Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d/2cdf970a-7f2d-3222-9c55-7f6ab531aee2.roa
File:                     2cdf970a-7f2d-3222-9c55-7f6ab531aee2.roa (raw, json)
Hash identifier:          tlAWkqDB8F2E2b/Gs2sTZHEjsYwUtRc5WgXUlnRl9L0=
Subject key identifier:   95:38:7B:77:A9:EC:C3:A5:3D:3A:A8:9E:44:29:00:A2:07:51:20:25
Certificate issuer:       /CN=6113eb89-bf69-4116-bfc3-0595a44ef76d
Certificate serial:       010D0C9F4328584EE657422C87FCFD441769FE00
Authority key identifier: CF:E9:ED:BE:3C:69:56:BF:C7:48:C5:56:9E:93:D7:74:39:89:C1:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d/2cdf970a-7f2d-3222-9c55-7f6ab531aee2.roa
Signing time:             Thu 20 Aug 2026 13:00:12 +0000
ROA not before:           Thu 20 Aug 2026 13:00:12 +0000
ROA not after:            Wed 18 Nov 2026 14:00:12 +0000
asID:                     399133
IP address blocks:        169.197.129.0/24 maxlen: 24
                          2602:fb9c::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d/6113eb89-bf69-4116-bfc3-0595a44ef76d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d/6113eb89-bf69-4116-bfc3-0595a44ef76d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:57:42:2c:87:fc:fd:44:17:69:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6113eb89-bf69-4116-bfc3-0595a44ef76d
        Validity
            Not Before: Aug 20 13:00:12 2026 GMT
            Not After : Nov 18 14:00:12 2026 GMT
        Subject: CN=69f19c16-7ebb-4461-9624-90d8588b4193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:ba:16:6f:68:a2:28:53:dc:a4:d5:0a:4a:
                    bf:0b:83:2e:09:0f:03:92:62:3d:a4:fb:41:c7:ab:
                    8d:6d:76:74:ae:61:88:16:76:ad:06:75:91:0b:34:
                    d5:b4:16:50:04:5a:ac:0e:43:2f:f4:73:bc:cf:a9:
                    0d:d6:5c:c4:bd:0a:3d:39:4d:40:59:3c:bd:28:c9:
                    6e:ab:c6:fe:ec:0d:3b:8f:74:59:ab:49:94:7c:f2:
                    3c:9f:b5:36:86:e8:23:e6:20:1a:c9:59:0b:fc:29:
                    09:1d:8c:f1:99:37:ce:c8:49:de:b7:a2:06:93:ee:
                    ba:1d:63:d5:52:30:69:f6:a1:01:44:cc:48:50:42:
                    e3:db:5d:e5:94:37:40:98:5e:68:5e:15:d5:2d:b5:
                    20:26:9a:b1:4d:9f:e7:12:9c:68:3f:5b:32:d3:5c:
                    fb:41:28:f4:36:43:37:7f:13:57:f5:1d:a5:8a:5c:
                    a1:81:da:37:de:d6:4a:2b:35:35:68:01:d7:95:ba:
                    b3:63:86:ac:2f:fa:a0:8c:75:61:ea:dd:30:7d:dd:
                    58:b7:5b:9d:a8:38:aa:44:0e:b9:e6:c7:90:22:46:
                    e3:35:f4:d2:dd:d7:04:8a:9b:ca:ae:41:56:cc:f8:
                    d2:ae:22:b4:ea:27:b8:70:f7:13:a3:0f:bb:06:a6:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:38:7B:77:A9:EC:C3:A5:3D:3A:A8:9E:44:29:00:A2:07:51:20:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d/2cdf970a-7f2d-3222-9c55-7f6ab531aee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d/6113eb89-bf69-4116-bfc3-0595a44ef76d.crl

            X509v3 Authority Key Identifier:
                keyid:CF:E9:ED:BE:3C:69:56:BF:C7:48:C5:56:9E:93:D7:74:39:89:C1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6113eb89-bf69-4116-bfc3-0595a44ef76d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.129.0/24
                IPv6:
                  2602:fb9c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:96:a0:e9:d6:70:fc:55:4b:ec:7d:98:64:cd:77:0c:9a:d9:
         57:f8:31:30:3e:77:2a:72:77:6d:25:67:3e:55:27:d3:23:7c:
         fc:41:6b:dc:6d:09:d5:ba:14:58:f4:9d:84:76:5f:03:f2:2f:
         1e:fa:04:8c:f7:b0:ed:9c:c5:2f:4b:5a:66:b2:e1:a4:3b:60:
         d4:63:2f:3f:2e:74:18:d1:f6:08:8b:3d:93:77:cd:36:5d:d1:
         06:9d:1a:e8:51:3f:dd:4c:2e:bb:c2:c8:58:80:77:90:db:61:
         84:e9:db:b7:c9:47:b1:a2:f4:fb:76:5b:43:6c:9c:7b:11:f3:
         b4:b7:49:c0:e6:a4:c0:e8:95:f9:d8:a8:02:96:c5:53:ca:41:
         3f:d8:8d:23:3b:33:6c:8e:32:52:7d:49:7a:59:33:93:2d:b7:
         06:40:e3:f7:f0:67:fd:45:05:7c:29:dc:8d:fd:8c:17:7b:06:
         43:00:77:78:cb:78:fc:48:78:09:65:f7:51:e4:70:c4:55:60:
         10:c7:f8:bf:73:e8:2f:83:c5:65:83:2d:db:6d:e5:85:c8:94:
         01:d1:73:c8:8f:9c:dd:aa:f2:5b:03:66:dd:0e:20:38:69:ce:
         65:7b:dd:1b:b6:05:b1:9a:15:15:b1:e6:30:ed:f6:8e:3e:5e:
         62:e4:5f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:24:43 2026 by rpki-client