Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/77d7bb04-d01e-369d-a790-a0405c08de73.roa
File:                     77d7bb04-d01e-369d-a790-a0405c08de73.roa (raw, json)
Hash identifier:          rEdykxjjGl58Brjfs11Hty8qQIlzIH88j88vxb74C5M=
Subject key identifier:   61:0B:0B:C5:0C:EC:A3:94:B3:DE:B5:1C:72:D0:CB:C5:17:6C:FA:CE
Certificate issuer:       /CN=d7df35c8-e79b-433a-a950-6df11849bfd3
Certificate serial:       010D0C9F4328584F15CCE7828734C98134EB7420
Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/77d7bb04-d01e-369d-a790-a0405c08de73.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     88
IP address blocks:        204.153.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:e7:82:87:34:c9:81:34:eb:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=efb314c7-3d58-4485-a862-9ac5b55246e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:88:3b:64:36:45:31:54:07:8b:a5:5c:95:
                    e6:4f:53:d1:05:c2:92:1e:de:e3:db:e3:53:2a:e0:
                    cd:54:df:dc:5d:f2:1f:59:17:08:3b:42:aa:78:d7:
                    27:5a:ce:40:d4:72:b1:27:55:f3:6d:57:b4:5a:46:
                    87:b3:be:ce:6d:da:70:b6:1a:fb:36:86:0a:ee:f0:
                    a5:05:47:79:3e:1a:f6:7d:38:8b:fc:6c:31:f0:98:
                    6d:b8:ec:8a:f5:91:64:2e:d0:9e:61:26:ee:43:ab:
                    cb:f3:43:90:06:a8:2e:d6:37:a7:2d:77:39:3e:13:
                    99:be:8d:b6:b5:c3:98:51:6f:ba:60:83:c9:54:42:
                    1e:1f:6c:2b:94:d5:c8:3f:b2:b9:a2:17:eb:90:84:
                    49:f3:9e:6c:8f:e4:40:fb:e7:54:32:2a:eb:9b:01:
                    c4:9d:06:9c:0f:51:2d:a0:a2:8f:3a:14:23:20:b2:
                    ce:ce:41:50:f7:8d:22:c3:da:f9:f0:7c:e4:56:d7:
                    d5:58:1c:f5:4e:96:77:96:ed:8b:ae:04:62:8f:05:
                    a8:04:74:ba:53:4c:ec:9a:cb:d8:4b:77:cc:01:66:
                    18:c9:2e:a8:46:26:68:89:6e:d3:00:b6:92:8e:62:
                    49:e3:f5:34:de:75:40:a8:6c:67:8b:16:47:27:cd:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0B:0B:C5:0C:EC:A3:94:B3:DE:B5:1C:72:D0:CB:C5:17:6C:FA:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/77d7bb04-d01e-369d-a790-a0405c08de73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl

            X509v3 Authority Key Identifier:
                keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:60:1f:88:cb:c0:99:91:20:2b:18:9b:ac:2d:91:7c:d6:d9:
         61:af:1e:29:10:50:d1:bd:54:fd:2a:86:0e:a2:a2:2b:a5:22:
         da:86:60:c6:0f:4d:3c:f3:be:2d:d0:2e:60:be:e8:29:e8:64:
         7a:b1:c1:1f:b3:8e:68:fe:da:5c:40:04:ed:8a:be:b9:8c:46:
         7e:13:60:f7:f3:37:bd:a0:3e:a7:c8:43:b9:cc:79:43:97:27:
         33:7a:af:22:e1:8c:d3:dd:e8:c7:a5:8d:61:96:e8:5c:c0:97:
         b8:cd:11:dd:d0:d4:d5:a8:dd:e2:ad:31:f2:ba:1c:98:6f:46:
         31:ae:7e:84:13:91:33:9e:3e:20:a5:40:20:e6:28:59:10:51:
         8c:c5:79:6f:f2:bc:6e:61:89:9c:7e:d0:4a:4a:fb:2b:ae:c8:
         b5:1e:0e:a2:7b:db:09:a9:46:4b:a4:5d:f0:f9:2a:ee:53:9b:
         7e:ce:2b:76:58:5e:35:2b:71:24:72:db:65:0c:d0:d7:ca:58:
         f5:c3:b3:46:b8:5c:6e:dc:d1:a2:bd:9c:a4:74:62:07:8c:dd:
         57:51:0a:e2:1c:f3:65:c5:a3:05:18:46:99:95:83:75:60:8a:
         74:61:a6:cf:fb:20:3c:15:2c:87:43:19:64:44:58:51:a3:f3:
         fa:f5:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:59:04 2026 by rpki-client