Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/d91fb9aa-ca33-3d9a-a6e8-42d1d0e74402.roa
File:                     d91fb9aa-ca33-3d9a-a6e8-42d1d0e74402.roa (raw, json)
Hash identifier:          BHY+av7scV3lZGof5GODDfmMqq3lK9OsgD02OTMjHf8=
Subject key identifier:   FD:EF:58:86:D0:1C:FB:68:FC:0B:A7:3E:F9:0E:31:8A:28:9B:50:24
Certificate issuer:       /CN=30ed4af0-ad84-44f1-84da-cd9b1c667340
Certificate serial:       010D0C9F4328584EA7884B7F0E64F75923060E80
Authority key identifier: 7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/d91fb9aa-ca33-3d9a-a6e8-42d1d0e74402.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32707
IP address blocks:        216.8.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:4b:7f:0e:64:f7:59:23:06:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30ed4af0-ad84-44f1-84da-cd9b1c667340
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a2c4ca58-b9c5-45ab-b531-0b335922308a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:78:84:99:1f:7b:0f:43:a4:01:d8:39:64:
                    6a:e3:66:18:a0:d6:f2:5c:cf:61:13:c0:fd:7f:53:
                    d2:d5:f9:cf:9a:16:34:59:65:51:e9:3e:06:5c:d6:
                    2c:87:07:72:af:ba:14:a8:7d:eb:d3:0a:96:91:75:
                    79:27:61:7a:d7:9a:33:7e:0e:e5:cd:d5:58:67:ff:
                    38:fb:60:6f:22:1a:6e:8f:06:44:b4:26:18:4d:e3:
                    cc:d0:3f:4b:90:87:9f:b2:6b:ef:b2:8c:3d:40:95:
                    e1:aa:e9:2e:6c:f9:2e:cf:22:85:42:23:46:39:f8:
                    35:3b:86:25:03:be:56:b3:cc:d0:41:ab:89:c9:2b:
                    f6:25:67:ea:92:69:84:11:f1:36:fa:92:33:fa:ee:
                    d5:e6:d5:59:7f:e3:bb:bd:21:c9:ee:3f:00:35:d2:
                    6e:08:6d:28:0c:3c:8b:cf:03:2d:cf:cf:b2:38:f5:
                    cb:86:76:20:a7:01:b7:a2:c3:0f:fc:0d:e8:bd:92:
                    3c:44:64:92:2a:58:5e:a3:e2:27:9a:51:eb:e9:95:
                    67:6b:99:12:0c:58:a9:f2:e3:4c:a7:48:ae:29:89:
                    67:48:50:e5:2e:6f:d2:bf:29:21:d1:ed:44:f1:59:
                    8b:d7:29:62:6c:88:fd:14:af:23:43:f2:bd:31:04:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:58:86:D0:1C:FB:68:FC:0B:A7:3E:F9:0E:31:8A:28:9B:50:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/d91fb9aa-ca33-3d9a-a6e8-42d1d0e74402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl

            X509v3 Authority Key Identifier:
                keyid:7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:0b:d2:99:eb:90:13:dc:e2:49:87:d0:05:28:65:e2:43:84:
         43:45:5f:bb:d0:b1:24:cc:19:6e:b5:78:95:21:ed:d1:26:fa:
         5d:f1:78:f2:b5:fe:39:6f:d9:18:0b:af:38:e1:8e:b2:2d:c5:
         0e:68:c8:0d:0b:46:c4:1c:6b:ec:2a:fe:46:b9:d4:d4:8d:cb:
         01:d3:23:78:7e:d0:80:ad:4a:ec:a0:15:82:52:6f:7b:e6:34:
         7c:24:2d:75:1f:c5:e5:04:66:64:10:a1:e2:c3:d7:99:70:4c:
         47:28:2a:18:0c:bc:62:d3:09:be:2a:cf:52:29:d4:c1:75:f2:
         2d:14:09:70:d4:24:b1:19:d6:d9:66:87:a7:75:00:31:01:8f:
         94:6b:3c:e7:61:ac:b0:e9:d5:fb:2e:f7:87:23:54:59:47:0a:
         30:00:a9:06:3a:cc:af:af:d6:56:9c:6e:c0:8b:93:28:a8:50:
         4f:78:d6:39:48:ca:db:64:1f:7a:ef:ad:b8:57:d6:33:6a:b6:
         7f:75:c0:8c:6e:96:82:d2:4b:dc:61:a2:14:24:5a:42:bc:c8:
         95:d2:b9:de:04:47:26:92:61:3a:1c:88:89:87:b5:96:1a:d2:
         a4:24:00:70:b7:2d:3d:4f:41:13:5e:09:b6:61:52:3a:44:b5:
         44:92:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:57:57 2026 by rpki-client