Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ae47f75a-300c-3406-a4a2-962217f89fec.roa
File:                     ae47f75a-300c-3406-a4a2-962217f89fec.roa (raw, json)
Hash identifier:          ysYo2nSUw/lpA+Nr4c8RZd6D4YWflMxsat3LaqXLgC0=
Subject key identifier:   C8:4B:79:44:DC:DC:8C:2F:31:5D:B7:6C:3D:56:E6:36:64:E3:A9:6E
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F4328584E7E94E8932CFEB0AC2A771280
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ae47f75a-300c-3406-a4a2-962217f89fec.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     394018
IP address blocks:        199.5.26.0/24 maxlen: 24
                          2001:500:a9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e8:93:2c:fe:b0:ac:2a:77:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=453f92bc-1fca-4ebc-b76c-1557d853de0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:46:7f:b7:6e:ca:fc:bd:2a:e5:c8:2c:f6:
                    64:79:06:bd:08:8c:ed:f6:53:14:f8:75:f5:8e:25:
                    36:9c:d4:42:c2:54:ae:21:7f:73:e1:6e:2a:c8:2d:
                    5c:0e:32:77:ed:a0:7e:dc:8e:38:99:43:92:b0:57:
                    7b:3b:f8:e0:c4:aa:27:18:2d:d9:64:1d:95:c2:86:
                    0a:ec:86:26:1a:6f:55:1f:65:f8:c7:d9:eb:c9:d6:
                    c5:b2:3e:6b:d7:e5:1a:a4:c4:1e:cc:fb:31:98:a9:
                    81:31:2b:73:21:64:d0:fb:36:2d:03:cc:66:1f:b5:
                    62:d5:26:e2:b6:1a:8a:00:d6:4f:09:8d:24:ce:5b:
                    bc:2e:95:31:ab:5e:68:58:e1:69:ed:d5:52:1c:36:
                    ca:7e:1c:5f:f3:08:c6:c3:79:cb:0c:99:12:47:21:
                    fb:7f:a0:25:bf:99:6e:fd:72:c7:90:13:dd:23:6a:
                    8c:0a:48:79:ca:ac:72:02:ce:d4:ef:1d:d0:13:db:
                    a1:9a:47:38:a6:21:31:d5:dd:bd:37:06:04:b9:c6:
                    a2:50:39:bd:2f:e6:bd:26:6b:a8:02:69:02:cc:f8:
                    2d:0e:71:36:6f:02:cb:fb:ae:6f:02:db:cf:a8:cd:
                    ca:dd:5c:89:24:f1:73:f6:9e:e3:12:f1:35:34:fd:
                    0b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4B:79:44:DC:DC:8C:2F:31:5D:B7:6C:3D:56:E6:36:64:E3:A9:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ae47f75a-300c-3406-a4a2-962217f89fec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.5.26.0/24
                IPv6:
                  2001:500:a9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:14:a4:af:0b:08:e7:08:26:45:8c:8d:b4:47:cc:39:61:5c:
         5e:1b:54:7f:0d:05:5f:c8:ad:67:3a:36:85:19:ef:0a:29:b0:
         8c:a4:01:e5:6a:60:db:4c:af:90:f4:5d:ef:f0:8a:8b:e9:96:
         31:da:35:4e:2a:35:e5:29:b3:56:de:6a:b1:b9:71:c8:87:b1:
         66:f1:3c:cc:99:28:aa:03:31:a7:94:3c:59:22:dc:63:7f:7f:
         08:b9:dd:b7:23:d6:78:a9:f4:0d:f2:d3:40:3e:65:4c:b7:20:
         66:4a:2a:34:86:cd:99:bc:34:ce:c4:bb:65:a5:72:a5:6b:36:
         39:3a:76:33:9b:6e:a6:9d:23:bf:f4:9e:65:6d:a9:ff:6e:5f:
         bb:71:00:35:45:42:0f:a5:ce:c8:b4:bc:a6:62:d6:85:4f:49:
         27:85:a3:87:e5:fe:2a:1b:69:92:7d:d2:29:68:5a:6a:0a:71:
         0b:ad:98:1a:65:72:63:70:bf:26:fa:06:60:93:fc:30:ee:9d:
         81:7f:78:a5:df:3c:f0:48:5e:a5:69:d6:16:b1:e1:43:67:7d:
         f3:07:e4:e1:0b:59:97:39:1f:9d:7d:76:ba:bc:e1:5a:ed:6d:
         7c:0c:3f:b1:b0:27:83:aa:35:85:e0:6f:84:81:53:dd:74:68:
         21:ea:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:29:25 2026 by rpki-client