Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/8d0358e8-8212-3ba2-a507-52160f2afaf0.roa
File:                     8d0358e8-8212-3ba2-a507-52160f2afaf0.roa (raw, json)
Hash identifier:          XN1SaHO3HhqWsciWVwM8dU6kdju196YX3lNXY4p9cpw=
Subject key identifier:   57:2E:75:75:68:CB:21:14:7F:F2:56:2E:23:40:53:8E:FB:A7:BF:D6
Certificate issuer:       /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Certificate serial:       010D0C9F4328584E15E46B12C65E575362F6DC80
Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/8d0358e8-8212-3ba2-a507-52160f2afaf0.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     9009
IP address blocks:        172.98.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6b:12:c6:5e:57:53:62:f6:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=b310b2c0-c1b1-4d59-8616-4152a2f2524f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:c4:32:10:a7:98:9c:60:a2:3b:e9:84:22:
                    ab:21:f3:e4:37:ff:78:a5:f8:73:71:c9:1d:39:54:
                    d1:21:c8:5e:cc:ad:55:a5:f5:68:c2:bc:34:88:3d:
                    e9:8c:b0:b7:7b:4a:39:b8:80:95:8a:78:8f:b2:b6:
                    68:1a:7a:99:2f:91:48:4f:c0:f0:05:f5:6b:0f:62:
                    15:b3:d6:1f:76:ce:a8:69:64:da:e9:19:a7:c4:c3:
                    2b:f4:29:bb:7c:83:64:d8:3a:34:1e:0d:ff:eb:d5:
                    58:f3:28:1d:d5:26:26:4c:f1:e0:fd:36:c1:9c:57:
                    1a:9b:35:52:21:4a:2f:80:be:af:1f:2f:1b:41:0f:
                    39:9e:97:bb:b1:02:48:7e:91:14:69:c8:27:a6:d6:
                    65:1b:10:8e:dc:00:5d:6a:9c:c3:19:83:89:9a:7f:
                    22:6f:83:b4:d6:17:aa:91:1c:ea:92:86:88:8b:98:
                    ab:e9:2a:33:cd:e4:e5:98:8c:1b:69:a7:dc:9d:e4:
                    54:0d:6d:cd:c3:72:64:67:c2:7b:54:f4:b8:81:c2:
                    fa:55:67:48:f6:e8:47:a1:31:5c:34:77:e5:3d:5b:
                    fe:61:ce:ad:4c:4b:a4:49:17:53:91:2d:88:35:87:
                    55:a9:e9:6c:f4:fc:bb:e4:af:6b:1a:d4:04:b7:1b:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2E:75:75:68:CB:21:14:7F:F2:56:2E:23:40:53:8E:FB:A7:BF:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/8d0358e8-8212-3ba2-a507-52160f2afaf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl

            X509v3 Authority Key Identifier:
                keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:67:11:a2:c8:63:87:ef:f0:7a:c6:9d:d8:b1:c5:78:09:ff:
         e7:02:6b:2a:33:69:93:fd:b0:fa:80:32:9d:08:d2:44:64:60:
         e7:14:39:e8:5b:e3:79:78:a9:bd:2f:61:4c:3c:97:6c:83:62:
         38:5c:30:56:dc:35:fe:f8:4e:a7:50:5e:ed:3e:d2:cc:a5:61:
         27:89:08:54:02:d2:e9:f2:41:e3:df:85:93:b3:0a:11:2b:e7:
         fd:f2:7d:8d:27:c5:68:fc:f6:4b:b2:7d:ac:66:3f:72:b8:70:
         44:59:97:92:f4:ad:06:d8:62:56:7d:e7:db:a1:bc:01:b4:d6:
         10:00:d9:a3:37:64:02:b1:20:41:a9:6c:b1:1e:ba:4c:f7:ba:
         b3:05:9d:1d:ce:79:88:f3:ae:72:72:7b:74:9c:71:d5:98:cf:
         42:97:c8:68:14:26:1d:c0:6d:1e:23:4b:8e:90:56:ed:4d:89:
         9c:be:b4:b1:03:43:43:7e:4f:68:03:99:68:03:27:48:50:91:
         18:ab:b3:55:7e:69:02:fb:bc:51:49:f3:b3:f6:c8:b1:2b:63:
         a8:58:64:78:87:c0:92:dd:57:32:dc:0a:28:b1:59:89:3f:54:
         f7:dc:aa:48:f7:a7:9c:50:b4:f3:19:72:40:a9:40:d9:43:ed:
         18:72:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:07:25 2026 by rpki-client