Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71d11e84-cfdd-3e71-a153-f0d244a62046.roa
File:                     71d11e84-cfdd-3e71-a153-f0d244a62046.roa (raw, json)
Hash identifier:          6Jnq385gunFvLoa9N74T5/3F7ED3pAhUuWx+LgBlQoA=
Subject key identifier:   AF:EF:BF:CE:8B:6B:59:22:8E:90:F4:B7:FB:97:C4:70:7C:A7:4D:86
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F38B274BAE558716520077980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71d11e84-cfdd-3e71-a153-f0d244a62046.roa
Signing time:             Sat 19 Sep 2026 01:00:12 +0000
ROA not before:           Sat 19 Sep 2026 01:00:12 +0000
ROA not after:            Fri 18 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        192.179.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:b2:74:ba:e5:58:71:65:20:07:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 19 01:00:12 2026 GMT
            Not After : Dec 18 02:00:12 2026 GMT
        Subject: CN=5ec7e4e2-2138-40cb-8790-b92683c2688e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5e:9e:fe:f9:28:96:d6:05:6a:91:41:b4:3f:
                    1b:5d:b0:40:a3:68:be:83:a1:7e:a8:34:22:51:37:
                    e2:b3:40:38:98:8c:4b:de:4d:c8:68:a4:3b:96:f2:
                    dd:9c:3f:d6:b8:00:57:90:44:81:69:66:3e:ed:86:
                    77:cb:cd:b6:af:b8:71:dc:41:f0:66:86:fd:a2:09:
                    37:cf:43:b1:f8:77:fe:1c:0f:6a:8a:81:a2:1b:1d:
                    e1:ba:d4:b5:80:b1:00:3c:ef:d9:e1:9e:ed:d0:2f:
                    64:ef:03:b0:7e:67:ae:03:59:4f:30:dd:34:10:a6:
                    d7:a0:75:b2:2f:ab:4a:d6:eb:f2:e5:27:c3:fd:d3:
                    2d:92:bb:05:d0:d1:ce:2d:ad:f5:e0:bc:99:24:6e:
                    ca:a5:ba:bc:72:4b:5e:da:46:f9:65:c2:aa:d2:2d:
                    55:c3:80:e6:0b:62:ed:92:7e:0a:19:64:4b:87:ee:
                    23:c9:9c:ee:56:b1:f1:d7:4f:87:cb:98:5f:87:79:
                    14:24:22:dd:ea:5a:10:74:46:4a:f8:d7:99:8a:d0:
                    39:0e:c8:5d:69:5c:40:fe:cb:62:23:3a:80:ea:0c:
                    f0:df:aa:c2:e4:cb:64:f1:6f:ad:6c:ee:8a:ee:8b:
                    9a:5a:6f:99:ef:73:ad:0a:30:e7:84:a4:29:a9:19:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EF:BF:CE:8B:6B:59:22:8E:90:F4:B7:FB:97:C4:70:7C:A7:4D:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71d11e84-cfdd-3e71-a153-f0d244a62046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.179.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e0:59:d1:c7:f7:f0:3d:7f:6d:1f:5f:1b:b4:56:70:86:0d:
         3e:49:a3:a8:70:32:b2:f4:52:e0:5b:10:39:ca:ce:b9:cc:6d:
         54:bd:8e:5b:6d:52:34:de:a6:5d:70:b9:60:9b:cf:3a:14:3b:
         0d:66:b4:ef:2b:de:09:e7:70:1d:aa:1a:f1:83:42:21:c6:0e:
         be:53:db:86:37:8b:a9:73:75:b4:92:c4:c2:94:fc:ea:52:21:
         5d:82:54:35:c7:e1:2a:04:53:59:f8:00:20:1f:80:21:1b:8c:
         29:ae:1e:d6:9a:b1:d2:d7:de:28:a4:9f:59:66:fb:24:ff:85:
         4a:64:e4:c2:b0:84:bf:c9:83:c1:5a:e1:25:49:60:71:5c:e2:
         e7:58:a3:91:31:dd:02:53:73:61:93:62:18:20:7a:e0:e7:5f:
         fb:64:5d:7c:f8:4a:73:35:8b:e9:59:5e:4c:92:af:75:70:d0:
         fd:df:d0:66:0d:60:40:d2:e4:22:df:e1:35:98:dd:65:84:20:
         b1:4a:f3:fb:06:8d:f7:f7:f5:32:c3:ca:ec:7e:fb:8e:e0:fb:
         5b:ca:8a:a2:ef:a3:ae:55:72:d1:80:e7:ed:4f:bf:59:8d:eb:
         19:16:58:17:16:7f:06:2c:3e:fa:29:bf:f7:35:5c:da:a4:37:
         f7:07:82:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:21:12 2026 by rpki-client