Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef3483fa-c5f8-31ef-9b49-889c2ef553b8.roa
File:                     ef3483fa-c5f8-31ef-9b49-889c2ef553b8.roa (raw, json)
Hash identifier:          eNvNvWTDdiU1HSz6UIOA+BKNKBTT3XjRTs1NPKEGAM4=
Subject key identifier:   F4:7C:7E:32:26:A7:12:5A:C4:39:8B:67:A2:50:7A:61:71:53:0E:25
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D75D549C96D42797830A0A680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef3483fa-c5f8-31ef-9b49-889c2ef553b8.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     16625
IP address blocks:        184.87.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:49:c9:6d:42:79:78:30:a0:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=bf51ba38-67a8-4ef9-a411-cf66cf9585d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:09:4b:bb:97:37:b1:96:04:e3:fe:9a:6c:9a:
                    83:36:9c:c7:e7:da:94:1c:4c:55:31:47:fc:b9:48:
                    dd:06:06:4e:f9:d0:12:47:2d:9d:ae:b7:77:94:c0:
                    64:f8:b7:b2:62:05:f3:af:76:82:ca:0b:69:a5:60:
                    6e:b2:c7:b0:40:fc:a5:27:8c:87:d8:21:fe:5d:7b:
                    c2:bc:b3:4f:31:11:9b:0b:2d:3a:e0:21:9c:6a:e5:
                    af:c8:18:c6:18:e4:0e:7a:ec:49:98:62:f2:7a:39:
                    f4:87:fb:c9:3e:64:36:a0:97:9e:e6:5e:06:a2:93:
                    fe:36:5e:63:cf:3c:cc:0e:9a:3e:88:d3:99:11:eb:
                    4d:a9:0e:5c:3f:6e:a0:bc:a3:94:e0:d5:dc:16:58:
                    ff:dd:a1:e3:8f:03:c3:f1:5b:5e:1c:45:74:5d:c8:
                    cb:fb:f5:72:ce:9d:f4:65:aa:4a:6e:6e:e1:90:84:
                    07:bc:49:a8:55:37:8a:d2:9d:05:e4:1b:e3:d6:b3:
                    35:7d:2d:c9:01:3e:b3:09:c4:f4:4c:65:79:9b:ce:
                    29:36:d8:1e:92:dc:a2:dd:ef:e7:41:9f:e4:6e:22:
                    f6:b3:04:78:98:e6:15:e4:a1:b1:2a:5f:18:73:f4:
                    d0:f3:17:61:e6:67:ac:1d:b1:ad:1b:6a:48:4a:5e:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7C:7E:32:26:A7:12:5A:C4:39:8B:67:A2:50:7A:61:71:53:0E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef3483fa-c5f8-31ef-9b49-889c2ef553b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.87.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:a6:2c:66:45:38:2b:6c:72:48:86:76:bd:d8:2b:fd:11:
         e0:48:d1:81:94:00:e1:fd:92:9a:35:93:4d:18:45:2c:fa:46:
         87:9a:e0:5a:14:11:c9:86:ab:95:56:a1:e1:86:31:b6:01:78:
         6c:ac:1c:56:7c:16:d1:18:83:50:b3:03:5c:72:9f:40:75:f8:
         c2:ce:be:bc:75:d4:25:74:65:4b:61:6c:da:95:d5:92:6c:9a:
         c9:86:24:ae:14:bf:10:42:88:35:5f:5b:77:41:63:f0:c7:26:
         5f:a5:99:3c:50:a0:78:ba:be:73:64:af:4a:43:0a:39:bb:a1:
         9b:3f:d0:24:93:ec:48:d5:a4:b2:ce:bf:9a:76:ef:f4:23:d3:
         ef:3a:d0:1a:92:21:5a:e6:79:6a:f4:1d:7d:0f:df:38:ca:94:
         fa:cb:7c:03:f2:e7:a4:5b:3f:c0:1c:9d:04:2d:e0:a8:02:d3:
         d9:92:99:35:d4:69:6f:83:ed:4c:95:91:e4:87:07:a2:8b:1c:
         93:a0:83:b3:27:da:ca:6a:c4:85:23:05:05:76:83:3f:4f:bc:
         13:f7:29:de:a3:23:f0:48:a5:58:5e:a6:65:22:f0:43:f5:3c:
         46:52:ad:91:fc:84:e8:07:64:76:76:fa:44:36:79:0e:ae:0f:
         68:d2:69:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:01 2026 by rpki-client