ee:
                    0f:0f:08:ed:81:f2:c9:df:16:5f:e5:9e:82:21:c3:
                    d7:75:4a:dd:ab:15:0d:04:76:ae:87:9a:e4:53:69:
                    55:aa:76:60:d4:6f:06:1b:df:c5:1d:e1:f3:fc:d9:
                    50:79:f4:7d:f6:f1:ff:2a:c4:4d:1d:60:77:16:ea:
                    b9:86:3c:a9:83:d6:eb:d6:b6:b1:83:47:ab:b3:7a:
                    87:a1:97:27:86:57:56:2a:4e:33:7c:c6:0b:4f:b6:
                    9d:90:ce:db:6f:60:ce:5f:88:7d:5e:d0:be:3b:97:
                    4b:f7:53:9a:3a:92:67:a7:66:1e:0e:a6:cc:06:91:
                    b9:d1:cf:39:ea:5f:49:26:d1:f7:84:49:ac:ee:10:
                    df:e6:ae:5f:20:e3:ec:ea:34:ad:a9:bc:ac:4a:79:
                    d7:d6:5e:6e:93:8c:5c:40:ef:52:34:1e:af:36:28:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AE:39:83:B3:D5:00:1F:89:69:C1:0F:E5:9B:A4:AA:DE:A2:61:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f1e0eb8c-a3a0-3b44-9159-f00bd2b4de1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b3:13:62:29:3e:d0:92:89:87:2a:2d:e5:c0:e2:42:6f:4a:
         6e:2e:35:dd:a5:15:b5:9d:f2:49:06:ea:4c:e6:19:34:91:4b:
         d8:8d:51:00:78:d3:25:c7:c6:e0:2a:cc:a8:d1:d7:e0:73:6d:
         3a:cb:ba:bc:a5:02:43:b2:bf:76:d9:01:ec:61:aa:86:f5:74:
         db:cf:82:26:41:06:e3:c1:d3:09:31:7a:84:d2:18:d9:df:9d:
         eb:ab:92:5e:63:54:75:84:39:2f:d6:56:61:0b:70:b4:59:84:
         2b:5c:d3:73:0e:14:9e:1e:c7:82:26:dc:7e:f8:f0:e4:d6:20:
         0b:fe:51:0b:e5:78:1c:28:ad:61:ee:23:8a:64:6c:64:31:49:
         66:99:a6:9a:f5:af:fa:b9:0b:12:8c:43:ec:8d:ab:e9:d6:2a:
         63:fe:11:2d:4d:3b:98:c5:fd:20:99:fb:f5:f4:85:18:52:16:
         5c:df:0d:36:65:25:8e:56:21:0c:da:40:cc:10:c6:6a:b5:44:
         8e:9e:66:c3:e7:9a:e7:50:d5:bf:83:9b:c6:a1:17:c2:41:75:
         2b:a5:2b:5a:cc:77:f7:65:a4:a4:b7:38:aa:f4:ff:0f:95:70:
         55:ec:9b:d7:97:9c:57:ae:6a:cb:6b:6d:61:ef:d0:a6:29:0a:
         bd:49:ae:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:09:02 2026 by rpki-client