Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa
File:                     e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa (raw, json)
Hash identifier:          UP5BOB2fb84B8gO2t7BX1twzz+fVk96UZNEdY4giIOw=
Subject key identifier:   38:AD:7B:8A:10:B7:6F:A1:FD:CE:1A:97:97:38:07:E4:7E:C9:14:12
Certificate issuer:       /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial:       010D0C9F4328584F7E7DC7882F90917B3563D5C0
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     16789
IP address blocks:        104.156.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:c7:88:2f:90:91:7b:35:63:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=73950376-bfcd-4aeb-8f54-9cca49c9b6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:00:55:fc:07:b6:9f:e3:84:02:bf:ab:ef:73:
                    1c:d1:6d:6e:bc:15:f7:7c:57:92:76:6c:74:3c:51:
                    d6:3e:8f:ff:0d:b3:e4:de:77:e9:77:17:71:e9:71:
                    c6:bd:c4:d4:30:ec:05:11:42:90:c0:d2:06:16:41:
                    05:72:89:56:5a:45:be:a5:3c:e4:01:f5:9a:04:7f:
                    3f:f0:25:1c:51:b5:9d:2a:c7:67:ed:63:f4:2a:47:
                    56:90:a7:b4:35:5b:ff:d9:5b:bb:89:14:72:ac:a0:
                    6d:71:3e:52:f3:b4:38:e2:0c:7e:39:ff:d4:6d:30:
                    d3:3c:7d:52:b5:7a:05:7b:9c:cc:1a:27:7f:cd:6d:
                    e8:7b:8d:90:99:22:bd:d6:86:89:33:f8:f0:6a:7f:
                    c1:84:5a:d1:c9:8f:3c:5f:fd:3c:34:f9:3d:20:59:
                    9a:47:f0:c7:b2:6e:14:ab:d8:0f:48:ce:62:cb:c1:
                    53:5c:e5:6a:fe:bd:42:62:16:4b:2a:71:eb:9a:7e:
                    b9:73:55:e4:9c:90:ea:87:ec:e5:e0:99:f7:49:70:
                    99:f6:6e:72:87:6f:ac:59:f4:e7:10:ea:18:74:12:
                    ff:f0:63:b2:72:21:da:7c:d8:02:c7:bf:50:a2:21:
                    0e:bb:5e:26:92:4e:4c:5c:15:74:87:44:9b:5c:39:
                    b0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AD:7B:8A:10:B7:6F:A1:FD:CE:1A:97:97:38:07:E4:7E:C9:14:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/e3baa160-3819-3b7b-8e67-c5cab2e8bf70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl

            X509v3 Authority Key Identifier:
                keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:53:f1:17:1c:82:07:77:53:36:3d:76:ed:d8:9d:27:70:c5:
         33:c4:67:12:48:52:73:eb:44:f2:51:09:5e:63:af:81:2c:b1:
         5c:29:aa:20:68:3d:8a:12:57:8f:50:c4:78:d1:1f:6e:b9:a8:
         af:d4:9f:74:e7:a2:79:b9:f2:ee:5f:f9:1d:c1:98:7b:b3:1a:
         7a:5f:95:dc:d3:45:56:21:e0:32:7f:79:07:7a:72:47:17:d6:
         f9:c9:15:90:96:cc:e8:51:65:a6:74:3f:3b:a5:6e:f0:8b:06:
         9a:27:08:5a:b8:ec:63:27:b4:d8:b5:90:12:87:6d:a3:7e:46:
         ea:82:cd:9a:ad:2a:d5:cf:82:63:f5:5e:f7:82:0a:e2:c0:3a:
         db:f5:36:94:5b:57:c9:10:27:06:9e:5e:86:ff:17:0e:ef:5a:
         64:2f:46:fe:78:77:40:ad:38:eb:9e:27:02:59:2d:4c:76:09:
         ea:f7:c4:02:6a:25:50:91:c3:fa:3a:88:a1:7e:9c:09:37:53:
         1e:de:7f:7b:50:f4:87:46:89:73:46:06:e2:37:15:79:2d:07:
         40:36:ab:26:42:7b:4b:03:49:9c:47:17:c9:90:68:eb:35:c7:
         6c:50:84:76:3d:8f:4d:c8:1f:61:32:7d:f3:8d:69:48:e4:c3:
         1d:e9:be:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:50:52 2026 by rpki-client