Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5e5970c0-f1b7-3996-b82b-51c865473a6f.roa
File:                     5e5970c0-f1b7-3996-b82b-51c865473a6f.roa (raw, json)
Hash identifier:          00iVtISqZVX8PRrWBmYWQzxefhwjKowFviI2/PrC1e4=
Subject key identifier:   EE:9F:36:7C:F9:D9:FB:55:64:7A:38:B1:D9:93:28:24:F2:03:51:B4
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584F71EDBB604D5EAE37D025D640
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5e5970c0-f1b7-3996-b82b-51c865473a6f.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     5769
IP address blocks:        199.7.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:bb:60:4d:5e:ae:37:d0:25:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=384ed9aa-6314-4f99-9db7-e20fd8ac9580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:d5:da:4e:32:cc:57:5d:b8:14:71:4e:75:
                    ca:53:a1:eb:00:0c:ae:80:d0:2e:f2:29:27:82:ea:
                    3d:dc:77:56:9d:71:86:65:75:c1:71:bf:fc:3d:3b:
                    74:f6:d5:bc:b3:74:31:05:02:99:01:0d:c9:d5:75:
                    6c:72:63:4c:c1:51:0e:82:1a:23:1b:e2:21:ed:3d:
                    1a:f5:96:f6:12:81:de:90:9e:c8:c4:1e:6b:06:5d:
                    24:53:15:a2:ce:09:fe:fc:35:ac:b9:c3:51:e5:f7:
                    68:a1:34:68:01:00:e5:17:45:d1:e9:41:6c:72:05:
                    b7:a3:03:e8:20:7f:c2:93:80:3d:d5:a1:cf:d9:86:
                    4a:47:77:14:0c:11:e5:4c:4a:4c:fb:79:af:d9:c0:
                    c0:b8:8b:f4:60:ba:80:c4:ca:24:7c:cf:59:d2:f1:
                    9b:f7:42:29:b8:4e:5b:6d:27:93:e8:bf:33:54:89:
                    30:b8:21:13:eb:0f:fe:9c:2d:3b:5c:4e:35:49:8e:
                    9b:21:e5:7c:fa:7f:5c:98:ed:d4:19:71:5a:3f:74:
                    ff:84:33:5d:b5:5c:2c:bc:12:de:12:79:cb:4c:71:
                    70:b1:ad:57:a7:68:b3:e3:89:7e:26:3b:a8:26:49:
                    e2:e8:3b:8c:a2:da:62:bf:39:f9:10:39:ff:38:37:
                    c3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9F:36:7C:F9:D9:FB:55:64:7A:38:B1:D9:93:28:24:F2:03:51:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5e5970c0-f1b7-3996-b82b-51c865473a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5b:99:7d:d7:27:56:83:90:9a:a5:eb:94:eb:42:16:25:b3:
         4d:1c:d4:e4:c7:0d:22:2a:ed:d2:03:89:18:84:26:b9:4f:81:
         18:95:f3:42:c2:14:65:88:69:aa:59:1b:f8:26:2f:70:a4:e7:
         f9:cf:75:4b:55:be:29:48:6e:ac:ee:98:a6:b9:95:4b:6b:29:
         af:2b:ca:66:fc:4d:bc:dd:39:fc:d4:48:4f:af:0f:62:ad:49:
         e9:9f:f4:50:95:d9:82:d0:21:00:c2:f2:e1:17:18:59:b0:a4:
         06:c1:e4:68:83:e0:5e:cf:f1:90:7e:af:0f:8a:f8:91:eb:12:
         38:5e:42:65:21:81:44:68:2d:c5:a0:7d:1f:12:48:e3:25:00:
         7f:d0:05:37:1e:53:fc:eb:9c:6b:e8:8d:ad:d0:d7:b2:ac:88:
         a5:8f:d4:49:bb:67:ae:57:3f:dd:73:61:f2:bc:41:a9:81:a5:
         88:4f:0f:76:82:cf:41:bd:ce:72:84:58:49:0e:ab:5e:ac:3b:
         20:10:57:6d:0e:01:38:e0:a0:af:bb:68:05:cb:34:69:0b:4d:
         8a:6b:6d:e2:ee:bd:1d:b7:83:66:e4:61:51:b6:3c:4e:f8:88:
         77:0d:57:24:6a:10:ba:db:ca:81:26:c8:a5:6e:01:58:29:e5:
         43:76:8f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:53:09 2026 by rpki-client