Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/c4f7dbdf-f7bb-3fb2-82c6-dbc051aa69ff.roa
File:                     c4f7dbdf-f7bb-3fb2-82c6-dbc051aa69ff.roa (raw, json)
Hash identifier:          Ft4y/ObdxMkV71gO/Rx+uZ87zuJRseSDlBXY3na+nQc=
Subject key identifier:   0F:FA:A9:59:D0:ED:71:C6:40:D3:20:F9:E7:F6:52:3A:54:BE:85:8D
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584E7E94E175AE87875931BB00E0
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/c4f7dbdf-f7bb-3fb2-82c6-dbc051aa69ff.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     16504
IP address blocks:        157.96.48.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e1:75:ae:87:87:59:31:bb:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=c5d1f60d-555c-4243-9d5a-a19fa569f6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:55:1b:23:75:dc:b7:38:9e:15:cc:eb:e4:14:
                    25:09:45:22:f9:ae:e2:7d:68:a9:c6:2f:ae:1a:9f:
                    31:74:ba:ed:69:37:65:51:c4:b4:b0:4f:ab:c8:6c:
                    3c:81:ce:92:c8:8c:ed:92:5c:1d:a2:ce:9a:0a:9f:
                    f3:fc:10:40:f3:42:fc:d7:b9:be:d9:99:04:be:b7:
                    6f:5d:d0:56:4c:34:28:86:51:83:c3:76:56:e5:ed:
                    0a:0b:df:58:df:94:ac:20:42:51:04:76:f1:f3:ec:
                    62:7c:66:20:c0:43:2a:4c:63:4d:00:29:07:3c:40:
                    d7:40:3f:8b:10:d8:2d:3c:02:30:b7:57:99:b4:bf:
                    1f:c5:e0:12:ed:2e:d7:81:4d:4a:16:b6:47:20:70:
                    67:dc:b2:1e:13:54:48:58:ff:82:ea:bd:5f:f1:9f:
                    92:ac:84:75:d5:d7:2c:ad:35:0b:06:bc:b2:33:c6:
                    9c:00:a0:7a:dd:32:d3:bd:ca:fa:e3:2c:25:12:2c:
                    45:5e:01:9d:20:67:4e:d1:2a:83:95:86:e5:04:68:
                    57:19:1f:ed:ed:91:70:c9:4e:2d:32:c7:ad:9d:fa:
                    14:66:56:42:df:9c:75:53:96:bf:e9:e3:31:96:61:
                    4c:af:cf:bb:7c:18:0f:46:e1:23:c8:d9:f9:aa:04:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FA:A9:59:D0:ED:71:C6:40:D3:20:F9:E7:F6:52:3A:54:BE:85:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/c4f7dbdf-f7bb-3fb2-82c6-dbc051aa69ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.96.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2a:f5:da:26:43:37:70:72:f1:68:34:3d:70:e8:fb:80:f8:
         78:cc:25:cd:b7:07:2c:a7:3b:88:89:5a:e4:b1:52:1e:cf:b2:
         89:67:f4:1e:c5:5e:8f:67:1a:b1:eb:34:e2:80:35:db:37:f6:
         ea:11:5e:5d:20:e8:cc:ea:8c:0c:8a:cb:5a:10:2c:1c:0d:3c:
         14:da:c0:f4:26:4c:5c:94:53:b0:7f:4c:8d:69:5b:22:df:63:
         c9:6c:21:ed:74:8e:eb:ac:8c:f7:fe:02:af:61:d2:c9:c0:95:
         53:cd:0c:00:58:9e:db:0f:d7:14:18:9d:df:de:67:24:e8:51:
         0f:ff:0a:03:15:09:da:28:12:b8:7e:a6:16:94:51:a3:eb:b1:
         d1:e9:58:c1:ff:2e:7c:0f:a8:17:9f:7d:b9:64:72:f5:30:7a:
         10:3e:40:47:0b:eb:03:d0:fb:06:3e:9c:dc:c7:ca:70:13:c1:
         01:23:69:3b:ef:09:47:50:8b:7a:7e:2e:1d:35:9a:0e:b8:e0:
         eb:da:89:4b:82:78:8d:cb:e1:f6:83:20:98:b1:6c:11:99:57:
         16:f7:99:78:7f:7a:50:b5:52:21:0f:fc:5d:fe:63:ad:d7:f0:
         b8:1b:0c:27:54:61:1e:ce:97:89:dd:f6:ed:92:1d:23:ed:8b:
         f7:a4:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:23 2026 by rpki-client