Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa
File:                     4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa (raw, json)
Hash identifier:          nVQUcSi7jPmuzZ0SC5KLuCw0c+vtzKe3DG1AbMVOzeU=
Subject key identifier:   3D:BC:7B:03:AA:26:09:82:23:08:A7:61:5F:5F:EC:5F:F5:1E:02:D9
Certificate issuer:       /CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc
Certificate serial:       010D0C9F4328584E6F3A23DF6F63731865788E60
Authority key identifier: A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     22851
IP address blocks:        198.180.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:23:df:6f:63:73:18:65:78:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=ef70f5c9-6e31-4163-b378-b67e61fb1017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:3a:18:82:95:7b:03:72:66:f9:46:fd:be:
                    cf:dd:71:a1:66:d5:cc:a6:25:91:20:85:ef:bb:24:
                    1a:dd:b5:5d:31:4b:1a:55:5f:6c:37:39:e0:05:0e:
                    01:71:d0:d9:c9:d0:5e:9d:bd:eb:c8:5a:b7:b7:62:
                    5c:23:9d:78:26:59:9a:ba:01:31:c2:eb:c1:28:e4:
                    56:be:3f:db:35:90:01:6c:3e:bc:91:35:9a:68:4f:
                    14:45:33:60:61:7b:82:26:72:6e:72:43:df:aa:f9:
                    3c:bb:38:0d:c7:cd:fe:4c:73:60:6b:f3:95:97:60:
                    63:e9:ca:e0:db:e0:c1:6c:ca:1e:f8:b4:ff:47:aa:
                    d7:b5:c2:91:2a:0b:50:07:25:f2:bd:d4:27:07:cf:
                    93:e5:1c:ea:87:c0:0e:ec:0d:06:1d:e3:13:f7:b4:
                    cd:4a:c7:e3:4c:5d:2c:4f:aa:08:20:c2:1c:08:71:
                    c3:3f:a1:46:8e:f2:f0:cb:32:99:ca:50:94:cd:3e:
                    de:8a:0c:b6:de:2e:a8:23:6e:bf:72:8a:11:b2:c1:
                    18:73:fc:57:be:a7:c9:f7:5c:ae:2c:c9:61:34:27:
                    21:53:fb:1c:04:f6:5f:97:7c:61:ac:a9:86:13:b4:
                    4b:94:12:1b:70:c7:6e:0b:f1:77:5e:2e:7b:62:b3:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BC:7B:03:AA:26:09:82:23:08:A7:61:5F:5F:EC:5F:F5:1E:02:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/4f03bf4d-0fd4-3a76-8c7b-1a2e78bfbc92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl

            X509v3 Authority Key Identifier:
                keyid:A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ec:e1:2c:6e:d6:b9:29:91:eb:a6:82:65:3a:f6:20:dd:7d:
         4c:19:1e:ae:08:46:5b:11:fc:ee:49:71:a1:3b:ce:0a:64:cf:
         e9:2a:70:ef:5e:42:87:0d:b0:8e:c6:fd:63:c9:30:69:c7:23:
         d2:62:46:ef:60:c0:97:60:12:56:9a:81:c3:63:54:dd:3d:54:
         96:16:8e:02:60:1a:35:62:cf:87:34:a6:ac:d2:3f:83:34:df:
         2f:87:f1:e4:44:14:37:76:5f:93:e5:9d:82:85:af:42:25:d8:
         e3:07:b1:fb:42:a2:a7:c4:e9:d6:b4:ba:6d:01:f2:d7:43:c9:
         da:ff:59:59:42:bd:7e:da:76:bf:d5:3c:cb:76:55:6f:1a:98:
         ad:66:5f:0d:c5:72:85:7e:83:10:c4:2a:07:52:d5:8e:a1:88:
         3b:a7:28:44:56:91:25:2f:33:e0:e6:27:55:9c:76:91:93:eb:
         44:0f:b2:f7:5b:08:32:87:b1:a5:f1:df:eb:42:75:c8:e4:17:
         70:4c:20:7f:47:f2:ad:8f:02:ec:fb:c5:72:99:16:8a:73:85:
         c7:6f:75:4d:22:d6:af:67:9c:c6:88:00:10:1d:b4:a7:03:3b:
         28:3f:13:65:97:5c:b9:77:96:a1:d5:74:c6:ef:d1:5c:f4:84:
         16:ce:ad:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:47:46 2026 by rpki-client