Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/bd2eb3af-948e-3005-ae78-90f34d4f5889.roa
File:                     bd2eb3af-948e-3005-ae78-90f34d4f5889.roa (raw, json)
Hash identifier:          WQ4k8HFZm/RpV0kf+31f4baXX7SSi+kMv0y/yKEjglo=
Subject key identifier:   B5:51:B4:BC:BC:8A:08:84:CA:7C:A4:87:29:DA:39:D1:86:6D:3B:58
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F4328584D5B4FAD5BCE42C7BE513F9C00
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/bd2eb3af-948e-3005-ae78-90f34d4f5889.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22709
IP address blocks:        64.181.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ad:5b:ce:42:c7:be:51:3f:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=c8817469-3aa5-498d-8104-0b14a17a6d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:31:5e:43:c8:95:81:37:53:2a:6c:0b:5e:
                    b2:dd:76:67:0c:32:bf:e2:84:09:25:70:c6:5a:79:
                    7a:c8:c1:85:23:0e:6b:69:d1:d6:eb:fb:b4:69:12:
                    12:e0:e1:9e:0e:3e:74:9e:c2:3e:76:d9:d1:f3:be:
                    69:d5:f0:74:d4:ed:8c:36:48:93:3c:72:d0:a2:2b:
                    d3:6f:4a:42:ac:f9:27:bd:43:31:14:ac:18:95:b5:
                    72:c4:f1:75:4e:e0:c1:71:e6:6d:fe:cd:fe:f6:2c:
                    3b:fb:0d:4a:71:1b:9d:e2:64:95:ac:89:2d:41:21:
                    76:97:28:a9:d0:f6:45:83:d0:05:fe:7f:18:86:09:
                    76:14:f0:da:f1:7e:c5:5c:ec:9c:6c:05:ad:df:a1:
                    f2:53:43:6c:a1:56:39:6f:bc:38:53:a4:23:32:d0:
                    1c:f6:97:74:0d:bb:dd:d7:da:66:7d:d8:4e:4d:92:
                    31:4e:19:7f:5d:bd:47:69:2b:be:48:e7:9c:ff:d6:
                    c1:1e:24:7b:a0:bf:78:e8:35:92:89:82:17:ef:fd:
                    1d:a0:1b:43:62:d1:27:b6:fc:08:61:d5:0d:d2:59:
                    3d:85:0c:15:02:5c:18:55:1f:d0:cb:b0:85:11:59:
                    d8:f7:0e:37:05:43:92:ee:a1:55:cc:fe:48:53:31:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:51:B4:BC:BC:8A:08:84:CA:7C:A4:87:29:DA:39:D1:86:6D:3B:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/bd2eb3af-948e-3005-ae78-90f34d4f5889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.181.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:34:ac:0d:72:b8:c5:4f:4f:02:2e:54:4b:e9:df:cb:81:
         6f:84:04:7e:7e:7c:81:fb:04:8e:95:46:25:9c:6f:40:0a:08:
         ff:25:49:ce:b0:4b:7f:f0:0e:35:a8:9a:a5:28:83:34:bf:4b:
         98:bf:f5:3f:ca:d8:84:aa:34:46:43:7c:ba:f7:f4:60:8e:2a:
         5e:64:c9:b6:9f:d2:24:86:e3:1e:ce:86:42:41:f9:b4:ff:1d:
         5a:43:bf:6f:80:60:62:d2:7c:34:6d:cf:1d:69:f1:ba:8c:02:
         d7:6b:a4:99:c4:84:76:71:98:7f:4c:37:2c:ee:3d:be:d7:80:
         47:e3:12:78:99:32:e8:87:03:56:f5:bc:66:ae:3c:3b:e4:0b:
         41:5a:94:d3:97:3f:3b:54:c9:eb:6e:e4:36:c3:4f:ac:a4:8a:
         5c:4d:2f:72:91:6c:30:cb:1e:ff:8a:c3:24:57:a1:42:5d:f0:
         6f:3e:15:a9:51:c5:14:b0:d1:2a:04:4e:c7:32:ff:d1:e6:ed:
         53:74:8d:f9:df:f9:e9:6a:6f:40:6b:5b:22:c8:e9:d7:27:84:
         ed:d7:ba:88:85:09:51:10:cf:8d:37:26:dd:d3:55:88:69:dd:
         f0:26:94:88:24:96:5f:2d:df:04:43:1a:16:63:54:d7:7e:32:
         7d:39:12:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:08 2026 by rpki-client