Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/07185533-ce63-3c76-8bbb-cc86746fac2f.roa
File:                     07185533-ce63-3c76-8bbb-cc86746fac2f.roa (raw, json)
Hash identifier:          pcoehsdRaRsC6UmSkrfHEW5WuoEh2pAZ8TBlvzASv7U=
Subject key identifier:   48:79:D2:30:27:FF:C1:DF:90:A7:D7:2E:FA:95:D7:89:56:21:0C:94
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584EA786FA586844083D8F0DEA00
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/07185533-ce63-3c76-8bbb-cc86746fac2f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14114
IP address blocks:        157.133.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:fa:58:68:44:08:3d:8f:0d:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=83db6984-119e-4676-81e3-6441990cccd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:67:95:33:f5:b0:c4:9f:83:3f:54:99:02:
                    2b:25:d0:ec:e3:f6:a4:fd:be:2e:16:ec:2c:f3:19:
                    da:4e:57:8b:7e:57:9d:cf:4a:97:23:70:ee:e7:0f:
                    bc:f5:0a:20:3a:fd:fc:a9:1e:cd:ea:34:59:55:c6:
                    f1:31:87:fb:61:29:dd:aa:34:8d:fc:ec:fa:dc:f5:
                    9d:5d:9c:2a:e4:50:50:aa:28:e0:e7:22:3b:78:9d:
                    08:8b:0f:13:bd:9b:43:b4:07:35:13:01:d1:4b:ec:
                    66:19:49:41:2c:23:44:ef:27:aa:d3:cf:03:d3:96:
                    38:29:24:c7:ca:e7:62:62:b2:ff:ba:2b:1b:88:7c:
                    2a:ff:30:a4:49:da:a0:75:0a:bb:e7:c0:c9:3d:69:
                    42:63:f5:3d:01:f1:f6:6b:e8:45:0b:90:03:73:a9:
                    91:04:af:2f:eb:bf:a5:36:09:aa:27:0d:a1:f5:b2:
                    f1:fd:8c:cd:a0:47:c2:1a:8d:7c:8a:61:9f:de:47:
                    90:6a:b7:a4:c1:27:57:03:36:af:ff:14:5b:75:88:
                    c6:41:d1:9e:6f:f0:20:90:ec:d3:2a:c9:76:32:ce:
                    79:1a:5e:89:fa:84:74:ca:d6:7a:08:ac:80:50:cf:
                    b0:db:4f:54:37:99:28:03:15:91:8a:51:ce:01:3a:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:D2:30:27:FF:C1:DF:90:A7:D7:2E:FA:95:D7:89:56:21:0C:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/07185533-ce63-3c76-8bbb-cc86746fac2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:36:cc:e2:f5:0e:cc:c0:d1:f1:37:10:70:b8:62:18:48:
         42:d5:7b:c2:bc:b6:4a:0e:41:81:f7:dd:b1:6a:f3:59:62:c5:
         03:3f:ac:d5:ea:b9:af:eb:25:77:e1:6e:05:64:89:72:40:31:
         1c:2c:01:a4:ef:0e:6d:bd:1f:e4:c6:71:03:33:01:b3:03:7c:
         77:ee:3e:48:32:29:4b:af:aa:a2:aa:9e:e2:28:01:b1:af:19:
         bb:3a:4b:cd:b1:09:5d:ac:93:d3:4f:d6:58:77:ea:39:23:b4:
         29:bd:34:25:ac:87:8c:1d:1e:b9:33:39:aa:1a:7d:da:75:ae:
         dd:0c:d1:f0:a8:99:0b:9d:b5:e4:2c:73:cc:13:35:94:6c:fc:
         c2:82:4d:e4:b0:72:f4:26:02:d7:a8:92:63:0f:38:0d:e6:f4:
         03:94:b2:7a:03:32:bb:02:eb:35:c0:dd:57:f7:89:25:43:86:
         1d:be:44:6d:82:2c:a0:58:78:c5:0b:d9:05:d5:ce:fc:07:cb:
         bb:f8:2d:25:f8:63:3c:fd:8e:0c:14:f7:be:11:60:12:55:1e:
         86:bb:cc:72:15:24:5c:12:2e:03:2f:50:28:4f:f1:4d:f0:3f:
         08:26:8a:a5:6f:7c:2a:2e:e3:d1:25:15:97:82:44:19:b5:2a:
         c0:b8:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:50:01 2026 by rpki-client