Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/aa132d09-6f7c-30f0-91e8-edc325846360.roa
File:                     aa132d09-6f7c-30f0-91e8-edc325846360.roa (raw, json)
Hash identifier:          BVbZRx4Rx6Elw/cmnZe7/tqQzAppzXyxeLTGAyDmyho=
Subject key identifier:   CF:BE:80:67:98:2D:7E:EF:04:90:0B:D4:E8:13:5B:FC:17:BB:FE:E3
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584E7FFA2FBA6ECB2B801C03E700
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/aa132d09-6f7c-30f0-91e8-edc325846360.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     55091
IP address blocks:        198.73.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:2f:ba:6e:cb:2b:80:1c:03:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=69ccf1ae-dd9d-428f-a179-56e411320053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:84:fb:51:7e:64:93:a2:df:01:ea:c3:ad:
                    13:82:77:7f:ec:fb:0d:22:73:2a:0b:40:b7:0a:34:
                    fb:00:30:ac:de:ff:9d:4d:da:48:a6:6c:d4:c1:a8:
                    c6:79:e6:75:14:33:4f:46:8e:5c:3e:99:3b:20:04:
                    48:78:ed:4d:5c:50:6b:cc:84:54:4a:25:d0:5d:33:
                    51:a8:a2:74:2e:9e:6f:1b:62:58:7c:cf:31:58:bd:
                    68:7c:81:71:1a:a1:a2:55:28:34:97:75:9c:29:fb:
                    12:25:fc:d4:b2:54:0c:0d:15:87:17:2f:87:b2:7a:
                    59:11:81:9a:3f:9a:79:fd:c4:a1:70:86:12:a4:c2:
                    39:16:bd:b7:7f:7b:a1:07:99:d1:30:19:01:3a:88:
                    92:c4:96:50:a3:f0:dc:87:10:32:41:b7:bf:0e:8d:
                    07:d5:e5:a3:80:72:9f:bd:9a:cd:7b:bc:c4:4d:07:
                    6a:df:28:0b:59:8d:6f:f3:01:f8:5a:eb:73:fa:28:
                    99:f1:04:c8:e6:4a:75:7a:90:00:67:87:15:a6:b6:
                    01:28:25:10:31:8c:58:d4:6f:8b:70:28:39:7c:9f:
                    c2:61:69:b4:6f:2e:1d:56:03:a1:91:53:46:3f:c3:
                    31:b2:3c:6b:b9:96:54:2c:c0:5a:76:83:5a:ae:93:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BE:80:67:98:2D:7E:EF:04:90:0B:D4:E8:13:5B:FC:17:BB:FE:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/aa132d09-6f7c-30f0-91e8-edc325846360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ef:d6:a7:c9:11:c2:44:29:15:5c:43:f7:eb:e7:ed:f2:08:
         10:35:31:50:52:22:48:4a:1b:53:2f:1d:0d:56:77:96:48:7b:
         47:34:f3:88:ad:73:74:2b:dc:87:d8:fd:9b:ad:24:43:56:12:
         e8:96:c0:29:e0:2e:28:c7:41:2a:4f:fa:c2:5a:75:86:cd:4b:
         8e:34:3b:d7:59:14:44:a5:89:3a:6c:d6:03:55:45:93:0f:36:
         03:10:19:04:77:f6:1e:04:ae:89:ab:58:df:e7:02:d5:68:77:
         4d:9e:ea:6f:01:a9:e3:6c:13:f2:30:79:6b:ed:2e:cc:43:57:
         31:f1:1f:ff:16:3c:d8:1f:c9:8f:5b:59:5e:82:1e:7e:38:1c:
         3e:44:03:13:f8:bc:59:cb:a4:32:60:bd:1a:6f:84:27:ec:64:
         73:14:ad:1d:03:17:22:07:21:d0:c4:fd:83:d7:49:ea:2b:9f:
         c0:a6:aa:7f:f9:c5:b5:52:18:80:d8:ea:05:f0:94:7e:e4:0a:
         c7:2e:6f:f0:15:01:72:aa:67:6b:77:aa:7c:63:aa:a9:0f:fb:
         4f:a8:e9:eb:57:0f:85:df:ac:e2:31:27:6a:1d:11:96:ef:a8:
         92:23:59:a6:ad:91:dc:01:af:fb:8e:2f:9e:94:53:b9:47:e0:
         e9:52:24:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:50 2026 by rpki-client