Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/9f5bba50-62bf-3c59-95c8-6aaee8d1e73c.roa
File:                     9f5bba50-62bf-3c59-95c8-6aaee8d1e73c.roa (raw, json)
Hash identifier:          d5x9PZ5nRN/yqtSMegzZJgwl9eiXGLTRrLif+GhUgCc=
Subject key identifier:   71:79:93:8D:CF:F6:78:65:02:A8:64:F5:FC:1A:2B:B0:3D:28:30:3D
Certificate issuer:       /CN=c6dce4dd-aa4a-4077-aa50-8e935d660edc
Certificate serial:       010D0C9F4328584EA788C1A480BB1293133D8500
Authority key identifier: E0:47:A7:1C:8B:EF:3B:F3:70:6B:6D:40:6B:ED:03:01:E9:5F:D3:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/9f5bba50-62bf-3c59-95c8-6aaee8d1e73c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46592
IP address blocks:        170.199.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c1:a4:80:bb:12:93:13:3d:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6dce4dd-aa4a-4077-aa50-8e935d660edc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3877a6d7-f53b-4f6b-9055-906dc359f788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:45:47:04:58:d9:1f:08:94:d6:6a:f0:a5:17:
                    77:f5:54:80:c0:e8:e4:2f:19:f9:d0:ad:4e:1b:22:
                    ff:cb:14:4b:b2:44:b8:06:7e:d8:85:bf:6c:70:63:
                    3b:74:63:77:8d:28:6e:2c:fd:b7:90:10:00:78:3d:
                    cf:36:70:a2:b5:ac:66:7f:c4:73:11:a1:4f:31:11:
                    ff:80:81:e5:22:47:ad:22:6f:39:dd:96:84:1d:13:
                    2d:f2:9d:f4:d3:b5:20:17:60:c1:80:be:d1:b8:01:
                    2d:3c:d1:23:e0:e7:e2:65:ca:16:6d:60:d5:24:e0:
                    b0:49:ec:c4:8a:88:ad:a6:f0:44:29:5a:76:db:7d:
                    28:5a:9f:42:ce:14:dd:ea:a6:78:a0:96:fe:3d:a6:
                    ad:5f:60:be:ec:4d:6a:18:01:17:b4:4b:67:de:32:
                    36:41:ea:c1:d6:a5:5d:30:7b:d0:6b:d8:50:12:e0:
                    f1:e3:05:e6:2e:55:fb:4a:25:9f:97:72:64:d3:ca:
                    9e:32:94:b0:27:b1:2b:1b:28:be:91:6b:ca:b2:a7:
                    40:d8:68:44:fd:2a:4e:a6:a6:8f:f9:10:c1:0a:30:
                    8a:7b:4e:d0:55:f6:50:c0:6a:d3:86:07:c9:6f:88:
                    a2:3b:2b:79:05:eb:e5:c1:28:3e:64:62:45:f8:f5:
                    5e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:79:93:8D:CF:F6:78:65:02:A8:64:F5:FC:1A:2B:B0:3D:28:30:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/9f5bba50-62bf-3c59-95c8-6aaee8d1e73c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.crl

            X509v3 Authority Key Identifier:
                keyid:E0:47:A7:1C:8B:EF:3B:F3:70:6B:6D:40:6B:ED:03:01:E9:5F:D3:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:88:4d:a4:90:ee:81:7b:6e:dd:93:94:b2:02:26:ad:80:25:
         89:6b:8f:d4:96:6d:cd:74:b6:9d:01:a5:14:1d:98:8f:b8:b4:
         4b:12:78:6c:d7:8b:4d:2e:94:ed:98:46:29:e3:7a:ad:af:8a:
         80:4e:8a:a2:3d:57:71:77:81:e8:5c:ca:6d:cd:47:94:8e:64:
         3e:02:43:97:63:5d:b1:84:5b:da:32:99:89:9c:b0:ff:b5:91:
         6b:94:69:ef:e6:27:04:70:aa:f5:3b:b7:c7:22:07:40:9f:b8:
         71:b1:22:76:8a:03:39:72:09:4a:12:c3:e7:68:88:73:2f:f2:
         e0:cb:98:94:75:9e:ea:c6:1a:80:0a:9b:20:3e:ff:7d:1f:fd:
         80:a6:7e:68:fb:34:ef:74:77:d2:bc:c8:f8:3f:5d:87:b5:7e:
         c8:49:6c:b6:46:d9:41:9c:c6:22:59:13:b0:d2:a2:7c:6f:b7:
         3b:9a:6f:ab:99:4a:a8:16:be:8d:ec:61:ad:0b:72:8a:63:6a:
         15:7a:b7:0d:83:e0:05:bf:99:91:03:0a:00:01:f8:81:09:6f:
         bd:0b:d3:67:81:fd:e8:20:62:67:93:0d:d6:e4:75:68:55:c3:
         3a:77:24:18:bf:c3:c0:f3:be:1c:5f:30:66:c6:a4:8f:13:0e:
         2c:fd:19:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:42:40 2026 by rpki-client