Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa
File:                     583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa (raw, json)
Hash identifier:          L5J7rX1Y4o8W0hCm+TQPToac9pACkVEjvv6ULoBQFl0=
Subject key identifier:   DA:97:E8:18:76:10:E4:B7:B3:A8:15:8A:7C:2C:AC:27:9E:2D:D2:71
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584EA7950BAAB2EB0155088044C0
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63293
IP address blocks:        157.240.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:0b:aa:b2:eb:01:55:08:80:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4080147f-e632-4e30-8efb-7ff7c0c60cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:96:89:4b:2e:51:b9:eb:1e:e6:71:2e:e0:a2:
                    ec:ba:d4:86:d0:3e:07:d2:fc:47:4d:d3:be:a0:10:
                    dd:e8:ad:40:2f:36:f8:bc:15:ef:98:39:82:e1:f6:
                    a9:2d:b1:0b:a2:75:51:30:ee:2e:f4:d1:0d:11:fe:
                    2a:1c:ca:fc:cd:42:8d:7e:70:6f:fb:8f:45:bc:ee:
                    b1:ec:2e:0c:5a:b2:7e:4c:3d:63:d3:56:53:dc:cb:
                    1e:58:8e:3f:f9:2c:d3:ee:88:db:ae:51:7e:1a:4e:
                    16:83:da:9f:da:a8:82:f3:f1:df:2e:93:b5:ab:8a:
                    49:91:19:0d:42:d6:1d:29:8a:81:bd:f3:89:f1:63:
                    aa:ac:f9:2b:5f:14:59:12:12:66:1e:b8:f1:2f:eb:
                    3f:c1:56:30:9f:e9:d2:78:5d:44:e9:09:24:c6:f0:
                    d5:ed:c6:58:d1:e7:c1:73:5b:f8:b9:aa:b9:fb:7b:
                    21:e9:7b:3c:2b:72:44:93:69:ee:97:61:de:06:7e:
                    f5:fb:75:2a:7e:2c:d2:8a:1f:5c:4d:da:6b:d2:6c:
                    1c:90:e8:34:44:8f:6e:1d:16:0e:eb:e8:f9:bb:cf:
                    f9:db:cd:a3:49:5c:47:4f:59:50:16:1b:7a:c7:23:
                    c0:b7:cf:6a:7a:a6:8e:0e:1a:fc:3b:bc:35:bf:29:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:97:E8:18:76:10:E4:B7:B3:A8:15:8A:7C:2C:AC:27:9E:2D:D2:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/583d0e4a-5ac2-3ae0-ba85-0df6f49c33d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.240.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:bd:82:e5:97:de:e7:8d:55:45:a2:11:57:12:50:d0:37:a2:
         a2:09:da:67:e3:90:60:69:c7:dd:61:a5:f6:aa:20:b6:52:3a:
         db:9e:69:b9:91:4d:ad:30:d8:99:f3:48:9d:9a:08:9e:0f:24:
         43:3e:c1:6c:5a:78:96:b5:63:f9:56:ac:c4:6f:80:06:23:64:
         40:8f:79:d5:82:28:f4:df:fb:55:fe:a0:75:b5:2d:17:eb:38:
         10:f8:24:c8:04:29:c3:67:1c:60:30:dc:9e:9c:07:17:21:d2:
         7d:88:26:bf:17:d1:4a:c4:fe:15:2a:29:2d:48:20:f6:59:dc:
         48:e6:fe:86:2f:ba:95:47:0a:ad:f6:ca:db:d2:4e:95:d3:37:
         72:4d:ca:c6:db:ac:76:8d:6d:cd:2e:8b:ca:12:4c:c1:3a:f0:
         9b:37:03:3d:18:d8:8a:a7:fc:70:b4:11:d1:d5:02:1b:a6:d7:
         4c:81:51:70:f9:bb:00:bf:24:a9:9c:ef:8f:53:32:e3:2a:ef:
         28:6a:a7:0c:07:cd:d8:a2:35:a8:97:e3:ab:1d:9c:5e:33:b5:
         4d:38:76:aa:80:dc:ab:70:25:18:b4:2f:e0:f0:4a:eb:93:6b:
         aa:0f:c2:02:92:67:ca:10:0e:99:60:02:19:5c:44:23:1f:ca:
         42:11:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:59:51 2026 by rpki-client