Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/5d7f18c5-ca41-3ee7-9b57-4cf350006f0b.roa
File:                     5d7f18c5-ca41-3ee7-9b57-4cf350006f0b.roa (raw, json)
Hash identifier:          aQSPPYsU/+RmmLk293ZByVlpBPZm0jsCne0sMHFXOc4=
Subject key identifier:   F3:A4:44:0B:39:DB:CF:7F:BF:9F:AA:DD:96:10:98:2C:4B:D7:98:C2
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584F46A7DF9BA5AFB330FF875C00
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/5d7f18c5-ca41-3ee7-9b57-4cf350006f0b.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     6922
IP address blocks:        204.158.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:df:9b:a5:af:b3:30:ff:87:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=05f32d81-2b2c-4bc7-8e7f-5fbc1de719b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:46:35:ef:51:33:e3:a3:d1:de:da:95:3b:
                    b2:43:02:81:cf:31:3e:64:f1:e5:9a:88:ce:1c:61:
                    3e:66:6f:7f:6c:d8:49:63:7e:8f:ff:05:87:2c:13:
                    f6:88:a1:40:86:e0:a1:f9:ae:80:d7:18:85:08:06:
                    6f:30:f5:af:44:a9:d1:bd:63:1a:2a:3d:71:ad:fc:
                    d9:68:25:51:2c:a4:3b:1a:d5:47:8f:7a:56:7e:a2:
                    e1:e3:73:0a:6c:d0:a9:b8:59:3c:f2:c0:ed:36:13:
                    86:bc:03:4d:94:61:38:00:b1:a6:19:5f:0b:f3:f2:
                    11:70:09:de:f8:8c:78:74:c1:9c:9d:9f:0e:bf:4c:
                    c2:a3:61:52:c2:33:0c:46:23:1e:e6:5a:25:81:d3:
                    b9:28:68:65:d3:88:28:b3:f9:85:69:db:d2:3c:28:
                    d3:3b:55:a0:43:87:17:c1:3a:64:cb:4b:f6:26:37:
                    fe:e5:b0:c6:c3:e6:c4:1c:60:6d:01:b2:87:50:39:
                    ab:1f:cc:89:ea:17:87:35:8c:17:c5:0e:17:c0:dc:
                    3d:2a:53:ca:9e:ac:b0:4f:27:13:34:17:85:df:17:
                    ef:6b:e8:d6:56:4a:64:04:a8:41:d2:dd:f0:74:de:
                    20:47:c8:17:c2:97:d2:5b:00:75:27:7e:19:c1:b6:
                    2e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A4:44:0B:39:DB:CF:7F:BF:9F:AA:DD:96:10:98:2C:4B:D7:98:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/5d7f18c5-ca41-3ee7-9b57-4cf350006f0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.158.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:27:20:77:22:42:3e:61:8d:42:51:ce:36:df:a2:95:6d:7d:
         48:25:c6:c3:0e:1b:77:ce:12:30:90:31:14:d4:87:df:af:41:
         76:ff:56:0f:f4:97:d1:87:97:c2:67:13:99:a6:3d:22:a6:6b:
         f7:fa:1c:18:ad:8b:20:c9:b2:6a:c4:5a:48:c1:98:e1:16:de:
         18:6e:5d:56:f5:13:66:b4:fb:f8:82:b0:dc:a6:45:8a:40:dd:
         d4:d9:de:1c:78:22:30:66:4d:0c:74:04:67:2c:48:b0:7c:65:
         76:27:e0:44:4f:7b:b9:f8:af:b3:fe:49:59:72:de:b1:b3:54:
         7c:85:ff:2d:d1:3a:c8:39:f1:a0:27:d4:a7:1a:3f:f2:a5:99:
         bf:dd:38:82:10:6f:78:ac:1b:bc:9e:21:41:50:79:c7:3c:f8:
         40:70:24:b8:df:66:c4:1f:10:e9:3f:11:76:bf:09:a5:10:f3:
         22:85:b5:bb:dc:94:6b:b1:46:44:b4:ae:70:23:ba:f7:0b:69:
         5c:4f:31:29:2b:56:f7:db:c9:bf:b1:fc:ef:79:ca:22:18:31:
         91:3b:7f:cd:74:58:60:1d:50:02:4c:9c:98:9a:67:c0:16:25:
         c7:c7:ef:5d:05:09:4c:fd:45:e3:de:d9:47:07:f0:be:dc:ac:
         35:4c:1d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:21:35 2026 by rpki-client