Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a222cf3-16b7-3e07-99d9-c6618d558bab.roa
File:                     0a222cf3-16b7-3e07-99d9-c6618d558bab.roa (raw, json)
Hash identifier:          fEah6g6i1rr//JUQ+pFuoTf4aB9Zryk+cuiRrOp0ihw=
Subject key identifier:   92:BE:63:DD:62:47:88:4C:54:E8:29:8F:23:4C:6A:4F:D6:2F:34:BB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584EA79AD194A4EFCBCD5BCFB680
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a222cf3-16b7-3e07-99d9-c6618d558bab.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54113
IP address blocks:        157.5.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:d1:94:a4:ef:cb:cd:5b:cf:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4c5d825c-0330-4136-b20d-65520b9adc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:6b:37:69:44:3f:29:29:8b:e3:a6:4d:26:
                    33:bd:a1:ec:93:22:d6:4a:0f:08:6c:f2:13:2f:f9:
                    85:bf:1b:1f:4d:fb:49:bd:16:c3:8a:5f:1a:b0:d2:
                    31:9f:7d:1d:69:eb:63:04:b5:99:99:a9:71:7d:38:
                    4a:a1:a4:83:1c:07:f0:85:51:ff:69:c5:64:b8:3b:
                    9f:ca:8b:0f:b0:33:ba:fe:b0:70:ff:f2:19:29:cf:
                    86:71:2c:de:76:01:4b:de:ed:8e:63:e1:64:0f:0d:
                    dd:2a:c8:3d:92:12:94:09:10:df:40:61:5b:21:e5:
                    f0:ee:5c:0a:8e:89:06:e9:dc:a3:b5:c9:8e:e9:83:
                    66:8c:bf:9c:f5:d2:46:e4:95:03:92:46:42:d3:cc:
                    85:09:54:31:8e:f7:7e:9c:0b:f8:49:67:d2:0e:db:
                    16:f4:9a:cd:e0:70:4c:89:be:c6:3b:3c:55:00:f0:
                    f8:31:e7:15:ae:7f:12:41:4d:8e:cd:73:fb:7d:46:
                    19:7e:d5:9e:de:36:00:25:f4:ba:2b:2f:f2:d5:e7:
                    95:b5:2d:39:d2:ef:01:e9:85:b6:3c:74:47:b5:23:
                    f6:57:cb:02:76:94:e1:30:a0:45:dd:10:df:37:a5:
                    b8:d5:67:f6:ed:24:4d:1f:46:23:28:5b:92:25:98:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BE:63:DD:62:47:88:4C:54:E8:29:8F:23:4C:6A:4F:D6:2F:34:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a222cf3-16b7-3e07-99d9-c6618d558bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a7:7f:d0:59:09:24:e6:33:9b:44:13:dd:f0:3b:17:b6:a0:
         6c:5d:8c:be:3a:c5:d7:31:a2:31:0b:38:88:d9:d5:7c:61:02:
         d9:85:4b:c8:c2:b1:c4:b6:1a:e6:89:f7:ae:1c:33:71:3d:ae:
         2f:34:51:5f:63:bf:dd:87:b9:b4:27:42:0c:4c:39:ce:6d:ee:
         9d:e5:0b:48:85:32:a9:74:03:fa:df:25:16:8d:df:76:f0:df:
         7f:e7:7c:42:f7:53:1f:84:85:2d:f1:d5:71:08:20:64:06:33:
         2e:8a:3b:3c:3e:4d:5b:63:16:42:a5:57:91:ff:6e:53:7c:27:
         9a:2e:92:2f:23:14:cc:c7:b0:72:9f:64:40:f8:35:7f:c9:04:
         3c:d7:82:df:13:4e:a3:18:9d:f2:cb:c6:69:83:a3:56:f3:7e:
         e8:0b:99:1b:96:9d:33:de:29:23:1e:c8:59:03:fb:57:2d:08:
         35:42:87:5d:f6:27:ec:bb:cc:89:10:35:13:d3:2c:c3:4a:86:
         9e:2d:ec:81:1c:55:d7:ab:d2:6c:c2:ed:80:12:d2:c6:2a:ce:
         4a:bd:be:b6:bf:55:80:7f:b5:51:c4:61:9f:13:c2:c1:a0:ac:
         6b:fb:af:40:7f:97:60:28:c0:35:8a:dc:38:bb:12:94:26:58:
         15:25:d8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:16:19 2026 by rpki-client