Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74b395de-0521-3794-84c8-bf5c503a1c67.roa
File:                     74b395de-0521-3794-84c8-bf5c503a1c67.roa (raw, json)
Hash identifier:          355h2T6+zvOg8oo85N59m1ywj67zvSOAlHx0V+ElobU=
Subject key identifier:   81:8A:C1:19:63:C1:4C:55:26:A7:15:9A:57:67:87:68:6C:67:CB:54
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584EA7967190DD123B775652BE00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74b395de-0521-3794-84c8-bf5c503a1c67.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54113
IP address blocks:        157.5.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:71:90:dd:12:3b:77:56:52:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dfb07772-925f-4dd5-94e9-b22702697df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8f:6a:da:7c:01:48:80:08:c3:10:ef:3e:35:
                    ab:57:33:1c:32:4a:5e:c5:39:d3:0d:53:26:a7:23:
                    7f:90:41:d9:5d:ca:89:16:e5:07:61:ff:74:1f:1a:
                    f7:b0:9a:c6:7f:69:5d:da:7d:e6:b1:a7:a6:26:33:
                    d2:be:7e:97:ca:27:7c:d6:65:4d:c5:25:d9:ad:68:
                    69:00:77:71:df:63:6f:14:ae:39:2c:c7:18:99:88:
                    2b:8c:d0:c8:f4:c4:4d:b7:1a:a4:5d:8f:1d:e0:52:
                    01:f3:98:d4:3a:6d:4b:d1:8b:66:41:98:2f:e8:89:
                    28:65:8a:58:d7:9a:4f:fe:de:c9:3f:b1:95:14:9c:
                    78:64:f5:69:4c:d7:f8:32:8b:5a:6a:6e:5d:85:b6:
                    1c:06:3f:75:02:30:d0:2d:63:4e:f4:e0:68:49:71:
                    19:2b:7f:32:95:18:be:d8:a1:a0:7f:3a:8c:c9:77:
                    65:9c:2c:32:b0:de:0d:22:3f:37:66:14:1d:4a:1f:
                    94:9a:7b:5a:48:21:c3:ba:ac:a3:47:e6:87:11:63:
                    b3:dd:3b:d6:18:5c:b6:83:4a:9f:8f:af:4d:df:d9:
                    9f:80:69:a2:10:6b:0c:af:b4:2f:2e:bf:12:9a:e6:
                    33:d7:ce:7e:8a:78:bc:cd:69:eb:16:00:0b:a4:9e:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8A:C1:19:63:C1:4C:55:26:A7:15:9A:57:67:87:68:6C:67:CB:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74b395de-0521-3794-84c8-bf5c503a1c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:28:9c:d6:07:68:f0:56:4f:7b:3e:0c:87:b2:5b:39:dc:
         43:d5:c6:fd:07:e3:15:3e:e0:24:44:76:fc:94:c1:94:14:d1:
         7a:03:71:38:99:15:38:cc:6a:76:71:76:9e:93:03:0b:56:06:
         fa:69:54:22:d6:4c:fc:53:2a:69:7c:5e:da:75:4f:a9:5d:7d:
         d1:ca:b6:d4:2c:6a:5f:87:a2:c8:0a:9e:5b:bf:54:b6:59:f7:
         67:c4:2d:cd:81:93:6b:89:e8:78:9f:de:93:01:27:b6:88:97:
         f3:ce:8e:88:bc:66:9d:22:a1:39:4e:26:b2:37:75:13:44:74:
         75:bc:d3:73:61:79:47:86:04:ab:09:6d:87:27:f7:9f:f8:f1:
         3c:e0:87:0f:e4:2c:d1:bd:75:5d:14:ea:ed:7f:63:4c:4e:ce:
         5d:1d:36:1e:f8:c0:3a:01:ba:15:4c:7a:0d:68:4e:4b:6b:a1:
         8b:d7:c0:00:6a:c7:b0:78:28:14:3b:c6:e1:90:73:20:6b:08:
         da:80:da:ee:3a:ee:8b:c7:31:a4:6e:86:1f:4a:55:18:2b:4c:
         a4:3a:11:88:74:9b:70:18:47:c5:de:06:6f:f7:fb:51:1f:5a:
         21:5f:ef:05:1c:92:b3:d1:25:4a:dd:f0:72:5a:45:8a:30:2f:
         d5:89:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:29:19 2026 by rpki-client