Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86/fc9ecd57-a5ea-3882-9612-bd91510ac411.roa
File:                     fc9ecd57-a5ea-3882-9612-bd91510ac411.roa (raw, json)
Hash identifier:          NG3idHEBMcTP1RBLjefw4ebH4se+vzuFk9M7bTOU7EI=
Subject key identifier:   B2:F7:8F:8E:EF:0E:34:3D:EF:02:83:3A:00:87:A5:28:AA:1A:FB:71
Certificate issuer:       /CN=d0e55fb5-7c4e-4041-b853-ad74b8542e86
Certificate serial:       010D0C9F4328584F0565BB185120DE312A702500
Authority key identifier: 50:F4:9B:3B:6F:60:84:6C:76:5A:85:5E:71:1B:36:29:78:20:1F:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86/fc9ecd57-a5ea-3882-9612-bd91510ac411.roa
Signing time:             Mon 31 Aug 2026 15:59:28 +0000
ROA not before:           Mon 31 Aug 2026 15:59:28 +0000
ROA not after:            Sun 29 Nov 2026 16:59:28 +0000
asID:                     58026
IP address blocks:        167.253.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86/d0e55fb5-7c4e-4041-b853-ad74b8542e86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86/d0e55fb5-7c4e-4041-b853-ad74b8542e86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:65:bb:18:51:20:de:31:2a:70:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e55fb5-7c4e-4041-b853-ad74b8542e86
        Validity
            Not Before: Aug 31 15:59:28 2026 GMT
            Not After : Nov 29 16:59:28 2026 GMT
        Subject: CN=be6e8943-236f-420c-97d0-7c160a48e7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9a:a1:1c:c1:36:34:e2:04:d5:6f:6d:3e:c6:
                    73:e8:30:a7:a5:30:ad:d1:78:80:dd:1a:c5:f2:95:
                    48:8f:86:5c:36:46:6b:2e:7b:31:79:0e:24:e5:38:
                    7b:d4:db:f8:f2:05:aa:a2:27:c4:95:a7:60:cc:09:
                    35:df:8c:79:25:89:d5:a9:cc:30:7f:b2:8e:46:0b:
                    6d:da:29:e0:dd:56:a5:cb:63:d8:30:cf:72:dd:32:
                    3b:07:4a:97:ed:cc:0e:50:6f:d4:13:1d:da:37:3b:
                    41:66:41:47:28:d7:84:27:f5:ea:67:05:29:0a:5a:
                    0f:f8:c5:4f:20:e5:ec:ea:a2:b6:cd:e1:8d:93:8d:
                    ab:0b:25:3a:2d:03:aa:3a:7e:db:9f:d4:65:d1:33:
                    6b:64:a5:3f:87:67:cd:43:44:a9:2e:d9:87:5c:03:
                    83:27:23:aa:55:32:ca:38:b2:a2:6a:84:f7:1c:c1:
                    9a:30:da:75:47:5d:d6:0a:be:35:2b:6b:2f:52:0f:
                    b5:aa:62:21:79:f5:24:a1:5c:7e:45:2f:8c:0c:b9:
                    35:a4:84:c2:00:f0:e2:cf:46:04:29:8c:86:16:29:
                    9c:bb:33:b6:fd:3a:a8:54:98:c9:62:56:4a:00:db:
                    c6:50:8c:bb:ee:bd:01:98:25:9c:be:a9:23:08:b9:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F7:8F:8E:EF:0E:34:3D:EF:02:83:3A:00:87:A5:28:AA:1A:FB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86/fc9ecd57-a5ea-3882-9612-bd91510ac411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86/d0e55fb5-7c4e-4041-b853-ad74b8542e86.crl

            X509v3 Authority Key Identifier:
                keyid:50:F4:9B:3B:6F:60:84:6C:76:5A:85:5E:71:1B:36:29:78:20:1F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d0e55fb5-7c4e-4041-b853-ad74b8542e86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:1f:14:a5:d3:8d:1a:28:c7:a1:b1:31:ca:a3:07:b4:fd:76:
         4b:9a:d2:87:60:66:7d:41:8c:6c:c8:28:1d:c8:97:e3:ec:80:
         de:62:68:98:c1:1f:de:32:6c:a9:d2:b7:e5:56:6a:99:35:63:
         26:2e:36:02:16:e6:1c:84:ee:20:84:b4:06:67:c2:6c:9c:fb:
         dc:0f:6b:88:f4:b4:ed:c1:18:ef:6b:a9:a5:38:1a:2d:0e:f7:
         d9:8f:a1:4f:f0:fd:70:c4:5d:56:e8:ed:55:cd:6c:92:76:b5:
         99:74:bc:e4:7f:39:3a:27:29:89:3d:7f:16:eb:f9:ab:4a:f4:
         26:20:78:81:57:f4:d9:fd:19:9f:d7:3f:5f:39:da:ed:77:33:
         d3:53:07:12:55:e2:23:94:5b:87:d3:c4:05:b9:aa:93:41:84:
         3b:60:82:6b:a5:c0:58:ad:4e:76:06:89:3b:7c:7c:a7:e8:2e:
         99:b9:63:fe:e5:74:1d:81:55:4b:a9:14:58:ad:ee:b9:aa:4b:
         06:46:b3:f8:55:34:55:e2:bd:ee:fe:df:1e:38:05:cb:fb:d9:
         00:c4:07:af:1e:71:7c:e8:0f:f9:45:45:3f:87:f0:35:28:f0:
         c8:ba:63:5c:32:99:41:69:ec:5d:fb:fe:cf:53:69:58:5d:b2:
         da:87:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:36:22 2026 by rpki-client