Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/c7c6d815-8c68-3c86-8f79-70d55acf7d99.roa
File:                     c7c6d815-8c68-3c86-8f79-70d55acf7d99.roa (raw, json)
Hash identifier:          gK6OS/9SEjXECmZya3iGTGQsv0rMHg+f7VJNHXBH+A0=
Subject key identifier:   05:66:63:34:92:68:92:9B:84:B4:38:B1:78:0B:E6:10:62:52:D2:9A
Certificate issuer:       /CN=02df9026-5ea2-4718-a55c-d46da7505348
Certificate serial:       010D0C9F4328584EA7973C4A608BDE135F116B00
Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/c7c6d815-8c68-3c86-8f79-70d55acf7d99.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14291
IP address blocks:        192.16.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:3c:4a:60:8b:de:13:5f:11:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fc4ed830-9394-4eb4-b796-5e5d73a11e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f9:2f:fe:6a:d7:d0:fd:ee:1b:eb:4a:04:79:
                    ca:4c:8e:7e:9c:a3:62:96:ba:1d:2a:ca:b9:6c:7b:
                    32:59:53:0c:27:1a:d4:eb:4b:45:c8:ea:3d:5f:f1:
                    a9:fa:24:36:3a:d6:b2:3a:b4:f7:70:a9:4e:54:4d:
                    18:12:3e:3a:e1:c4:7e:2a:74:41:09:d0:0a:d9:81:
                    97:fb:4e:aa:a9:e8:66:1c:bc:23:1c:c6:0b:d2:e4:
                    62:f2:6b:83:ca:f4:9f:ac:e2:6c:91:a8:b8:9e:c9:
                    a1:06:03:fc:e9:40:41:64:6a:c4:93:d5:7f:55:a8:
                    d2:ee:8d:ad:fe:6a:e6:67:93:65:3f:3f:12:fc:a3:
                    97:47:22:6a:73:b6:f8:0e:ca:5b:93:04:5a:45:7a:
                    d4:d3:26:10:99:c2:10:76:ac:40:19:f0:a3:20:d9:
                    5a:f3:2c:8e:78:f1:df:ec:4f:9a:64:c8:69:9d:fc:
                    07:8a:92:d1:cf:44:d9:5b:15:43:fc:de:4f:62:7b:
                    0b:17:08:d2:9e:48:60:a7:1a:53:4a:b2:38:42:e8:
                    1a:ba:dd:76:86:4e:af:ba:97:47:59:3e:ff:d1:28:
                    2d:8a:1d:a9:a6:2c:b7:96:13:60:12:3e:ef:ab:ab:
                    53:55:ec:b6:15:19:0f:f4:22:57:1b:e0:67:40:ff:
                    c8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:66:63:34:92:68:92:9B:84:B4:38:B1:78:0B:E6:10:62:52:D2:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/c7c6d815-8c68-3c86-8f79-70d55acf7d99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl

            X509v3 Authority Key Identifier:
                keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:cd:22:6c:83:03:65:dc:c8:1d:f1:e6:5d:b3:84:a4:f3:d4:
         dd:db:b4:18:5e:d0:92:2b:c5:4c:10:86:ef:35:8f:a4:a0:46:
         29:7c:a0:01:5c:56:e7:f1:42:39:07:71:f6:cf:46:4f:c1:5f:
         1e:c1:e5:2a:89:cd:52:53:40:62:be:0e:45:bb:9c:a8:e1:7c:
         76:2c:bd:52:22:a8:35:fa:13:c7:01:13:c8:05:26:c0:3f:3b:
         5d:96:c8:9f:b4:3e:32:69:c3:c8:70:d5:88:25:86:b6:a3:b0:
         48:2b:2d:db:88:0c:df:5e:80:89:50:73:d8:cc:86:29:87:dd:
         47:1f:64:94:49:c4:90:fe:a5:ba:53:d4:43:d0:24:46:94:be:
         db:36:20:32:9e:7a:b2:a6:a1:12:c7:6f:66:45:31:cc:23:57:
         15:6b:29:fe:df:e0:72:4e:83:25:0a:5b:c3:e1:9f:21:40:81:
         99:84:ce:92:ca:33:e6:f2:df:8f:82:99:5b:7d:2a:11:c7:79:
         2c:87:3a:48:eb:56:fe:62:96:6f:77:ee:dd:6b:3e:95:46:e1:
         bc:b7:62:4a:e9:d6:c1:00:52:3a:3a:1f:9e:36:c7:ac:75:dc:
         ee:05:35:70:16:b7:da:b9:6c:6d:ad:b9:92:3b:7d:f5:25:72:
         12:97:99:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:44:30 2026 by rpki-client