Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/68587886-0724-3bc4-a0f0-ac8745defcc4.roa
File:                     68587886-0724-3bc4-a0f0-ac8745defcc4.roa (raw, json)
Hash identifier:          qJAo6SarC5EfRpPtOot4o1RieTTYcjqZSPtDe03Miqw=
Subject key identifier:   50:DA:0E:32:2E:DC:3A:EF:DC:5B:E7:16:21:F3:74:9D:BC:11:3A:C3
Certificate issuer:       /CN=2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e
Certificate serial:       010D0C9F4328584E9BE515E04A2E094787154C30
Authority key identifier: 5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/68587886-0724-3bc4-a0f0-ac8745defcc4.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        172.83.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:15:e0:4a:2e:09:47:87:15:4c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=4b9fdd4e-6232-4b47-a61a-c806ed65050e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0f:5f:cb:c6:b4:f2:12:64:3f:0e:0d:60:14:
                    6a:5d:81:47:b6:5a:7f:f7:f5:fe:d2:74:12:2d:f3:
                    d0:ed:82:63:1c:cb:2c:b3:3a:e5:44:35:10:b2:57:
                    fd:c0:cd:df:e4:a9:9c:de:10:8a:5e:a7:3e:30:f7:
                    b9:a6:f9:86:81:46:dd:fa:33:4c:37:2c:c5:92:ed:
                    14:95:11:04:b3:2a:2e:61:af:fe:d1:b1:0b:5a:d1:
                    bb:d2:58:3a:b1:fd:8e:70:b4:28:6b:f6:31:7a:5f:
                    66:31:19:11:2c:5f:01:5e:5c:9b:95:1e:18:74:a7:
                    2c:56:30:5f:43:2c:17:63:6e:82:35:cf:b6:e5:e0:
                    23:0e:ec:c2:07:4a:8b:b1:a5:64:05:52:91:1c:06:
                    af:bb:f5:92:bd:ef:e6:41:43:74:30:1f:f2:5f:70:
                    0f:3c:6c:18:2a:f0:af:68:34:23:38:9a:d8:82:b3:
                    31:f8:fd:bf:4c:de:7a:f2:3b:1a:87:5a:77:57:78:
                    5f:56:2d:37:ce:49:fe:07:5e:35:f8:0c:9b:50:d6:
                    f5:84:93:63:94:85:96:1e:de:a5:d5:7e:24:9a:70:
                    f3:d4:8b:80:87:81:03:b7:51:1b:2d:b7:c9:99:87:
                    96:87:0e:34:b1:16:df:d0:72:b8:80:24:98:1d:fb:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DA:0E:32:2E:DC:3A:EF:DC:5B:E7:16:21:F3:74:9D:BC:11:3A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/68587886-0724-3bc4-a0f0-ac8745defcc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.crl

            X509v3 Authority Key Identifier:
                keyid:5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ad:cb:03:46:e4:48:2e:84:38:46:a8:89:91:70:fc:5b:69:
         07:f6:04:cd:01:bb:72:de:6e:e7:97:63:6f:7e:7e:d7:25:c9:
         fe:88:2c:21:ad:ff:38:86:c1:1d:30:c9:2f:61:5d:95:34:16:
         0c:84:34:0c:0d:0f:7d:e2:33:ba:27:44:6b:e0:c0:ce:25:ce:
         7a:46:40:fd:d0:82:be:bf:31:53:66:83:18:bd:29:c4:06:01:
         b0:29:ec:ee:b5:bd:91:35:68:6e:84:3f:b4:09:e7:f7:e7:34:
         dd:f6:83:5c:cb:90:a0:f8:88:db:bb:7b:b0:8d:10:8f:27:3f:
         69:03:aa:62:8e:57:62:bc:4e:21:1d:0b:74:de:57:bd:64:28:
         2a:9e:3e:a4:86:1e:02:01:21:d7:a5:65:60:28:1e:86:d6:ae:
         54:1e:59:bf:cd:d1:b4:b3:ac:65:a7:8b:41:eb:aa:86:3e:c7:
         70:50:a9:78:bd:9f:d8:84:02:27:d4:d7:61:01:f6:63:4e:f1:
         72:5e:ec:8c:36:63:4b:14:c3:a6:e4:3f:9c:a4:2d:a1:e6:35:
         16:cb:9e:36:f9:ab:87:13:96:8e:f9:51:51:b7:8b:f1:19:90:
         8c:b4:b1:06:77:6a:81:a8:02:6b:a2:f6:88:86:94:c2:11:4b:
         4f:23:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:38:58 2026 by rpki-client