Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa
File:                     583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa (raw, json)
Hash identifier:          3dYL7Vh2KV3fctMqbajkLXNZtwkCq3LQWpM+cPxPTKs=
Subject key identifier:   9F:E3:8B:5B:B7:21:48:39:A4:EA:B4:0F:4E:A0:1E:1E:7F:3E:96:AF
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584F498AEE0C2F07B5198C224E40
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63293
IP address blocks:        157.240.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:ee:0c:2f:07:b5:19:8c:22:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=acac2080-0c90-477b-bf50-05d4c1581cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:05:03:a5:d6:cc:de:1b:36:46:dc:4d:ee:
                    7e:8e:8b:b0:b2:41:b1:86:da:ea:67:9b:9d:32:f7:
                    28:01:47:16:1c:77:c8:5c:19:58:57:ea:2b:5f:32:
                    ad:fd:f3:47:df:85:70:81:84:eb:5f:3c:2f:80:70:
                    95:6b:e2:69:c8:6a:6a:17:d0:82:4b:9e:21:6d:8a:
                    17:96:6c:85:01:aa:db:e2:48:0a:eb:d7:bf:46:92:
                    fe:7d:1c:1d:47:a5:ea:ec:e6:ed:e5:84:8a:50:8c:
                    8f:84:d2:dc:05:f9:97:fb:85:1e:a6:86:34:08:84:
                    26:46:7c:ac:52:75:e9:c6:1a:69:ce:76:7c:0a:10:
                    7f:09:5d:5f:ba:7f:d1:eb:17:5b:1f:b8:cd:03:83:
                    e8:a7:79:77:bb:4c:af:7b:0b:a6:fc:d8:0a:32:97:
                    9a:22:1b:b6:9a:9a:26:c6:14:a1:3d:5e:6e:73:ab:
                    5d:68:20:1b:25:da:5f:22:57:11:10:79:1d:8d:ce:
                    f4:1b:6c:6c:ee:c9:92:dd:8b:4f:77:e0:ab:9f:ae:
                    21:f9:23:80:3d:2a:10:c9:5f:1b:35:4d:c7:e6:05:
                    61:b8:24:af:7d:89:63:5d:28:f9:6e:32:79:4f:1d:
                    8f:7b:53:71:94:53:fa:75:95:2c:da:95:bb:73:60:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E3:8B:5B:B7:21:48:39:A4:EA:B4:0F:4E:A0:1E:1E:7F:3E:96:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.240.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:8b:ae:d6:6e:63:c9:4b:53:0b:01:d4:76:4b:09:eb:a2:74:
         a1:4f:2d:06:c9:82:80:43:11:a7:23:a9:1f:38:8f:d1:64:6f:
         93:d6:2f:05:0b:86:6a:c5:93:92:a3:1f:2c:9d:3b:c5:45:13:
         a5:47:37:af:73:0b:c9:e2:59:c9:7f:1b:84:df:b2:64:c1:77:
         be:5d:f9:a2:33:be:6c:cf:67:6a:8c:d1:c7:24:19:d8:d0:61:
         15:08:39:a5:f7:60:b7:67:a6:4d:08:27:ef:3b:78:f9:ab:80:
         f1:be:ef:50:fd:75:f2:a2:cf:8a:15:10:24:38:0b:13:4e:e1:
         d0:da:4c:8d:1f:64:19:57:06:13:59:09:1a:79:bc:20:b6:28:
         40:e6:da:5c:c5:77:8a:6b:4a:06:57:6b:23:62:c1:29:ad:b0:
         ac:55:e8:1b:46:32:f2:d7:2b:fd:ac:19:8d:f3:77:87:82:52:
         78:35:ab:c2:13:4e:75:74:44:3d:a3:93:59:79:60:1f:b2:94:
         fd:9e:4a:1f:49:51:66:6e:89:99:27:d1:27:10:33:40:4a:1c:
         b9:f1:f7:cb:5d:42:0c:84:83:4c:20:c8:57:fa:f4:f3:0a:c2:
         63:7f:f0:92:b2:2e:c6:fc:00:1f:98:cc:41:30:be:90:0e:8d:
         69:71:19:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:26:17 2026 by rpki-client