Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e605f42-0fd4-4aff-88d7-29269593b046/58eb8c43-75a8-3944-8236-e63b3f04b5f4.roa
File:                     58eb8c43-75a8-3944-8236-e63b3f04b5f4.roa (raw, json)
Hash identifier:          HevrLy49EUXAazIaHBf6gsCgsCJDX14bdN6Avs7B+Ok=
Subject key identifier:   28:B0:26:DA:71:74:3F:37:F2:D5:2D:9C:8C:08:BA:27:FE:26:76:F4
Certificate issuer:       /CN=5e605f42-0fd4-4aff-88d7-29269593b046
Certificate serial:       010D0C9F4328584F4974F87D35476925D9716280
Authority key identifier: 05:51:6B:E6:AC:20:BB:F6:4A:86:A8:0A:C7:D8:D2:58:2E:96:D9:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e605f42-0fd4-4aff-88d7-29269593b046.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e605f42-0fd4-4aff-88d7-29269593b046/58eb8c43-75a8-3944-8236-e63b3f04b5f4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397550
IP address blocks:        205.137.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e605f42-0fd4-4aff-88d7-29269593b046/5e605f42-0fd4-4aff-88d7-29269593b046.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e605f42-0fd4-4aff-88d7-29269593b046/5e605f42-0fd4-4aff-88d7-29269593b046.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e605f42-0fd4-4aff-88d7-29269593b046.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:f8:7d:35:47:69:25:d9:71:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e605f42-0fd4-4aff-88d7-29269593b046
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4e42edc6-41c1-46b6-8715-56f642b0d3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c5:01:00:12:07:3d:ca:fd:e3:0c:67:84:88:
                    ca:f8:2f:01:18:41:62:96:51:2c:53:3a:6b:7a:2e:
                    10:10:3a:f2:7a:a7:84:13:43:90:a0:ed:57:03:a1:
                    90:1a:9d:4d:5e:4f:46:4b:02:1e:6a:c5:d4:3e:1a:
                    6c:c5:49:ca:ce:d8:35:99:17:8e:b4:18:a8:1b:06:
                    68:7c:73:85:e1:5f:08:80:5e:85:a4:20:7a:77:21:
                    07:c7:bc:69:dd:d0:9e:32:3b:cb:f5:ba:ae:63:76:
                    d2:10:56:e2:87:35:a2:af:f0:50:4e:8c:a0:c5:92:
                    37:55:86:f2:92:1f:27:64:d1:a2:ea:2e:b3:b6:dc:
                    12:34:8a:b9:35:77:59:35:b5:cd:78:43:96:80:9c:
                    48:3a:fb:10:b9:b4:56:81:96:de:1b:8f:89:57:79:
                    dc:8c:85:bf:ee:9a:d0:54:46:17:8d:d0:a8:37:3e:
                    4e:a9:43:55:2a:5b:16:02:dd:f9:21:56:bf:e3:fc:
                    e1:f7:0f:b2:49:ac:f5:5a:b9:ef:e9:dd:dc:f8:1d:
                    9c:92:f2:f2:28:68:c9:5a:05:60:3a:39:bb:3f:01:
                    64:c2:bc:1d:aa:d4:4c:5a:6b:4f:63:71:30:dd:9b:
                    97:71:ea:3c:47:45:fa:61:4a:9e:1d:b4:b3:6b:50:
                    17:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B0:26:DA:71:74:3F:37:F2:D5:2D:9C:8C:08:BA:27:FE:26:76:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e605f42-0fd4-4aff-88d7-29269593b046/58eb8c43-75a8-3944-8236-e63b3f04b5f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e605f42-0fd4-4aff-88d7-29269593b046/5e605f42-0fd4-4aff-88d7-29269593b046.crl

            X509v3 Authority Key Identifier:
                keyid:05:51:6B:E6:AC:20:BB:F6:4A:86:A8:0A:C7:D8:D2:58:2E:96:D9:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e605f42-0fd4-4aff-88d7-29269593b046.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.137.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:73:0b:88:ee:92:d3:ae:44:0d:cf:50:8b:6c:a3:1d:71:86:
         5e:17:ae:82:21:41:c8:21:e9:7a:0d:d1:67:c8:21:34:3c:e0:
         13:72:22:f7:08:90:60:69:9e:96:a5:c1:72:6b:f5:38:f6:53:
         e0:f6:50:0d:9e:45:f3:70:df:72:d3:1c:06:65:46:d9:48:cc:
         79:ad:16:62:9d:72:4b:4d:c4:d0:50:36:14:98:78:3d:91:91:
         09:c9:4c:ed:51:a8:ec:b7:41:9b:28:85:ed:e4:45:29:99:1f:
         21:18:74:c2:75:4f:c0:bf:5c:4d:22:93:86:86:48:d7:0d:22:
         55:b5:ca:04:a8:bb:19:9d:94:51:b1:26:9f:7c:31:0d:b6:97:
         19:56:b3:3b:9a:79:36:98:e1:6a:36:04:f1:b5:90:d6:ec:17:
         24:e5:99:55:8c:16:55:b4:fb:5c:25:27:3c:d5:c7:07:1e:91:
         1d:49:bb:02:92:ae:a4:ba:f5:92:38:5c:0c:be:ac:82:f8:63:
         0e:85:1c:b6:f4:e9:be:34:94:bd:be:0c:bb:a9:c1:81:90:ce:
         5a:38:c3:f9:2d:19:c8:66:d7:2c:09:1b:13:d6:97:9c:b2:07:
         2e:c5:72:28:28:43:b9:c2:18:f0:f3:5f:3a:30:ef:45:29:97:
         ed:85:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:25:56 2026 by rpki-client