Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/80fb7aea-a2a6-31b9-9fd1-ea50581dbc49.roa
File:                     80fb7aea-a2a6-31b9-9fd1-ea50581dbc49.roa (raw, json)
Hash identifier:          3Si2DpzgR1OGlIRMKc6FFxY2grJv7Ja1cQE4A5e6/CM=
Subject key identifier:   5D:D3:C2:20:76:E9:F8:E6:F5:3A:E6:E0:39:3A:63:92:EB:A9:4A:75
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584E5BAF60A09D475187FA1B21C0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/80fb7aea-a2a6-31b9-9fd1-ea50581dbc49.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     14114
IP address blocks:        157.133.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:60:a0:9d:47:51:87:fa:1b:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=6ccfffe5-486f-4c53-a432-b12e4b4987e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:6f:2f:3f:df:fa:71:1f:f8:df:fd:5d:52:
                    79:71:f0:00:bf:af:80:4a:1f:2a:9e:65:6f:a0:b0:
                    0a:5e:c8:76:8a:97:a8:b9:9d:c9:31:d2:d7:15:56:
                    4f:03:67:b7:16:88:b3:d3:ed:37:24:b9:e5:fa:8c:
                    05:41:44:5a:c0:99:dd:dd:9a:1a:63:fb:5c:5f:f0:
                    a8:ee:06:54:dc:2e:c7:af:50:23:21:f1:72:a3:f2:
                    65:d3:7e:a7:3b:03:7e:a5:c6:21:af:86:af:26:c8:
                    23:1b:4c:94:fb:2a:f2:ae:28:23:3d:63:93:32:78:
                    e0:fe:f9:e8:d1:8a:d2:0e:51:e7:d9:d3:a9:57:f7:
                    33:67:dc:b7:a0:c3:79:21:c2:ed:eb:28:55:fb:bd:
                    9d:6d:64:fd:b0:fe:67:72:31:40:46:dc:93:01:a8:
                    23:00:1f:00:ad:d2:72:8c:1e:45:87:c7:c3:6c:fb:
                    c2:a9:5e:54:ba:ed:4d:22:51:5b:96:c3:77:70:8c:
                    65:e0:da:5f:42:d6:c7:38:58:1a:f3:a1:78:fc:e9:
                    09:19:5a:d6:89:ea:1a:1f:58:16:15:f8:25:8f:dc:
                    3d:b3:b2:7d:c4:47:b4:3f:e4:9b:c9:4b:18:c1:64:
                    38:87:00:f2:5e:51:5d:35:8f:cd:25:5b:05:38:1b:
                    90:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D3:C2:20:76:E9:F8:E6:F5:3A:E6:E0:39:3A:63:92:EB:A9:4A:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/80fb7aea-a2a6-31b9-9fd1-ea50581dbc49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f9:f2:fe:71:ce:9f:c8:20:e0:17:63:9d:6e:26:71:54:07:
         87:50:ee:0e:91:f5:ed:dc:86:dc:fa:e4:be:3a:b5:c6:c2:42:
         2e:e0:f6:78:c0:5c:de:36:c1:04:b4:11:ed:ae:e5:c4:23:49:
         41:d6:46:be:06:67:51:bf:ff:6d:36:b5:2a:07:f0:81:ff:e7:
         17:89:7d:11:12:33:05:45:f2:69:99:05:30:56:9c:f0:45:fa:
         88:19:12:ad:76:8f:56:f8:60:eb:3e:19:95:88:7a:de:4b:0c:
         8b:41:16:8d:ed:c5:73:f8:fe:f1:08:a3:16:68:e9:cd:95:0b:
         aa:96:02:c2:ee:88:62:df:23:e8:46:ea:8c:48:ce:71:95:3d:
         1c:48:d9:0c:2b:2e:3c:66:6d:46:60:90:f2:61:2e:73:c9:73:
         52:8a:cb:23:d3:e8:49:43:8f:cb:74:b9:a2:6a:e6:94:ea:d0:
         f8:a0:54:96:0b:ba:92:ff:6d:09:d9:96:58:2b:4b:ef:c9:da:
         41:f0:28:04:6a:87:b1:65:13:87:e4:3f:7c:9c:26:88:c0:97:
         e0:1b:ad:0a:df:1b:5f:44:21:54:ae:bb:dd:d4:47:93:7f:50:
         cb:38:dc:03:46:2c:dc:d6:c0:80:1b:57:fe:fe:54:bd:7c:7a:
         90:81:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:55 2026 by rpki-client