Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6bc1367-db88-3f44-bce2-61081d6ed3b3.roa
File:                     e6bc1367-db88-3f44-bce2-61081d6ed3b3.roa (raw, json)
Hash identifier:          9yHw231EIib5zMqibdWadkoD2p1b13AdaBvYy+cw1yI=
Subject key identifier:   50:20:A2:20:9B:8D:EC:60:70:B4:B2:6C:C6:9A:DF:1B:10:D5:C1:E1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA788A7A74B7666EAAF4B1700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6bc1367-db88-3f44-bce2-61081d6ed3b3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63949
IP address blocks:        170.187.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:a7:a7:4b:76:66:ea:af:4b:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=019f4d74-6d69-47f4-ab6d-ff26e81c937c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:2c:97:31:a1:3b:50:56:a0:ae:21:b1:39:
                    b8:f0:dd:da:c9:b6:48:32:bc:17:44:4a:7d:20:86:
                    2a:2c:64:a6:fa:4c:3e:a3:0c:34:58:2d:66:4e:4b:
                    7c:c8:95:05:5f:ba:b2:b5:42:b7:3f:95:39:fc:09:
                    d6:1e:0a:be:0c:8c:4f:39:c5:43:be:46:18:77:fd:
                    98:0d:2e:a2:b0:6c:34:f3:18:fd:bb:6d:be:2b:f6:
                    79:82:52:95:ca:e8:fe:da:18:4f:69:76:b7:53:ac:
                    0a:eb:05:50:71:59:d2:85:9f:d0:d9:69:9a:be:52:
                    42:8d:8b:63:01:5b:0a:56:52:b8:0d:b1:b6:e7:28:
                    93:d6:a9:b1:08:59:4c:5f:b6:31:82:a7:3e:de:4c:
                    9b:66:2e:e4:49:53:cc:9a:f3:90:44:a3:40:26:51:
                    73:b3:09:80:6a:6d:99:66:ac:5f:44:3b:c4:3f:86:
                    86:88:93:57:d8:0c:b0:fa:76:44:5c:ec:41:b2:c2:
                    23:f3:a9:db:5a:cc:b0:17:c9:32:e5:ee:58:04:77:
                    7f:9a:ef:7a:49:5c:26:b9:fe:c2:5c:48:2d:59:b9:
                    26:5f:d0:42:5c:dd:66:16:2e:98:1d:70:af:ef:fe:
                    9b:d5:5d:9d:7e:90:96:22:e0:a9:11:c8:02:a9:56:
                    ba:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:20:A2:20:9B:8D:EC:60:70:B4:B2:6C:C6:9A:DF:1B:10:D5:C1:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6bc1367-db88-3f44-bce2-61081d6ed3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.187.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:79:46:d9:e0:97:ac:59:58:66:f6:d5:a3:68:43:31:2f:46:
         06:c7:51:ba:2e:48:e7:5e:a2:72:29:dd:ac:ea:4b:21:39:53:
         50:8c:a4:aa:88:4b:ba:e2:59:2c:14:0a:b6:a3:45:7c:9d:a7:
         f8:20:a5:9c:57:b4:18:ba:77:d6:31:4c:e3:9d:80:fd:a0:27:
         4c:d0:01:9b:c4:55:c9:5a:68:22:b7:f9:83:da:f6:00:d0:3f:
         81:3f:82:17:f6:98:59:82:48:19:f0:4a:bc:be:ef:bc:8f:69:
         0a:df:b3:3c:d2:14:61:22:01:40:c4:3b:fe:01:d2:2f:69:e8:
         68:fc:d9:ba:30:d8:4d:1c:fc:d7:dd:89:46:aa:1a:b3:4e:11:
         ab:06:b5:36:82:2a:67:1a:6f:c9:ac:4e:aa:78:60:25:3f:cb:
         bc:a5:4f:32:03:2c:ef:f2:7c:d4:df:a8:c0:22:1d:19:2b:14:
         78:9f:ab:12:0e:43:b0:59:a5:15:74:16:5f:c4:90:7b:ed:bb:
         b6:7a:99:2d:7b:ea:38:8c:ab:78:53:9d:7f:62:12:f4:3c:04:
         c6:ff:94:4e:36:b9:99:25:64:c1:d7:3a:04:21:9d:e7:03:b0:
         77:ef:45:8d:77:e2:18:8a:d7:2b:a6:aa:43:89:e7:2f:1a:c7:
         d8:b2:a7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:23 2026 by rpki-client