Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa
File:                     d5cf8319-403b-387c-a79b-84a59277e3f3.roa (raw, json)
Hash identifier:          nbjleM3p9LNOJ3VvHPsdDiLSjAXOYzUMlp8KuKvYyW4=
Subject key identifier:   5F:A7:4B:74:84:3E:30:C8:EF:AC:58:9E:23:E1:B2:79:5F:A3:4A:8C
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584EFE12309CA60FC21F5A1DE580
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     54535
IP address blocks:        156.37.196.0/24 maxlen: 24
                          156.37.197.0/24 maxlen: 24
                          156.37.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:30:9c:a6:0f:c2:1f:5a:1d:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=52ae2103-977a-413e-8f35-f596c205c255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:55:11:1f:77:64:d6:58:57:b7:d6:46:14:
                    fa:71:b7:88:b9:c0:d8:83:d7:10:d4:02:0c:39:22:
                    02:b8:8c:cc:cf:45:7d:bd:cb:1c:62:fb:1f:41:02:
                    5e:4e:7c:34:49:a2:b9:37:d8:4e:18:e1:b7:66:32:
                    39:73:a2:1c:6a:9c:6a:d2:cf:98:2c:bc:e4:20:a6:
                    0c:50:0b:f8:ef:31:fe:b2:96:a6:c7:6b:c4:2b:45:
                    78:00:fb:cd:f4:b2:3c:74:db:af:50:12:e1:4b:a8:
                    bd:75:80:51:d6:12:32:8b:5b:e8:b7:c7:32:86:c6:
                    37:f4:90:52:0b:3f:7f:26:95:28:35:b3:d9:4c:23:
                    e6:29:0a:14:1d:26:54:1d:c0:f3:4d:c9:1e:d6:08:
                    9a:32:86:d1:b7:0e:49:61:c5:28:d6:25:31:33:ef:
                    f6:cb:f1:a6:bc:bd:f5:6d:f2:4f:54:95:3f:c7:02:
                    40:16:47:f2:ce:ea:1a:66:83:58:a3:df:72:15:ce:
                    a5:2e:cc:47:e1:41:f4:e6:1c:bc:85:e6:79:1a:89:
                    a5:a7:3c:0e:dd:f0:91:2f:eb:e6:bf:50:50:bf:4e:
                    bc:7a:42:2d:c2:02:0c:32:da:97:e2:ce:54:73:f8:
                    45:b4:6b:eb:d1:bc:ac:bc:8b:21:59:f1:93:6b:8e:
                    47:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A7:4B:74:84:3E:30:C8:EF:AC:58:9E:23:E1:B2:79:5F:A3:4A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.37.196.0-156.37.198.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:4f:fc:a3:9f:d5:3f:1e:39:4c:0c:19:3d:60:48:43:18:99:
         ff:9a:30:4e:d6:f1:53:53:9b:6a:cf:28:9a:b2:da:32:3a:ba:
         8c:45:90:f8:47:d6:a9:fb:06:22:9c:ed:64:87:2c:cd:2e:b4:
         ba:33:e3:75:ff:49:63:f0:8e:cd:50:c2:39:89:0b:9b:43:54:
         47:fb:f0:14:c4:1e:1a:2e:2c:2e:0e:c6:49:45:21:40:d4:6f:
         7e:97:01:bf:c1:23:f2:c5:d7:72:ce:a7:66:55:4b:af:4d:40:
         cf:dd:44:57:0f:ad:8d:55:95:16:df:87:63:2d:e5:ff:d6:1c:
         64:72:38:0d:dc:aa:f3:4f:28:c8:6f:7e:29:7c:59:99:2c:bd:
         f2:7a:84:18:3f:5e:2f:bf:dc:23:c3:ad:cc:6f:9a:ae:78:71:
         32:bf:78:71:05:bc:c4:39:7b:04:6e:ee:c5:82:4d:11:2e:3d:
         87:39:ab:bb:fe:35:d2:db:c7:25:a2:1d:aa:e7:d6:0e:c9:f8:
         eb:57:f6:85:4e:74:34:41:26:c3:a4:be:ee:b8:4d:ef:23:00:
         e2:79:d5:28:48:d8:67:6c:5b:ae:44:0e:b3:67:5e:3b:f2:03:
         26:fe:53:67:87:76:72:5e:75:e2:21:bd:76:fc:52:62:6e:be:
         cc:0b:9f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:35:02 2026 by rpki-client