Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/fd46f2fb-b0e5-31e9-bc26-044761c080f2.roa
File:                     fd46f2fb-b0e5-31e9-bc26-044761c080f2.roa (raw, json)
Hash identifier:          KEynENsZIe2Bi1nxQm6G0lJq7QW4RDrGtkZW0002UyA=
Subject key identifier:   9E:2A:B3:55:06:83:F4:8B:27:B7:C9:A5:B1:ED:65:1F:03:BC:57:F4
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F4328584EFF777ACB1E36CE0347C84CC0
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/fd46f2fb-b0e5-31e9-bc26-044761c080f2.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     53407
IP address blocks:        158.120.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7a:cb:1e:36:ce:03:47:c8:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=1fab98ea-8104-4299-a294-6816aa7c0306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0f:df:5a:cd:d2:14:24:d5:42:01:d9:16:d6:
                    1c:85:2a:ed:65:53:28:bd:a1:3a:df:da:bf:6c:ed:
                    39:f2:06:ec:65:03:7b:42:e9:da:aa:99:b0:bb:c5:
                    c2:16:79:42:b6:34:a2:bf:cf:bb:29:1e:65:09:ac:
                    08:b9:20:5c:52:6b:48:a0:a2:91:97:1a:69:22:ed:
                    28:ba:ef:d7:10:e0:88:60:14:c6:98:71:6e:7a:d0:
                    e4:f0:ba:be:72:b2:5b:39:1c:6e:23:a6:39:ef:8a:
                    d0:96:56:d3:45:2c:e9:6d:8a:b5:d3:c4:d6:e3:cd:
                    1b:b5:ed:41:60:5d:69:4b:46:76:a4:d7:80:a8:e8:
                    1f:53:db:3b:87:80:d6:43:7b:c9:fc:23:f3:32:35:
                    8e:34:81:48:56:d9:27:18:a2:d0:02:73:59:f6:56:
                    83:a7:c0:c9:ff:de:23:7f:de:7e:bf:02:a0:91:29:
                    7f:0b:d7:55:af:11:c8:56:e6:dc:cb:2c:1e:de:40:
                    44:c8:a3:35:e1:80:c9:a8:9b:3f:4a:af:0a:97:3f:
                    8b:1b:ef:84:6b:49:d6:6d:40:8a:e2:94:77:d6:9b:
                    a9:00:54:6f:e7:8b:6b:4c:5d:48:dd:58:09:31:c9:
                    7d:0b:8a:c7:47:d4:5d:d7:02:84:55:97:7c:d3:0d:
                    7e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2A:B3:55:06:83:F4:8B:27:B7:C9:A5:B1:ED:65:1F:03:BC:57:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/fd46f2fb-b0e5-31e9-bc26-044761c080f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:09:02:17:9d:83:86:c9:70:77:42:3e:0c:b8:07:43:22:c3:
         a4:75:d8:f2:e2:d2:1d:45:df:0b:78:29:1e:b3:b5:38:b0:b5:
         79:e2:53:12:02:f0:83:c3:fb:d6:f3:3c:f4:16:1b:d2:6e:36:
         4a:0f:74:94:c4:6c:33:57:1c:e1:cc:4f:63:34:04:31:14:4b:
         e1:0b:95:f3:e3:f1:a3:50:2a:4e:d5:f5:9d:de:c7:61:06:6e:
         ba:bc:8a:b6:29:e2:9c:e2:be:31:bb:24:3d:ef:96:2d:dd:4b:
         68:99:91:32:2c:9f:40:59:55:bc:57:b8:3a:48:d2:d8:f2:dc:
         36:29:04:50:f7:53:7d:a0:c8:9a:d6:73:a4:d5:20:68:76:68:
         55:78:4f:ae:be:c8:ca:f4:0d:6e:4e:d7:10:2e:5b:84:8d:43:
         4c:bf:a4:9f:f9:b2:cd:6e:8f:4a:52:27:96:71:44:f7:50:f6:
         2f:92:8d:65:b1:f3:e2:ac:5f:5f:8f:b9:7f:4a:25:8a:d9:e6:
         55:ef:45:9a:ae:4d:46:0c:ad:e9:e1:11:d4:eb:35:35:b6:29:
         04:25:5e:b8:78:95:23:a3:37:50:d2:e0:94:f8:b7:7a:3f:58:
         73:7b:59:23:6a:62:3c:48:ea:de:1a:9d:7b:9c:db:a4:a2:12:
         f2:0f:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:02:03 2026 by rpki-client