Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa
File:                     057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa (raw, json)
Hash identifier:          0rytf7bYXzEulIxrnIgYG5BJYSf+XKi58ri+47QMwEc=
Subject key identifier:   94:AC:56:4D:66:AD:5E:08:FF:DB:A0:05:4F:E1:50:39:57:C6:45:C8
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584EF7B849528FEF30D6EF726D80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa
Signing time:             Wed 26 Aug 2026 18:24:29 +0000
ROA not before:           Wed 26 Aug 2026 18:24:29 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5769
IP address blocks:        216.113.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:b8:49:52:8f:ef:30:d6:ef:72:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Aug 26 18:24:29 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5a45dade-deaf-4c7c-96d5-e992a8856327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:67:92:d4:75:cc:0c:e7:3b:44:a2:fe:1c:
                    f0:b7:24:48:c7:38:8a:b7:2e:23:e3:b0:2e:56:93:
                    5b:b0:be:3b:0a:4b:66:00:38:6a:e5:ef:73:c0:b7:
                    e6:86:59:f2:d2:51:12:85:36:fc:ec:ae:58:6b:3f:
                    92:c0:78:9e:ee:39:64:b4:b9:8c:47:e8:46:99:de:
                    e4:bf:f0:7d:c8:8d:a2:62:48:76:7d:fa:8f:a8:ca:
                    56:97:63:c9:63:03:aa:3a:0e:95:bc:de:3b:cc:dd:
                    44:e3:89:53:6b:28:4f:8f:27:8a:e0:d2:6c:ec:4c:
                    20:28:29:b0:3d:6b:0b:91:01:46:44:c1:78:c0:a9:
                    53:94:ce:f3:d4:b9:13:14:1d:6d:79:8c:8d:8b:8c:
                    82:c6:ba:73:29:bc:e0:26:3a:8c:a3:54:c8:15:10:
                    7d:fa:07:f6:7c:8e:18:7e:a3:4b:01:40:e5:93:3d:
                    7e:b7:59:2d:04:a0:12:61:0e:f4:57:9d:a2:7b:00:
                    df:be:a5:c3:27:3e:aa:a8:c6:8b:42:34:87:5c:55:
                    cf:eb:69:ad:b4:c2:33:e7:c0:35:84:f5:11:e3:20:
                    18:4e:33:73:4a:0e:c3:61:e8:2f:f1:2d:4c:61:8f:
                    ce:fd:8b:84:d4:f5:20:c6:9b:97:6e:12:5d:b5:b9:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AC:56:4D:66:AD:5E:08:FF:DB:A0:05:4F:E1:50:39:57:C6:45:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:1d:bd:cc:9f:b5:30:8b:55:07:c9:ac:48:92:5c:53:cb:
         3c:39:39:37:ee:7e:43:be:de:33:27:a7:00:df:d6:6d:50:35:
         99:03:c7:95:a5:e5:f5:bc:f1:c7:61:c8:26:e2:c5:27:9b:43:
         2e:46:c4:c5:8d:d6:f3:fb:5f:2f:e9:9f:96:51:f3:3f:e3:f8:
         91:34:95:c9:91:b5:3c:2f:81:69:26:70:05:d5:5b:63:6c:c7:
         21:1c:62:53:d0:3c:a4:b7:9c:14:5d:05:48:f2:de:7d:d9:83:
         19:ba:a1:eb:f2:b3:09:6c:8f:81:41:ca:56:ce:60:ba:9e:87:
         52:d9:ad:5f:7c:16:12:9e:e4:43:03:6c:95:44:15:ea:01:83:
         94:44:b7:41:1b:7c:93:3e:c4:93:db:c2:56:7e:9b:f7:3f:01:
         56:50:aa:0d:c3:48:ae:f7:b8:c3:f7:39:31:fe:c2:cc:69:16:
         06:95:68:b1:d8:41:d7:c2:78:cb:4d:cf:69:0f:a6:56:94:7a:
         c6:cb:5d:d1:4e:ff:2a:44:36:8e:05:e1:2e:5c:de:4b:69:fb:
         99:68:33:a9:95:03:21:b0:95:b1:23:87:a2:89:d8:ac:6a:a6:
         d8:bd:97:8c:76:57:c7:d6:05:f2:75:4b:01:69:71:60:a3:d7:
         57:46:60:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:38:33 2026 by rpki-client