Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/42054cda-212d-33df-8dc9-e1e9747eddb1.roa
File:                     42054cda-212d-33df-8dc9-e1e9747eddb1.roa (raw, json)
Hash identifier:          8M1HPBKYUj02aBMWenp1A0p/M5/7phfyS3M5KMtf+fY=
Subject key identifier:   63:60:6E:D3:2D:E4:9F:B8:EC:06:5A:ED:D2:F0:79:F4:2C:6E:F8:F0
Certificate issuer:       /CN=d7df35c8-e79b-433a-a950-6df11849bfd3
Certificate serial:       010D0C9F4328584F15CCE7758C8AAE0898341200
Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/42054cda-212d-33df-8dc9-e1e9747eddb1.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     88
IP address blocks:        204.153.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:e7:75:8c:8a:ae:08:98:34:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=721f5b99-8958-421d-b789-a9ad00edd4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:8d:c5:c2:40:cb:5d:92:42:7b:18:e6:ac:
                    d0:3d:4a:55:39:92:6d:65:a2:37:38:0b:6c:ad:40:
                    95:88:cb:94:d6:2b:8f:91:5b:1f:7d:e8:3a:e2:59:
                    fe:12:58:7d:01:c4:a3:b8:af:90:a0:c2:a7:e5:e6:
                    0c:c6:48:22:0f:37:fc:8e:fc:5d:dd:b1:50:d4:8b:
                    e2:80:38:64:a7:6c:99:06:53:dc:09:f1:c7:1f:2b:
                    f7:a8:56:fa:7f:1d:41:5d:38:d8:1e:fc:b9:2b:8e:
                    fa:0c:24:81:da:c0:67:1c:9d:af:8b:09:73:07:ab:
                    a2:25:36:e7:a4:fb:68:1d:73:25:d4:61:1b:35:4b:
                    64:8f:d1:35:48:81:c1:71:cc:2a:98:bb:b4:d7:37:
                    ed:02:10:e6:ec:a1:ce:27:d8:24:14:36:89:20:7b:
                    de:12:d5:90:e1:9a:b0:b5:f2:c5:c8:b9:9f:1c:ac:
                    6c:1a:d0:f7:5f:22:13:04:75:2e:17:2d:e4:31:07:
                    90:ce:81:99:fd:4d:c4:64:fb:65:51:11:e5:c5:93:
                    63:4e:51:50:d5:a1:18:2f:18:34:86:66:35:88:19:
                    43:e1:32:fa:9c:81:8d:8c:9e:2b:31:07:9b:ab:08:
                    32:76:a0:10:ff:58:8d:f8:fd:0a:5f:e9:d1:d5:88:
                    6c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:60:6E:D3:2D:E4:9F:B8:EC:06:5A:ED:D2:F0:79:F4:2C:6E:F8:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/42054cda-212d-33df-8dc9-e1e9747eddb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl

            X509v3 Authority Key Identifier:
                keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:38:6a:e1:00:94:73:e3:9a:8c:c7:22:45:36:29:a9:15:de:
         ca:99:9d:91:3e:5d:b7:ce:b5:2a:84:e4:47:42:53:80:81:d4:
         5f:8c:5e:0b:78:b6:71:8a:dd:93:b6:44:58:f3:05:6c:6c:9b:
         0a:13:09:0a:e7:34:35:e1:50:1d:b4:77:ef:7e:7d:ec:4d:82:
         d0:6d:96:30:d5:bb:0b:cb:0f:18:22:2e:19:f9:04:dd:df:f6:
         95:62:3d:6e:79:25:fe:e5:7c:0e:39:bf:d7:af:16:ac:a8:07:
         f0:52:0f:82:0c:d5:a2:3c:f8:fa:3f:fd:2c:a7:40:89:03:51:
         95:f7:99:1f:c9:b6:b0:e1:0c:34:ec:52:99:6b:ae:ac:d8:74:
         fb:14:31:a9:44:cd:b1:b5:1f:31:7a:ac:94:ba:73:84:b6:eb:
         0c:d3:eb:ac:56:10:8d:75:c3:b8:cf:5c:0e:33:0a:63:8e:a3:
         99:c1:d0:b0:f8:ba:36:ef:10:e6:73:2e:24:cd:59:9a:7e:c1:
         73:43:a6:0a:09:89:d2:17:ee:b6:19:15:19:bc:e0:5e:61:7b:
         36:c7:b9:95:3e:0f:b1:a4:66:c7:76:4f:eb:5f:8d:94:df:eb:
         b1:54:60:1e:d5:1d:26:d0:dc:a6:5c:9f:a0:cb:f2:01:71:f3:
         00:51:fc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:22:22 2026 by rpki-client