Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a84377c0-47b2-30a6-9556-8f63fc2eb179.roa
File:                     a84377c0-47b2-30a6-9556-8f63fc2eb179.roa (raw, json)
Hash identifier:          SMtxbPWR5knCry11MZ+0LtQR2CZlL/CPuNrORfCtbb0=
Subject key identifier:   9A:95:1E:43:F0:65:2D:A3:40:0A:70:1B:31:72:1D:BD:38:B2:17:22
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7870804BE3E6E20C03AB4C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a84377c0-47b2-30a6-9556-8f63fc2eb179.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16625
IP address blocks:        184.30.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:08:04:be:3e:6e:20:c0:3a:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b8267f49-0bec-448e-a2c1-f17651531404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:cc:c2:c4:d9:2d:56:00:c3:fe:f6:bc:38:
                    4b:f1:e1:9a:ca:37:21:32:b9:1d:db:55:8a:44:45:
                    1a:5d:81:03:df:09:ae:fb:04:3a:0b:34:3a:d9:46:
                    48:c0:ea:93:74:06:cd:0c:95:ba:09:58:17:74:17:
                    98:75:21:07:8c:e0:ae:98:d9:6f:71:89:cf:65:ce:
                    52:40:8b:bb:1b:3f:60:81:92:20:43:32:b8:99:7e:
                    97:6d:55:12:b1:a4:71:c5:43:53:ac:38:46:92:fc:
                    b2:c0:68:48:6e:f3:8f:52:62:20:22:cb:47:67:33:
                    e6:db:c5:70:ba:72:68:84:d0:0c:b2:c8:52:55:85:
                    19:7b:dd:8e:84:dd:d5:ff:7d:6d:cb:4e:33:c9:ec:
                    cb:6f:0a:75:24:84:1b:72:5d:00:c4:5d:d2:86:8a:
                    c9:b8:fe:6c:69:89:23:39:88:6d:ce:a2:74:2c:e8:
                    8f:fb:ad:44:97:96:41:33:4c:93:26:ed:51:a7:09:
                    87:be:e5:85:4e:f6:69:9c:63:f7:20:80:57:90:11:
                    b0:59:16:a6:42:a5:93:a0:b4:97:3e:a9:61:2c:4a:
                    89:e9:15:13:15:ca:fc:49:e1:65:76:a1:d2:fe:53:
                    66:c3:f8:44:17:06:45:0e:93:4f:8c:75:10:6c:55:
                    1a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:95:1E:43:F0:65:2D:A3:40:0A:70:1B:31:72:1D:BD:38:B2:17:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a84377c0-47b2-30a6-9556-8f63fc2eb179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.30.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b1:56:4a:fe:b4:28:68:bb:60:20:f5:22:b1:14:e6:8b:7d:
         b3:d6:eb:21:81:ea:0e:94:d9:6a:dc:5f:2a:2e:6c:ac:96:37:
         e1:d3:8e:e9:24:d7:1b:bb:ad:bb:42:01:29:0a:4b:5a:d3:0e:
         9a:b5:92:7b:21:9d:a3:64:4a:f9:86:18:d0:4d:11:8c:a4:53:
         df:d5:36:58:ae:c9:e2:b3:40:a7:41:cf:f6:87:f3:57:ec:28:
         95:d0:ad:9d:be:85:a9:9e:b1:2f:63:10:fb:16:41:03:59:80:
         fb:38:45:7b:f8:bd:f0:57:1f:11:70:36:2a:8a:3b:a7:c9:75:
         99:58:0d:f2:21:50:2b:52:bb:e3:2b:a8:a7:70:fb:c4:a6:21:
         f5:53:0c:5f:00:a8:c5:96:3f:55:15:14:2c:70:a5:d6:60:c3:
         9b:54:89:e4:51:0e:23:4d:be:5b:2f:3a:f8:a8:b1:48:94:57:
         b9:8c:b5:a5:11:79:19:59:1a:cf:2c:cc:3e:7d:3b:35:00:b9:
         49:4b:da:a5:3d:0d:6d:90:ea:4b:99:a9:98:d1:cc:a7:99:87:
         d2:a7:16:0c:39:40:60:0f:bb:4d:bc:c5:35:fc:4a:e9:1c:9b:
         cf:1d:51:1f:46:a3:6f:65:10:3f:86:3a:21:79:ac:80:d4:58:
         ed:db:04:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:23:39 2026 by rpki-client