Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/db5ee974-efb8-37ae-8b96-c339cbc8523b.roa
File:                     db5ee974-efb8-37ae-8b96-c339cbc8523b.roa (raw, json)
Hash identifier:          TUf4qkS8KVTgrZqY1BK1zeYsZQspCCx5hJKuZA5lhnQ=
Subject key identifier:   07:76:F0:53:A6:A8:88:CB:A7:3B:02:42:4E:E1:92:69:F3:E2:94:BA
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F4328584E7A64DE71AEB5CFB8F46F4300
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/db5ee974-efb8-37ae-8b96-c339cbc8523b.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     397966
IP address blocks:        170.205.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:de:71:ae:b5:cf:b8:f4:6f:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=28813db8-d657-4569-8f23-5cf927deda59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7d:1d:2c:88:d7:48:9b:5d:eb:9e:7a:9f:e7:
                    9b:8b:e5:44:ec:66:54:d2:20:d3:a2:ee:54:d3:f4:
                    ea:3a:fd:12:80:dd:54:ea:c1:e7:c1:00:89:98:87:
                    20:a1:d4:0f:dd:e7:a0:02:6b:34:4b:d0:77:c2:af:
                    7a:1f:66:27:a7:9b:d2:23:56:57:a1:86:d3:ce:3c:
                    ab:c6:28:4c:bc:37:da:d6:7c:4e:72:2c:94:aa:8a:
                    cf:a1:a0:79:8b:7c:34:7b:26:4f:81:fb:f0:8f:f6:
                    22:30:1e:0a:84:f2:d4:32:8e:71:06:f3:2a:a4:9b:
                    47:36:8e:6c:6c:cf:65:2b:2a:37:0e:ca:f9:57:de:
                    07:d0:fb:bc:3d:10:5c:b7:81:48:cc:10:78:bc:b4:
                    01:14:0d:35:eb:01:b8:b0:03:2e:9b:a1:12:2d:92:
                    03:a4:71:85:30:83:bf:c6:18:51:13:88:a8:25:87:
                    e4:f2:09:75:da:1a:e9:94:ba:68:b9:a2:ad:58:ad:
                    75:21:49:84:ef:ed:66:7d:c5:58:11:59:75:e1:2f:
                    18:a1:8c:e8:6e:d5:b6:46:45:6c:a9:7c:bd:f4:72:
                    04:23:67:cf:0f:ee:86:d8:78:dd:11:88:e9:dd:de:
                    ff:12:e2:de:a6:8c:f3:ba:bb:d4:8e:a7:ea:c3:ce:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:76:F0:53:A6:A8:88:CB:A7:3B:02:42:4E:E1:92:69:F3:E2:94:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/db5ee974-efb8-37ae-8b96-c339cbc8523b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d0:51:c7:cd:8e:41:b4:1f:7c:ed:cd:1c:bf:87:a1:40:18:
         d5:d3:46:5b:08:06:ed:99:d3:64:ee:a4:f5:41:73:40:f6:69:
         30:6e:ce:8f:10:9a:0d:d1:43:1f:0c:38:2f:5f:90:4f:1a:b9:
         cb:aa:ef:8e:68:18:8d:10:bf:a4:c4:bd:d5:bb:5f:10:ee:0d:
         b8:ee:e3:47:ba:40:2a:ab:13:31:2b:bf:a0:e7:31:35:fd:c9:
         f9:cc:53:9a:ba:39:9c:7f:94:56:69:81:ec:ca:16:e6:ba:49:
         4a:0c:af:07:bd:da:53:e9:d0:fe:7f:e1:cd:8c:ce:70:42:d4:
         8b:6d:1a:c5:f2:a5:2b:d6:03:7a:74:ea:47:9c:43:ad:1b:e2:
         d7:e9:01:30:e3:23:9c:82:73:77:6e:bb:91:da:79:a3:26:73:
         e2:2b:4d:ae:f3:0e:8b:d0:a3:a7:cf:5b:38:b5:09:e1:e2:37:
         d5:93:0c:ff:2c:9e:0e:d7:c2:71:1e:13:d1:d8:e3:28:a9:20:
         c1:8f:dd:c4:94:76:2d:6d:ff:f1:97:c3:27:e1:7f:02:96:13:
         d3:69:6d:20:11:a5:dd:06:16:c8:90:98:e4:d3:67:b2:cd:84:
         30:dd:7f:5b:ac:53:17:93:2b:fa:43:39:62:b7:4b:f1:73:6d:
         95:b6:f6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:25:46 2026 by rpki-client