Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1/1b03c9a3-600f-3deb-9b5b-188fce207da0.roa
File:                     1b03c9a3-600f-3deb-9b5b-188fce207da0.roa (raw, json)
Hash identifier:          EvSVczsjYkspueOgV0Az91ITZ1QiAoqbRd4H0Sw37/w=
Subject key identifier:   2C:93:72:41:0C:3F:62:EA:4B:BB:DE:01:A4:F0:F6:06:66:AA:98:A0
Certificate issuer:       /CN=a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1
Certificate serial:       010D0C9F4328584F32785492E4E9FB58C2648320
Authority key identifier: 48:BF:82:E0:53:5A:05:B0:5F:D6:A8:79:0A:37:44:E7:A2:55:BC:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1/1b03c9a3-600f-3deb-9b5b-188fce207da0.roa
Signing time:             Wed 16 Sep 2026 19:28:19 +0000
ROA not before:           Wed 16 Sep 2026 19:28:19 +0000
ROA not after:            Tue 15 Dec 2026 20:28:19 +0000
asID:                     20473
IP address blocks:        147.160.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1/a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1/a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:78:54:92:e4:e9:fb:58:c2:64:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1
        Validity
            Not Before: Sep 16 19:28:19 2026 GMT
            Not After : Dec 15 20:28:19 2026 GMT
        Subject: CN=6ba603c7-be04-4890-80e2-95a6b4d62247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:b5:31:95:3d:40:66:28:89:52:5c:b5:b0:
                    97:a8:12:a8:59:19:90:84:04:85:8d:de:56:64:b9:
                    21:ac:7e:ea:e9:59:0a:01:b5:a4:2e:d4:68:de:0a:
                    2a:27:72:8d:f2:37:73:e5:71:24:3c:27:db:0c:69:
                    a7:c0:cc:58:65:b1:ed:99:8c:02:ca:25:08:89:33:
                    eb:df:ba:b5:59:59:05:e6:aa:a3:20:ac:41:73:fd:
                    09:11:11:a5:90:0e:50:14:af:c3:9e:45:88:88:55:
                    53:d2:0b:01:fb:f1:5a:dc:6d:15:9e:8c:b6:25:b7:
                    64:e7:b0:0e:89:22:cb:4f:55:00:e0:5e:2f:5e:31:
                    dc:d3:39:03:ee:56:48:23:20:c8:c1:14:5f:91:17:
                    6b:dd:7b:93:ff:84:ec:5a:3f:72:10:ce:8f:de:34:
                    6b:21:a5:04:80:20:b5:fe:ca:76:cb:83:b7:1b:26:
                    32:54:c9:90:9e:98:93:48:df:e8:b6:ea:47:df:bc:
                    b0:81:ff:11:f4:db:d2:ac:ad:d1:68:ae:c2:e7:c7:
                    78:5f:10:8b:6a:3e:79:39:a7:11:02:2d:95:aa:c9:
                    21:30:6d:f4:06:ec:79:3f:99:7c:76:fd:0c:06:87:
                    b4:60:c8:10:6c:47:04:5e:a3:12:49:b3:83:3e:06:
                    1a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:93:72:41:0C:3F:62:EA:4B:BB:DE:01:A4:F0:F6:06:66:AA:98:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1/1b03c9a3-600f-3deb-9b5b-188fce207da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1/a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1.crl

            X509v3 Authority Key Identifier:
                keyid:48:BF:82:E0:53:5A:05:B0:5F:D6:A8:79:0A:37:44:E7:A2:55:BC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a5fdffd9-0ba6-44ea-bc6d-4cae85abdae1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:57:a4:1e:2c:e8:a0:de:fc:03:d8:59:f1:20:a1:27:c0:2a:
         4f:1e:dc:d1:45:09:f6:68:a6:21:5a:bc:4e:d6:47:45:49:19:
         22:22:f4:2f:14:74:e5:cf:8c:4b:bf:a4:83:26:73:46:55:12:
         8d:b0:3c:79:8b:09:f6:ee:5c:88:ad:3f:86:1d:11:7d:b5:45:
         e2:ee:e4:ef:85:7e:d3:79:2f:b5:12:82:be:33:03:aa:c8:60:
         48:0e:63:26:a7:23:af:b3:82:f3:35:c5:51:14:35:8f:b7:2c:
         75:4e:d0:a4:0e:b2:23:32:d1:2c:64:d4:d5:8b:5e:e1:cc:92:
         e9:38:e2:5d:8b:16:23:95:be:62:3f:57:ab:b7:7b:1e:e0:ef:
         77:38:d2:5d:55:a4:ea:96:22:c6:fd:84:8b:d8:48:e2:90:79:
         fc:af:5d:ec:68:53:a7:1e:4d:63:82:67:7c:2a:fa:73:ed:41:
         25:82:3c:69:e1:cd:ec:61:c7:67:7d:fe:c1:a3:52:59:46:8a:
         8e:28:fc:26:1a:76:62:a0:6c:cc:ca:c6:bb:03:5b:83:1c:7e:
         39:5d:fe:a0:fb:e4:b2:c3:47:1a:a5:73:ed:6e:0e:7e:4a:df:
         96:1c:03:a7:d8:86:36:2e:ef:6b:99:6b:aa:03:d1:b6:e2:40:
         52:ad:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:24 2026 by rpki-client