Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa
File:                     a31fe149-f14e-36f1-82c6-a4875e810e1b.roa (raw, json)
Hash identifier:          U/aGvnAcfN+x/T2KvHtMwOA0CjBtlFzF4JP09iqieU0=
Subject key identifier:   B5:D8:4A:26:B4:8F:67:C9:9A:2C:40:40:AF:1B:B1:99:B2:79:B6:82
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584EFE1230A99FEFE7B5F0307624
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     54535
IP address blocks:        156.37.202.0/24 maxlen: 24
                          156.37.203.0/24 maxlen: 24
                          156.37.250.0/24 maxlen: 24
                          156.37.251.0/24 maxlen: 24
                          156.37.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:30:a9:9f:ef:e7:b5:f0:30:76:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=786c8d00-0eb9-44e8-9b5b-5587396fd053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:71:de:35:ae:9d:63:04:37:ee:07:a1:d1:af:
                    c8:83:cb:11:c5:14:e1:76:59:2b:eb:58:29:ad:b6:
                    c6:5d:5c:d2:88:ad:26:82:9c:e3:b7:b8:53:21:96:
                    88:53:9c:ac:75:3a:ac:86:3c:93:29:db:20:87:3f:
                    c2:64:9f:8d:fe:4f:05:47:f5:30:90:67:33:a1:c6:
                    6a:a1:c6:0f:72:89:13:79:cb:7c:30:36:c2:c8:31:
                    3e:df:24:fc:27:28:ff:7a:cd:21:e2:3a:ae:3e:95:
                    6a:8a:6d:c1:47:d4:2f:70:de:1d:88:86:11:0c:b9:
                    98:d2:48:a8:ef:f9:58:9d:90:8b:be:2d:56:e2:32:
                    c8:46:7c:1a:56:d5:b5:35:3a:3a:b8:22:91:f4:91:
                    a7:8c:ed:ec:f1:e7:6f:c3:fb:84:51:e6:94:32:fe:
                    02:75:83:91:a0:89:8d:22:24:74:be:6a:0d:51:e8:
                    f6:fe:12:bf:42:ba:da:9a:ef:b5:ed:80:a4:f5:e1:
                    59:16:9a:0a:a7:4c:86:5a:e1:98:c5:8e:18:47:de:
                    68:29:2d:cc:5c:05:04:22:af:8f:eb:f3:6e:df:95:
                    1b:a3:4f:4e:37:ac:c1:fe:9b:8f:5e:a0:2d:4a:e0:
                    8b:4e:e5:e2:9f:03:f7:e4:f6:02:74:c4:40:3e:b0:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D8:4A:26:B4:8F:67:C9:9A:2C:40:40:AF:1B:B1:99:B2:79:B6:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a31fe149-f14e-36f1-82c6-a4875e810e1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.37.202.0/23
                  156.37.250.0/23
                  156.37.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:91:83:0a:42:07:b4:ab:24:e3:44:76:5e:ac:ba:c8:ce:73:
         ab:27:4d:aa:35:df:e1:7e:a5:10:a6:a5:8d:b4:e0:cf:53:21:
         5f:4c:61:f7:ae:5e:ab:c1:94:a2:a2:70:45:5b:06:5c:3b:97:
         55:8b:98:3f:d9:ee:29:35:d0:2b:d3:96:9e:56:c2:de:7f:b3:
         71:55:55:20:e5:2b:e0:a5:2a:fe:20:66:40:7f:99:6b:df:f7:
         e0:df:6b:7d:e9:50:09:c0:6a:09:ad:26:06:59:60:81:6e:82:
         50:16:73:a0:08:2a:94:79:c8:9e:20:ac:0d:0e:48:d1:55:06:
         c0:d0:f3:43:ee:a0:bf:d9:6f:fc:d5:54:d8:4a:e2:43:b6:8d:
         09:ef:7a:6b:7e:e7:36:83:39:79:ea:7c:52:a5:ac:8d:68:79:
         53:ba:e2:6d:19:35:70:06:e9:27:ac:06:35:d0:6a:70:80:d4:
         d8:dd:dd:93:f3:00:0a:2c:c3:75:31:00:44:80:43:a9:a3:a4:
         e5:23:03:4e:3f:26:8c:8b:e5:0e:17:4f:49:3c:ab:a4:32:58:
         fb:4f:18:66:34:76:68:54:3f:4b:e7:0b:d1:2d:ff:20:ed:cc:
         34:9d:ec:86:66:1a:99:79:6f:7c:85:10:d2:3f:cd:f7:9e:25:
         e3:07:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:35:24 2026 by rpki-client