Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa
File:                     8345228f-8d57-3f90-97d1-76ce96dca4d7.roa (raw, json)
Hash identifier:          NR9N6P7zXbNqQpIlGjHLJkw+imiESC5A1nLxCaH/A8g=
Subject key identifier:   CB:15:16:6C:BC:83:C3:01:AD:5E:A7:91:95:87:E5:B9:E4:89:86:09
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584D7A05349343D1A08795B9A000
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     30041
IP address blocks:        199.187.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:34:93:43:d1:a0:87:95:b9:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=3a3a03fc-9130-4b42-b8e9-96261ffb85ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:38:69:ec:5e:ce:f0:71:bb:2c:68:d8:b2:
                    35:8e:ad:b4:25:7d:14:9a:86:79:d2:d3:98:b5:20:
                    c2:4e:de:7f:f4:9f:00:2a:f4:c2:4a:98:77:9f:af:
                    05:9a:3d:5a:24:48:4d:4f:bb:aa:3e:b6:30:07:6d:
                    5e:6c:b2:5b:e9:03:93:0d:5d:c5:ed:8d:4a:54:1f:
                    43:1c:a9:24:15:53:ae:ce:2f:d8:05:4a:4a:d9:07:
                    6c:ed:25:61:e8:be:c7:55:45:fb:4c:57:dd:55:0c:
                    65:ea:76:18:2c:55:72:35:22:12:53:b4:45:57:fb:
                    08:44:5b:4f:d2:83:3e:61:65:01:1b:f6:e9:be:7c:
                    89:21:3b:b3:82:45:27:85:ad:4a:cc:f8:b2:f6:79:
                    e7:a2:9e:59:dd:97:7c:a5:d8:03:49:5e:c0:fb:29:
                    74:24:aa:78:f2:02:2f:4d:34:ea:b1:6c:0d:b6:dd:
                    28:fa:2a:c0:94:8e:4b:d4:7d:19:f4:3f:3f:3e:ef:
                    60:0e:41:f0:6f:be:ce:a7:26:95:fb:0b:b9:5a:aa:
                    ae:24:2e:b1:da:c6:c7:f3:10:51:db:d7:1d:de:ca:
                    dd:66:e7:45:49:26:69:a7:cf:3e:aa:5c:0b:e8:ba:
                    94:77:78:1a:e3:60:8a:cc:2d:7f:42:72:e9:5e:3c:
                    56:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:15:16:6C:BC:83:C3:01:AD:5E:A7:91:95:87:E5:B9:E4:89:86:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/8345228f-8d57-3f90-97d1-76ce96dca4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:5a:cb:30:90:ec:47:03:05:91:1d:e8:55:70:88:1f:a9:
         ed:33:98:e1:5b:fe:17:9b:48:b9:e0:27:15:81:c2:da:32:c5:
         bf:78:d9:bb:82:aa:e4:8b:98:a4:30:ed:24:2d:0e:ca:14:5e:
         b1:78:44:19:c5:a4:fd:fd:5e:b1:7a:fc:e4:71:11:f1:ed:6e:
         35:ed:cb:28:09:f7:2c:0e:57:1b:b5:df:f3:6f:c8:c2:40:7f:
         5f:4e:19:f6:96:ca:5f:87:96:7b:d2:c6:85:1a:ca:9f:d9:cd:
         60:bc:86:ea:ed:42:30:f7:8c:7c:14:ed:2f:76:30:7f:0c:5b:
         6c:c4:6e:56:1a:d7:cc:12:90:d1:ab:5c:e3:c0:82:99:30:15:
         2b:fb:3d:7c:47:04:a1:88:42:ad:c6:46:0c:bf:cb:23:48:13:
         70:7c:78:9c:82:cf:a6:3d:4d:62:dd:02:f8:c5:16:dd:51:0e:
         05:a1:e9:ca:02:28:d7:76:e9:67:af:eb:71:a1:14:10:eb:e2:
         fc:a7:af:e6:8c:61:63:95:13:8e:1a:1c:a4:c2:77:43:5f:76:
         e3:c8:29:8e:2d:d1:53:19:6d:2a:c0:d9:8a:3d:12:fc:a2:36:
         27:86:e3:03:88:9e:42:e1:c7:05:b0:d0:90:45:f9:3b:ec:6f:
         20:f4:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:06:49 2026 by rpki-client