Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/b5b569ba-baf3-3272-992c-cc69031eae2d.roa
File:                     b5b569ba-baf3-3272-992c-cc69031eae2d.roa (raw, json)
Hash identifier:          7ARry+di7wwNO388K4mSCwm1nv+sJ5deG7AnZ5kNTsI=
Subject key identifier:   ED:70:74:17:AF:A8:3C:54:AA:60:84:33:62:5E:57:BB:F4:C4:1F:2E
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584F30526ECDF6DE3303D510B600
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/b5b569ba-baf3-3272-992c-cc69031eae2d.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     5728
IP address blocks:        199.37.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:6e:cd:f6:de:33:03:d5:10:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=2a991154-7950-4ce2-a359-65839243f6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4c:a5:2d:d6:2c:22:4e:05:ec:2c:13:76:d3:
                    3a:ab:f4:7d:d1:f2:7e:44:78:02:55:54:79:82:ed:
                    6c:ab:31:96:81:20:5d:8b:44:8e:0f:31:68:07:97:
                    1e:2e:90:04:79:21:87:aa:24:69:06:e3:07:db:5b:
                    86:27:2e:05:b3:1e:90:a5:10:d7:cc:42:ff:e0:54:
                    94:b9:ce:c4:e3:39:74:5e:bf:74:c9:26:f2:a3:83:
                    a9:77:03:6d:a2:0e:90:7c:6b:f8:4d:08:1e:04:16:
                    37:c4:27:e9:60:44:9f:ee:91:83:88:12:36:fb:0a:
                    2d:0a:b3:40:4b:fa:c4:96:a6:ca:53:76:de:20:6f:
                    51:79:8e:49:2b:62:47:70:e7:9f:8b:bf:98:89:b7:
                    28:88:45:32:29:19:4f:4c:5c:d4:cf:81:41:c7:68:
                    44:36:af:be:61:88:76:ad:04:8c:e8:a9:b8:42:0e:
                    21:8c:27:85:18:a2:a3:4d:fd:1f:3f:82:2a:47:d3:
                    23:c5:50:46:f3:25:7c:8b:9d:bb:19:0d:98:cb:26:
                    53:21:70:64:19:c5:75:bf:48:7b:65:80:19:bc:4a:
                    c8:aa:01:27:f1:ba:10:ee:92:0e:6f:0d:47:0b:e1:
                    e2:60:bc:39:42:29:50:a0:4e:c1:1c:c3:61:dc:b6:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:70:74:17:AF:A8:3C:54:AA:60:84:33:62:5E:57:BB:F4:C4:1F:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/b5b569ba-baf3-3272-992c-cc69031eae2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.37.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:bb:90:16:49:3f:48:22:0e:1a:92:aa:dc:00:35:d2:c8:f5:
         ef:3f:98:2e:60:38:b5:cf:63:6a:4c:19:9b:98:e8:7a:02:0c:
         91:67:44:62:a0:d4:24:36:56:f6:39:e7:90:4a:ac:49:c7:ed:
         ef:3a:91:b6:2c:39:35:13:48:4e:80:5c:ef:d2:90:57:32:d8:
         20:91:df:1d:2a:d4:ec:58:01:29:98:84:45:26:70:95:f6:04:
         38:e2:ec:d8:b0:bb:04:c8:60:18:83:12:0a:bb:23:8f:99:b0:
         f2:71:ad:ba:07:46:c6:4b:79:2d:70:85:7a:1c:b3:52:3e:b9:
         84:d9:3b:b9:2c:d3:0f:3f:42:1e:cd:4e:b7:de:26:5c:4e:ea:
         61:c5:42:47:89:bf:11:81:5c:a6:43:f0:b4:58:ab:81:7d:84:
         1d:cf:f6:61:de:e8:47:8c:ef:3d:37:6b:75:58:d4:32:8b:e0:
         1f:6c:71:bd:a2:f8:81:95:d4:96:dc:56:70:f6:c7:ad:b2:1a:
         b0:17:84:cb:37:01:0a:64:87:a4:55:41:82:30:60:66:d3:83:
         30:f4:90:27:bc:47:f3:70:5c:16:1e:d3:0e:f7:c2:3d:e2:a4:
         b9:73:07:e2:e9:ca:ba:4a:cb:00:98:ef:4d:e1:aa:7d:2d:ab:
         e6:4f:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:59:53 2026 by rpki-client