Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a53e6da9-77fb-38ee-851b-f50d43d0ba9e.roa
File:                     a53e6da9-77fb-38ee-851b-f50d43d0ba9e.roa (raw, json)
Hash identifier:          07uFmo0WsnN3D7ICHTESPVahx6VW18cUJPfXmFqYOLU=
Subject key identifier:   A6:81:79:AC:CE:55:D6:E3:06:D0:A3:1D:B8:3D:17:89:C9:D6:12:FD
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584F03A7954FEB12865BEFF0DE40
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a53e6da9-77fb-38ee-851b-f50d43d0ba9e.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        146.197.80.0/24 maxlen: 24
                          156.37.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:95:4f:eb:12:86:5b:ef:f0:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=e8275923-0f21-42ea-a26c-fd6c498c3cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:35:d6:11:7d:10:50:68:a1:b3:f9:f1:a5:
                    65:8d:a0:10:5d:58:83:da:d5:ed:86:1f:d2:7a:79:
                    6a:f8:73:46:c8:9b:2b:09:d5:ac:a4:86:56:06:78:
                    14:b4:ae:5c:66:ac:40:86:ac:5a:9f:de:15:67:da:
                    5b:10:42:3e:7c:ac:5e:f6:ce:51:d1:b1:9d:ae:bf:
                    db:be:b8:88:57:d6:49:ae:10:09:f2:63:f4:79:9a:
                    b0:cb:f7:69:81:9d:61:4a:9d:5a:9a:74:a8:17:0d:
                    ff:c5:18:a2:b2:5c:5e:27:3c:00:da:14:7d:95:2c:
                    c4:b5:79:d7:74:5c:7a:2f:a1:77:fa:06:46:2d:44:
                    23:4e:59:bf:da:59:91:af:b2:d8:dd:de:02:0d:41:
                    3d:5c:a0:34:4e:72:81:57:4d:d0:cb:20:9c:cc:74:
                    52:d9:95:57:fe:1b:52:9e:f2:4d:1c:a9:71:6b:70:
                    46:95:16:5e:db:ae:b4:66:1d:18:8e:21:5c:6a:f9:
                    8a:78:fb:4a:43:fb:91:9e:d1:fa:55:7d:c0:d4:ba:
                    c0:bd:90:39:eb:52:b9:9e:d9:52:b7:a4:73:54:e1:
                    0d:d1:e2:ce:b4:46:ab:b1:c0:ee:3f:c2:27:ab:fb:
                    0c:d7:1d:c8:09:21:06:76:5b:a9:3c:95:5f:65:3b:
                    bf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:81:79:AC:CE:55:D6:E3:06:D0:A3:1D:B8:3D:17:89:C9:D6:12:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/a53e6da9-77fb-38ee-851b-f50d43d0ba9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.197.80.0/24
                  156.37.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a1:82:40:7f:8d:56:9e:53:26:3d:d6:c4:11:86:37:d7:a5:
         5a:42:49:26:b7:e1:28:1f:bf:fb:db:c9:ce:c8:f0:30:90:1d:
         7b:00:b8:d0:7f:f5:cb:e8:81:bf:26:3d:7e:87:91:d0:96:39:
         2a:59:5b:d7:82:c4:e7:ab:37:62:81:2e:5b:ba:4f:7b:0a:51:
         02:01:96:e4:74:df:a5:37:18:a8:47:f7:db:73:95:99:77:1a:
         06:47:93:48:29:d8:cd:0a:76:4e:a5:d9:26:2a:0d:af:99:3e:
         9f:85:3b:cf:76:e2:b8:2a:2b:2f:ba:d1:fa:aa:f2:bc:03:8f:
         94:8c:1f:4b:de:d4:6c:30:ba:7e:6c:24:69:b5:97:25:38:da:
         c9:3e:55:4a:df:e4:ba:86:68:24:a4:e0:90:7b:b5:4a:c1:9c:
         f0:24:58:b7:2d:53:ba:a0:ca:71:3e:f2:c5:5a:82:08:b3:55:
         b8:c9:aa:3a:db:38:79:b9:20:dd:5b:f2:5e:f2:4d:fc:7a:ef:
         2e:dd:c2:bc:fc:6f:39:3a:c8:c0:7b:d6:2c:2f:4a:79:e9:45:
         5f:16:73:b7:f9:db:31:6c:5b:f8:50:a5:ed:cc:59:26:07:3f:
         df:91:b0:14:bf:32:ea:5b:01:6a:7b:0d:a6:35:77:d2:60:84:
         42:33:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:41:35 2026 by rpki-client