Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa
File:                     2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa (raw, json)
Hash identifier:          mlxz9nazbso/k0dsWiWoJLQYhuFGC+vP3kyIFM1aUjU=
Subject key identifier:   8B:F5:8D:3F:9D:E4:7D:10:66:DF:54:4A:71:A8:7C:22:58:A7:EE:BD
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584E46BF23BB13A87FE95D951680
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     401395
IP address blocks:        192.157.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:23:bb:13:a8:7f:e9:5d:95:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=c0ce116d-9577-4371-96a1-095a03cbaa2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ba:e7:cb:fb:41:cf:18:26:b2:cb:52:11:a5:
                    83:45:3c:13:91:a8:0c:33:4b:54:26:bd:1a:be:df:
                    a2:67:e8:e7:d8:ec:32:85:3c:63:6d:31:b1:d3:fb:
                    a7:68:d1:2a:f7:47:a1:9c:0a:05:88:28:1b:86:3e:
                    36:cb:be:7f:12:3e:d1:4a:0f:54:85:91:25:b1:fb:
                    92:7e:3f:c3:a8:78:42:19:48:ff:2c:bd:29:26:7a:
                    6e:39:4b:8f:28:1e:08:7f:f1:aa:cc:6e:59:6b:43:
                    d8:5f:a7:be:da:12:e1:7b:ad:bf:dd:7b:53:8f:b2:
                    97:65:c4:03:9d:4f:61:0f:d9:a4:8c:fd:2f:e0:5b:
                    77:24:4e:fe:d7:10:3e:a2:12:a3:12:3d:b3:30:3c:
                    6c:a6:31:4f:59:ac:55:82:bf:1f:23:30:6c:b4:e2:
                    ae:17:de:25:a8:36:97:8c:3a:aa:8e:18:a7:6b:79:
                    09:ab:42:89:bd:27:ee:f1:e0:95:ce:f6:b2:6b:bb:
                    58:35:89:98:ec:f6:f3:98:a4:ae:8e:5b:1a:b5:fa:
                    90:11:19:b0:4b:23:b9:10:c7:4d:84:f5:43:0f:3d:
                    12:bf:f9:dc:98:d0:71:ce:5c:94:3c:cb:bd:9d:a1:
                    b8:cf:05:7c:54:37:42:41:8c:02:3e:b1:d8:82:53:
                    77:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F5:8D:3F:9D:E4:7D:10:66:DF:54:4A:71:A8:7C:22:58:A7:EE:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2d53d3af-e77e-3bd1-bd96-a54311ba5548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:d8:73:67:25:ed:ff:b2:20:70:22:9d:e6:34:af:b8:c5:
         00:e0:f8:fc:5e:21:8c:d2:8c:aa:e7:31:9d:0f:52:f6:95:24:
         bb:cb:27:f5:75:c5:aa:ec:0b:b7:04:13:d4:94:2f:c3:8a:a4:
         c8:b2:ff:50:d1:bf:21:d1:11:41:42:92:3d:7f:8b:13:a0:3f:
         15:89:24:10:81:6f:48:a9:ad:ca:65:e8:aa:99:11:dd:94:54:
         f7:07:89:cd:91:69:c7:c7:99:20:5e:df:be:b1:80:eb:e1:2c:
         58:c7:53:28:74:1e:4b:86:95:6d:74:51:e8:5e:44:37:7d:fc:
         1d:2c:b7:14:6c:06:d7:e8:45:c1:f9:a8:43:2e:17:28:9c:98:
         29:d7:22:e0:50:eb:1f:25:93:3a:d3:39:01:60:c6:15:42:1a:
         9d:a8:25:d0:79:3e:f6:dc:28:70:da:c0:cb:aa:bf:9d:e5:f0:
         4e:84:b5:89:c9:73:6e:5d:f2:e7:ff:00:a8:cb:71:ff:ba:d5:
         04:d7:40:d1:01:4c:4d:a1:af:50:a4:63:fb:72:f0:dd:e3:f0:
         55:fd:e8:1b:b8:56:df:a2:fb:ba:cb:46:2c:9d:e2:e9:3c:d1:
         d8:a9:02:e0:c1:32:66:0f:0c:9f:8c:15:30:16:2c:22:81:bb:
         05:69:37:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:27 2026 by rpki-client