Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/e7257fa9-e2c2-3706-9bc3-3d5108f9940c.roa
File:                     e7257fa9-e2c2-3706-9bc3-3d5108f9940c.roa (raw, json)
Hash identifier:          aRflTL2C4VdAJC7nfa64+yw67sA1GYLJrOnB2GaVggc=
Subject key identifier:   7C:D9:7E:7B:1B:F1:60:AD:43:56:E0:AE:D6:52:96:2A:3A:F0:80:8A
Certificate issuer:       /CN=c55a5d2a-aeae-4e6a-9701-cf97fa6eb571
Certificate serial:       010D0C9F4328584FC0366C809BE99253C14B7060
Authority key identifier: 74:F6:60:51:0C:EB:7D:BB:DF:B9:69:27:97:B8:02:17:DE:B3:36:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/e7257fa9-e2c2-3706-9bc3-3d5108f9940c.roa
Signing time:             Fri 06 Nov 2026 14:00:13 +0000
ROA not before:           Fri 06 Nov 2026 14:00:13 +0000
ROA not after:            Thu 04 Feb 2027 14:00:13 +0000
asID:                     16989
IP address blocks:        160.37.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c0:36:6c:80:9b:e9:92:53:c1:4b:70:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c55a5d2a-aeae-4e6a-9701-cf97fa6eb571
        Validity
            Not Before: Nov  6 14:00:13 2026 GMT
            Not After : Feb  4 14:00:13 2027 GMT
        Subject: CN=f150c0fd-8bbc-4274-8b75-acc04042cbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:f2:c1:a8:c3:52:87:33:bd:82:c9:83:eb:
                    0d:b3:70:5f:bc:68:f4:18:37:9c:f9:78:40:bc:53:
                    d5:92:10:0c:d8:64:45:95:b3:46:b5:08:39:a9:ce:
                    04:4e:14:95:8d:d0:b1:7e:2d:6f:49:82:ba:82:80:
                    cf:4d:14:3c:66:1c:06:71:86:42:05:41:98:b1:66:
                    86:16:42:d0:a7:02:e5:e6:d7:c9:84:c1:98:30:de:
                    cd:d4:8e:e1:99:af:ac:a0:31:ec:8f:d6:0b:31:65:
                    7f:95:f2:ae:bd:b5:bc:a7:31:c3:f2:46:5c:ff:10:
                    d5:b1:86:90:b2:e6:41:c2:33:86:40:17:52:25:e7:
                    1a:ef:5e:0f:01:75:61:77:bb:5a:89:07:2b:54:d2:
                    70:9b:fb:2f:da:2b:b4:86:2d:0b:ca:5e:e1:81:43:
                    19:78:cb:f4:65:d4:77:28:4e:f5:56:e5:b7:bf:1c:
                    c2:b8:22:e1:c1:bc:03:fa:fb:8e:f3:9f:d5:ab:03:
                    e8:fa:04:71:0b:f3:44:aa:4a:84:84:ec:27:4a:4c:
                    47:53:00:7e:f5:fa:68:f5:2c:91:a4:d5:d0:90:b9:
                    ab:8c:45:5c:a0:19:46:d2:32:8a:17:ff:59:9c:b1:
                    85:16:6c:69:2d:61:aa:6a:64:85:57:ca:3c:1e:0d:
                    56:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D9:7E:7B:1B:F1:60:AD:43:56:E0:AE:D6:52:96:2A:3A:F0:80:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/e7257fa9-e2c2-3706-9bc3-3d5108f9940c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.crl

            X509v3 Authority Key Identifier:
                keyid:74:F6:60:51:0C:EB:7D:BB:DF:B9:69:27:97:B8:02:17:DE:B3:36:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c55a5d2a-aeae-4e6a-9701-cf97fa6eb571.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.37.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:bd:72:07:11:e5:94:81:ed:fc:5b:73:ba:70:f4:41:70:
         ef:8d:af:51:f0:a6:ab:c7:e0:73:54:23:c0:98:3c:1b:6d:5e:
         a8:50:f7:45:a1:02:40:7f:7e:77:5f:62:c0:39:76:5b:f7:47:
         8c:37:95:d7:83:d0:48:bd:14:d9:fb:c4:7a:41:a8:8d:6e:a8:
         24:60:92:6e:aa:b0:96:34:87:0c:6c:a6:9c:97:cd:8f:c9:17:
         e9:c0:7a:26:fd:be:e6:86:d2:fb:bc:80:58:a0:d5:97:28:21:
         88:47:68:e8:9c:92:c5:c9:9b:7f:6d:d4:63:80:5d:47:64:ee:
         d9:f4:d1:d1:64:62:5c:96:a8:04:af:7c:3f:3d:06:2d:ec:6a:
         cf:a7:bd:41:56:a5:d4:56:9f:41:c4:ab:ed:22:43:89:05:6f:
         a6:50:b9:0c:6c:3b:d2:ed:69:28:da:fb:4c:88:06:3f:a9:fc:
         19:1f:8f:1e:da:32:bd:c6:cd:1e:88:92:0d:82:14:05:0c:ed:
         0a:ad:19:7f:8b:63:65:1e:ce:d0:ac:e3:c8:4a:61:a2:84:22:
         b5:3f:1c:a1:3e:7c:0e:30:7c:65:b7:18:b9:d0:4a:1e:1c:69:
         d9:52:fe:16:57:54:26:7a:e9:74:95:04:19:32:f3:6d:79:ce:
         c2:0d:8b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:55:18 2026 by rpki-client