Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/2e6ae347-1df0-34ac-9a48-ab7d2d25d14f.roa
File:                     2e6ae347-1df0-34ac-9a48-ab7d2d25d14f.roa (raw, json)
Hash identifier:          5zEJr8Igm8fcqnH5cBxTG83pb8mUU9zFOx5LDLmgBMM=
Subject key identifier:   3B:29:CD:1F:C7:3C:70:B9:32:ED:E7:A7:BA:90:D4:CD:18:71:9F:7F
Certificate issuer:       /CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18
Certificate serial:       010D0C9F4328584EA788907E54F84067C7749300
Authority key identifier: 8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/2e6ae347-1df0-34ac-9a48-ab7d2d25d14f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401489
IP address blocks:        155.103.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:90:7e:54:f8:40:67:c7:74:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9c5e3232-cde1-4f00-a828-d708ef09e114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3b:b0:bf:bf:5c:77:b5:d8:9a:c1:98:e3:13:
                    f6:8b:22:1d:f9:41:3e:d9:f3:b5:67:dd:8d:79:f3:
                    74:ec:fb:a7:4a:3a:a5:4d:9c:19:b2:6e:74:89:da:
                    b3:9d:ff:27:b6:e6:3f:67:5f:1c:93:cc:1b:2f:e7:
                    f8:89:19:1f:7c:d1:02:1c:c8:f6:07:d8:5a:82:42:
                    3d:83:01:7a:56:38:37:3f:77:d5:4d:c4:c3:6a:8b:
                    b7:97:08:08:09:75:df:b0:15:88:50:1a:cb:d7:25:
                    2d:31:fc:8e:a0:de:2c:5d:b4:d9:62:78:d3:de:66:
                    a6:72:f6:8f:7e:92:c7:e8:54:be:24:fc:28:61:1b:
                    5e:ed:31:99:e6:88:65:29:a4:eb:fa:64:ad:8d:5f:
                    22:2b:1f:40:b2:9d:f6:d0:5d:77:10:0f:2f:29:ec:
                    28:80:a6:bb:45:e8:f4:ab:bf:81:87:aa:c2:a4:6e:
                    20:d4:9b:5b:6a:e2:62:5b:66:a0:bb:90:35:90:c8:
                    ca:c6:d3:e7:ee:73:da:92:98:a3:02:8a:49:c6:ac:
                    5e:ad:ae:92:7e:57:83:25:20:f4:a8:e9:2f:19:60:
                    74:a0:95:e4:3f:71:fb:06:73:8b:33:57:b4:2b:d1:
                    c3:e9:61:71:46:d3:8e:85:b6:15:b0:b7:dc:73:8c:
                    59:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:29:CD:1F:C7:3C:70:B9:32:ED:E7:A7:BA:90:D4:CD:18:71:9F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/2e6ae347-1df0-34ac-9a48-ab7d2d25d14f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2c:c1:e9:1a:5a:fd:b1:c6:cd:89:e2:26:12:88:d9:5b:85:
         5a:a5:32:f9:fc:fd:e1:63:b4:b1:0f:c7:c6:1a:de:07:c9:05:
         8e:43:1a:3d:36:23:b8:47:fe:6b:27:31:e4:91:1a:98:64:7c:
         e2:7a:a9:ba:3f:73:20:57:a3:6b:a1:35:dc:71:c3:ce:e5:b7:
         90:43:27:2d:c3:40:d3:2e:b9:1e:fa:9b:84:61:17:ba:cb:2f:
         90:16:86:f6:ec:b1:37:3f:c5:03:01:da:11:65:8a:81:ab:cc:
         64:30:cc:bf:8e:10:69:2b:d4:e4:0b:3f:82:69:04:f0:80:8a:
         fc:a4:bf:26:cb:d1:99:6b:e4:96:2c:1f:63:0e:7f:7b:f3:fd:
         e1:9a:f7:be:62:14:eb:14:e3:86:39:d7:fc:58:f3:11:6b:b8:
         49:5f:c5:51:2b:3d:27:91:37:b9:d7:2b:f7:cd:d8:58:92:65:
         09:2f:18:68:6f:1f:ea:2b:0d:a7:f9:80:d3:3d:2c:ad:ad:de:
         5a:0f:ff:88:d8:1d:ba:c2:5e:9b:d2:8c:9a:ae:be:4a:d5:bc:
         db:02:63:b8:39:f5:3f:d3:52:f8:aa:5e:aa:bd:86:4f:77:a3:
         ed:49:e4:ed:3d:49:24:91:7e:5f:11:55:06:59:1e:fd:6e:5d:
         9e:05:e6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:00:24 2026 by rpki-client