Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7732eda1-56ec-4de3-b15c-2af3b4d67449/0ad1b6d1-1db6-3ac6-bd5d-5cdd926efb3a.roa
File:                     0ad1b6d1-1db6-3ac6-bd5d-5cdd926efb3a.roa (raw, json)
Hash identifier:          WPZhJGVi3vvIGTeu5Et5K07/c9hsjhmlYwjWrH0N2JM=
Subject key identifier:   EF:4D:A6:06:68:A9:D7:58:E8:E1:66:5D:52:BA:EA:87:AE:4C:3B:4E
Certificate issuer:       /CN=7732eda1-56ec-4de3-b15c-2af3b4d67449
Certificate serial:       010D0C9F4328584E93A56196A8612DA7268DB300
Authority key identifier: 38:4B:BF:C1:E7:FE:71:24:68:9B:F6:2B:47:39:10:75:FF:91:11:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7732eda1-56ec-4de3-b15c-2af3b4d67449.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7732eda1-56ec-4de3-b15c-2af3b4d67449/0ad1b6d1-1db6-3ac6-bd5d-5cdd926efb3a.roa
Signing time:             Tue 21 Jul 2026 22:05:34 +0000
ROA not before:           Tue 21 Jul 2026 22:05:34 +0000
ROA not after:            Mon 19 Oct 2026 22:05:34 +0000
asID:                     4889
IP address blocks:        192.154.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7732eda1-56ec-4de3-b15c-2af3b4d67449/7732eda1-56ec-4de3-b15c-2af3b4d67449.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7732eda1-56ec-4de3-b15c-2af3b4d67449/7732eda1-56ec-4de3-b15c-2af3b4d67449.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7732eda1-56ec-4de3-b15c-2af3b4d67449.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:a5:61:96:a8:61:2d:a7:26:8d:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7732eda1-56ec-4de3-b15c-2af3b4d67449
        Validity
            Not Before: Jul 21 22:05:34 2026 GMT
            Not After : Oct 19 22:05:34 2026 GMT
        Subject: CN=e3dc513e-0f3a-4d41-9e14-ffcb7de716af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6b:77:8a:80:57:c6:a1:fc:55:d2:da:62:52:
                    62:35:26:73:a1:c7:16:cf:97:30:83:72:a3:22:94:
                    41:d7:d1:c4:a2:e3:4b:55:70:39:cf:f2:2e:80:18:
                    c8:d5:50:13:d3:59:e6:9c:39:88:43:be:2f:2d:87:
                    6f:f0:09:ba:e7:65:7d:39:ef:14:d8:c2:72:7b:e9:
                    a9:c9:f2:f7:1b:69:4f:16:37:a6:a1:dd:40:3c:0e:
                    2b:97:9c:3c:87:e4:8a:a5:25:74:15:29:45:28:a4:
                    06:fe:cb:5a:0c:a3:41:fe:16:12:af:fc:99:30:8c:
                    ce:43:87:d5:66:96:4d:c6:63:8e:3b:1f:6d:04:4e:
                    87:7d:4c:21:3a:cc:5f:bd:64:df:ae:d8:aa:e4:38:
                    09:5a:1a:57:58:4a:cd:9e:f7:e6:7e:96:14:fe:21:
                    9c:61:18:e4:7e:a3:1f:84:87:4a:3e:6d:4c:d1:70:
                    b1:3e:0c:cc:3f:86:fa:20:e9:86:b1:25:ea:fe:38:
                    d3:8d:2f:59:f5:2a:d7:12:e5:5f:3d:65:97:fc:76:
                    04:78:fe:d0:43:b5:a8:c9:30:df:08:39:8a:af:d6:
                    9d:44:ec:ff:25:7a:76:0b:86:63:7d:d9:a0:0e:49:
                    9f:62:1f:bd:61:2b:99:72:a5:f3:fe:fc:13:a3:f9:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4D:A6:06:68:A9:D7:58:E8:E1:66:5D:52:BA:EA:87:AE:4C:3B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7732eda1-56ec-4de3-b15c-2af3b4d67449/0ad1b6d1-1db6-3ac6-bd5d-5cdd926efb3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7732eda1-56ec-4de3-b15c-2af3b4d67449/7732eda1-56ec-4de3-b15c-2af3b4d67449.crl

            X509v3 Authority Key Identifier:
                keyid:38:4B:BF:C1:E7:FE:71:24:68:9B:F6:2B:47:39:10:75:FF:91:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/7732eda1-56ec-4de3-b15c-2af3b4d67449.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c9:d8:4f:a9:87:14:7a:68:fd:da:2b:7c:47:72:06:b7:2f:
         94:6f:5a:5c:91:4e:fa:70:4d:4a:da:0f:3a:41:0a:28:af:a9:
         17:e5:39:9d:ef:13:93:0c:d5:19:91:5c:87:7f:79:a4:10:55:
         1d:2b:11:e9:9e:f9:53:e7:18:2f:ef:dc:b7:75:c9:21:77:f2:
         dc:dc:8b:1c:92:85:60:64:2b:fd:2f:49:21:be:e1:2a:1f:91:
         e0:a1:a6:36:9d:0e:d5:15:6e:c0:51:12:6b:a5:eb:59:ba:bb:
         b3:e6:68:bb:dc:bf:0b:f3:2e:5c:6a:9f:72:d4:ec:ca:95:c2:
         a0:db:9a:76:37:16:d8:f7:47:3b:d0:67:f6:e3:c8:88:67:d8:
         e4:49:54:1e:98:7a:ac:73:c7:f9:ec:c9:15:66:e0:b0:be:6f:
         c7:be:00:a2:cf:25:2b:9f:36:80:bd:34:9d:a2:11:c6:57:01:
         87:2f:de:47:8a:6d:3f:5f:32:79:28:6f:68:c8:bf:55:32:f8:
         19:7d:64:81:16:11:04:43:ab:8e:b5:33:be:26:ef:33:77:e4:
         fa:4b:0b:b5:ed:3f:93:f3:bf:fc:af:1f:d8:57:83:5b:18:6e:
         ba:c8:76:ea:1f:ee:2e:df:cd:7c:79:c7:1e:10:a4:8f:58:59:
         f2:cc:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:26:35 2026 by rpki-client