Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5d254bd5-42cc-3a03-8d4b-12e62c071353.roa
File:                     5d254bd5-42cc-3a03-8d4b-12e62c071353.roa (raw, json)
Hash identifier:          msAM4/K7mJjW8tMSxzNYSK2IMP+HBTd30O5R6J07Gjc=
Subject key identifier:   15:71:FE:6A:FC:78:5B:28:EA:48:AF:C4:C7:84:AA:71:59:7A:78:B6
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F305266B24612F8EDCA8F3380
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5d254bd5-42cc-3a03-8d4b-12e62c071353.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     54858
IP address blocks:        208.53.96.0/19 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:66:b2:46:12:f8:ed:ca:8f:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=a229db7a-591f-42cc-b4fc-e4e4b1ecd27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:73:5d:11:97:dc:20:d0:d2:4d:1f:24:c8:
                    d7:db:98:45:31:2b:41:24:76:33:94:17:76:d7:4f:
                    93:df:75:72:0c:13:23:25:7e:3f:a5:5c:84:83:11:
                    19:f0:85:74:a1:a6:4a:79:1b:60:0f:b8:4b:3c:ed:
                    d4:19:c1:e3:c7:57:95:1f:02:75:20:fa:8e:30:ae:
                    73:fc:a5:55:57:ac:aa:b4:62:4b:dc:d6:3e:72:85:
                    a1:c8:75:32:fd:5e:2a:16:6a:20:2b:21:21:e0:74:
                    4c:71:10:1d:6b:8a:cf:53:90:66:be:ab:5a:ef:4c:
                    8d:4e:ee:12:8a:41:66:61:8f:71:d8:7c:bb:ab:93:
                    89:ce:f2:5f:e6:5c:a8:6a:ae:ba:d2:31:47:dd:a2:
                    9a:7b:ac:6c:ef:0e:41:6f:d9:4d:5d:bf:93:25:b1:
                    69:02:12:b5:e1:ce:05:27:94:98:cc:d1:95:fe:09:
                    08:c9:ce:0d:fc:52:3f:79:b8:e2:b2:66:74:23:c3:
                    d0:5f:34:3c:c0:a2:e1:53:39:10:f1:2f:35:66:f7:
                    18:b2:47:59:37:73:e5:bc:e6:99:d5:50:07:43:8b:
                    ec:74:63:7b:a9:61:13:d4:ec:66:5f:d5:31:88:79:
                    49:2a:1f:1c:69:02:9b:54:07:87:b5:3c:0c:d6:7a:
                    ed:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:FE:6A:FC:78:5B:28:EA:48:AF:C4:C7:84:AA:71:59:7A:78:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/5d254bd5-42cc-3a03-8d4b-12e62c071353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.53.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:28:32:45:88:c8:79:5b:f1:a5:35:ac:89:21:b5:eb:7c:bd:
         16:31:4d:ad:81:22:27:1c:1f:7c:34:95:7b:3a:d8:b1:36:57:
         b4:a5:ef:16:0e:06:d4:62:ed:b4:f2:59:2b:a4:4e:bc:83:25:
         13:76:a5:5d:a9:ec:a2:d0:d1:01:0e:58:9e:03:fb:f7:cf:8b:
         13:d7:52:30:9a:81:78:db:64:04:ed:ee:78:28:96:ee:b5:fd:
         bf:56:f1:6a:f7:a7:77:a3:86:f9:b2:11:5b:84:79:ee:55:db:
         e9:71:69:f0:c0:cb:d3:ea:0e:7b:ee:25:44:2b:d0:60:22:62:
         f7:cc:c3:70:b1:48:84:15:2d:53:e5:15:d9:de:09:bf:77:6c:
         bd:2d:bd:d9:b2:98:58:2f:4c:77:9a:64:b3:6f:0d:f8:11:f7:
         f3:47:cf:e5:39:69:db:5f:a8:96:79:7c:5b:1a:42:8c:00:50:
         87:c8:17:18:ca:da:d4:18:50:74:6c:28:ee:8b:d9:93:a1:69:
         df:ef:8b:28:e3:8b:cb:71:b3:72:f1:e7:d6:8f:a3:76:51:be:
         16:bf:f2:02:8f:26:98:16:2d:2b:bf:50:39:ad:69:de:e7:62:
         4a:96:3f:3a:05:00:1b:72:96:c7:8f:2e:c0:13:f1:d2:ec:a9:
         58:f5:c6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:19:50 2026 by rpki-client