Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9d5705dd-b91d-33d0-870e-6b3a8fa2c096.roa
File:                     9d5705dd-b91d-33d0-870e-6b3a8fa2c096.roa (raw, json)
Hash identifier:          RNY+mNi6DMxJ1MkxjYkeCkFK4VBevOHfErmGxyVZIjU=
Subject key identifier:   EE:4E:9C:94:D2:D8:B2:C5:D4:7F:D7:51:D6:BF:66:4F:0E:7B:A3:18
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584F31B7BB1D4278D91190E94280
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9d5705dd-b91d-33d0-870e-6b3a8fa2c096.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     18434
IP address blocks:        156.55.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:bb:1d:42:78:d9:11:90:e9:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=7215814c-4dc0-448a-ac9f-31eec0b34e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:01:37:62:77:7b:42:d5:22:b2:eb:18:53:
                    06:ce:04:b1:ff:be:e1:95:f6:0c:27:f7:eb:31:94:
                    69:68:bc:16:57:27:7c:b7:af:ce:b1:e7:8b:ee:2b:
                    de:f3:74:b7:48:2b:29:88:be:94:a3:ff:24:55:3d:
                    52:bf:49:53:9f:99:dd:3a:f9:51:19:60:11:de:90:
                    fa:c7:e2:fe:2a:a0:7f:53:04:10:9a:f5:ef:7e:c0:
                    4c:23:c3:c6:2f:00:09:1f:4a:45:3d:80:55:cf:6d:
                    b7:c0:99:38:2a:52:e8:ef:10:d3:9b:c9:4a:2a:25:
                    17:a6:0e:e8:3e:fa:70:31:91:83:5c:0e:bf:ea:f1:
                    a2:38:6c:99:53:52:5e:a5:51:03:07:34:af:ac:49:
                    6b:be:81:bd:b0:1b:f3:2e:07:7e:bb:2f:d6:f4:41:
                    04:99:86:1e:ae:74:70:0b:b3:6a:da:8f:fe:ea:d6:
                    0f:8f:3f:51:f1:35:19:14:78:5b:5a:f4:c4:b3:d2:
                    1e:8e:0a:d9:84:23:2d:bc:6f:3e:a4:ab:59:38:68:
                    e3:50:37:62:bd:08:6f:e8:d2:70:a9:a4:20:cb:49:
                    02:d8:eb:c0:9d:28:67:42:ab:14:ee:cb:1c:91:85:
                    d0:00:fb:f9:0f:0b:88:3c:0d:87:52:37:8e:d6:63:
                    81:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4E:9C:94:D2:D8:B2:C5:D4:7F:D7:51:D6:BF:66:4F:0E:7B:A3:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/9d5705dd-b91d-33d0-870e-6b3a8fa2c096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.55.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:58:a9:ce:0b:64:c1:ee:42:04:b3:70:72:a8:1f:30:b4:c4:
         2b:f6:5c:60:47:6e:c0:4e:a9:3d:1e:e6:65:02:b3:49:e9:00:
         53:91:ae:20:37:08:cf:73:ba:f5:ee:69:a5:a7:9d:39:fb:69:
         b0:33:12:78:05:84:a4:76:c8:de:d1:57:8e:5e:56:1c:74:ea:
         2b:82:44:f5:f9:66:85:ec:4e:bf:68:1f:72:3c:54:a0:fa:3a:
         a4:92:f0:b4:0d:e2:79:aa:83:82:1e:69:ce:21:2f:a3:42:64:
         9d:ec:66:01:c2:7b:af:82:dc:e9:b8:03:0e:cb:07:f0:c9:a2:
         02:4a:07:6a:22:ff:b9:4a:97:1b:40:da:df:e1:bd:d1:c7:ea:
         c3:e9:5b:27:24:26:c1:25:14:ec:2e:77:5a:fb:81:f8:a8:d8:
         80:9a:45:3a:bd:88:5c:de:b6:eb:ef:83:29:b5:12:c0:b8:1a:
         23:1d:9f:05:54:c0:9b:9c:35:b6:df:27:ac:f2:d0:f6:0a:46:
         54:d2:25:f2:ab:97:a7:40:b1:b4:19:75:1d:c9:df:b4:c8:95:
         cf:c5:41:a0:66:6f:77:f9:22:68:e8:d1:15:90:03:7a:10:ba:
         34:29:1e:b0:84:75:c5:12:e1:4f:4b:4f:06:90:bd:0c:52:6b:
         ca:62:69:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:11:10 2026 by rpki-client