Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/fd76fd3f-389b-33e0-a23d-7d51c3b1f69a.roa
File:                     fd76fd3f-389b-33e0-a23d-7d51c3b1f69a.roa (raw, json)
Hash identifier:          bJdbErhvT2GiLN5XF/FGjNf4Lvd6klVPXOV7ZoalIKc=
Subject key identifier:   7D:9F:5E:23:B0:67:27:22:3D:57:77:DF:8E:92:C0:2E:63:42:F1:D3
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584EA7886AF8431FDF3FFF4CAB40
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/fd76fd3f-389b-33e0-a23d-7d51c3b1f69a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11377
IP address blocks:        159.183.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:6a:f8:43:1f:df:3f:ff:4c:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c2403f7c-280d-41df-a18c-9b4b26f1dc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:e7:5f:d8:51:ef:5c:e8:7b:87:df:26:56:
                    ee:db:39:83:71:cd:18:1b:25:68:8d:61:04:68:9e:
                    6c:45:91:65:62:74:b5:c3:ea:ce:10:1b:37:a9:3b:
                    0d:d8:a7:05:68:4c:71:dc:11:f9:c9:c8:3b:c9:df:
                    e0:9f:21:4e:a8:2b:12:e8:3a:b2:5b:32:e2:b0:37:
                    85:00:28:ed:76:99:e1:da:80:4f:74:8e:0b:52:b7:
                    9a:fc:99:bf:0b:17:6f:42:23:82:43:b2:55:ef:d8:
                    27:d1:9c:63:c9:8e:f0:3e:a9:76:2c:43:76:b3:7c:
                    5c:fb:c3:db:29:bf:91:43:db:2d:75:53:b4:15:45:
                    57:98:4f:2e:cc:0b:88:1c:a6:17:c5:29:6e:17:f0:
                    5b:74:5b:41:4d:17:09:a7:68:d3:30:16:75:17:01:
                    1a:7b:8e:ac:3d:04:ad:5e:31:ec:be:5b:70:0f:42:
                    a6:b6:de:17:96:34:23:93:59:3c:f2:b0:43:11:9b:
                    8e:81:79:34:06:5c:0d:4c:13:30:11:8f:21:6a:36:
                    2d:a3:cc:20:6f:30:95:cc:4d:25:6b:db:3c:c1:d0:
                    ec:02:6b:df:47:77:91:9e:06:cd:44:40:db:8c:de:
                    cd:7e:42:ae:e0:f8:03:b1:d2:0f:b0:7f:9f:3e:c5:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9F:5E:23:B0:67:27:22:3D:57:77:DF:8E:92:C0:2E:63:42:F1:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/fd76fd3f-389b-33e0-a23d-7d51c3b1f69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7c:95:78:4a:88:66:bd:a7:26:00:ee:11:14:b4:70:e8:83:
         c5:4e:80:79:a9:7b:75:14:3a:91:0b:a3:c6:7e:98:58:4d:08:
         9b:ac:78:9f:1f:8c:b0:ef:15:be:74:2e:88:51:4b:2d:8b:94:
         7a:ac:f5:52:11:6a:eb:d7:6d:cd:a3:4d:d7:29:ec:d3:5b:eb:
         8b:d6:06:f6:94:61:65:98:5a:23:3f:a1:23:f2:81:a0:59:09:
         f4:bf:75:70:80:a4:ad:9c:99:83:5e:ef:a1:51:94:4f:3c:99:
         b8:6a:4d:22:b9:4f:a3:6e:83:84:83:35:6e:8b:22:ad:6c:5f:
         7d:f8:df:47:c9:3e:eb:d0:28:a0:15:33:55:00:d5:9b:d5:f3:
         4b:8f:4b:77:42:55:1e:c8:e4:85:25:81:c4:f0:0a:96:c4:12:
         97:c7:59:76:02:ad:db:ee:08:69:8e:1a:1b:48:c9:2d:7b:7e:
         41:a2:e0:47:c2:73:d9:13:a0:8c:09:f9:16:b3:eb:70:fd:41:
         2d:27:bf:a6:58:bb:e1:ff:69:b0:0d:51:75:ab:f4:00:46:16:
         56:86:ea:83:f0:22:7f:82:2c:69:1d:5d:d4:1a:fd:47:a9:e0:
         f4:fe:1d:e8:7d:e8:e3:2c:05:03:aa:bd:0b:54:56:35:97:4e:
         12:3f:04:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:54:11 2026 by rpki-client