Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/e05ef529-0d11-3c74-8d7a-600d0f31de61.roa
File:                     e05ef529-0d11-3c74-8d7a-600d0f31de61.roa (raw, json)
Hash identifier:          F5oTYh1jEv5y9DNZMLGUm+gdVG9/8qAdLQ/U36iqGSw=
Subject key identifier:   DE:C6:58:FD:C0:97:5A:5E:75:29:31:6F:64:58:64:AA:70:6B:7F:D8
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584EED52185C3A0C94F6231B5B00
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/e05ef529-0d11-3c74-8d7a-600d0f31de61.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     5662
IP address blocks:        157.166.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:18:5c:3a:0c:94:f6:23:1b:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=91ea1c52-227d-4e9d-9274-1c5b510df3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:f3:75:27:82:d1:36:a4:03:37:7b:62:ee:
                    85:ca:75:14:9c:3e:3f:bf:80:4b:15:9f:04:21:3e:
                    df:bf:91:b5:83:5c:fc:3c:89:51:08:06:ac:7c:3e:
                    07:fd:8e:50:c5:9f:b0:20:d2:d7:d8:e5:99:23:28:
                    c7:28:ea:eb:16:3c:68:da:5e:06:50:bc:9a:6d:4e:
                    d2:10:d1:30:11:4e:f8:79:c7:55:15:8d:eb:59:2d:
                    51:c1:b7:6c:40:68:0e:ad:5b:96:64:1c:19:0b:01:
                    b1:d3:c3:54:4b:7c:3a:a9:98:81:66:05:70:c8:6b:
                    d1:a1:71:7c:80:e1:a5:ad:ad:b5:5b:5b:ca:a5:cf:
                    73:e1:0f:47:d6:25:2d:96:0a:be:08:8b:d8:03:c8:
                    19:dd:20:8c:2a:aa:90:49:a1:4f:8d:86:42:c7:c0:
                    40:6e:1e:7a:a6:78:73:f8:19:b7:cd:37:16:e9:e9:
                    ae:a8:e7:70:28:66:5f:ec:50:4b:7c:ed:9a:c1:9d:
                    83:c4:91:80:b2:0c:75:8e:01:4d:d3:a2:b7:8a:e5:
                    1d:6c:fe:9c:ea:05:7a:25:98:f7:ad:ec:c3:2d:08:
                    21:22:00:eb:34:8b:3c:fa:ab:f7:ef:4b:93:2e:c6:
                    76:d6:61:9e:8d:f1:a6:21:0c:bb:10:8d:db:4d:29:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C6:58:FD:C0:97:5A:5E:75:29:31:6F:64:58:64:AA:70:6B:7F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/e05ef529-0d11-3c74-8d7a-600d0f31de61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:28:4c:82:ec:c4:e6:2f:b9:63:2a:3b:23:47:ef:89:9c:b7:
         3d:4b:29:a2:fd:15:5f:2a:c1:6b:f9:07:d4:40:3f:93:b5:63:
         30:e4:85:4c:7d:59:dd:97:b8:10:70:20:27:f3:06:c3:b4:eb:
         8c:03:25:c1:bc:72:20:26:8f:aa:3d:bf:6d:3b:18:64:02:ae:
         b5:aa:a0:ce:cc:26:d6:54:9d:29:54:bd:94:79:7b:a5:eb:77:
         e7:07:f8:4c:67:14:65:2d:b3:1c:64:1c:a1:65:cd:2d:53:96:
         0a:59:8e:64:1b:1a:0f:b5:a3:99:ac:85:e2:43:d8:fa:3d:bb:
         eb:98:be:1a:b7:52:ac:87:55:dc:0c:10:35:72:f5:05:4c:28:
         40:12:33:5f:ec:2c:85:0f:d0:48:dd:cf:84:a2:56:75:34:4f:
         df:76:95:6d:f2:c4:d8:20:49:f7:91:ef:f5:aa:8c:09:d5:fb:
         b7:00:a0:b6:75:7a:1d:c2:ba:c7:3e:cc:1e:27:20:c3:cf:4e:
         a1:a5:71:55:6e:7c:f5:9c:ce:b5:13:51:39:cc:fb:3e:dd:be:
         01:b5:fb:d0:0c:6c:e4:01:28:d2:ad:a6:e1:62:1c:c8:96:f5:
         ff:cc:33:09:6e:19:76:57:7a:b2:c4:58:9e:13:41:4d:80:be:
         6d:4e:08:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:45:50 2026 by rpki-client