Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/d9191d0d-76d3-3cf3-9488-1ada1bc8dd40.roa
File:                     d9191d0d-76d3-3cf3-9488-1ada1bc8dd40.roa (raw, json)
Hash identifier:          JleIS8sbLBZEiZVgepREtkRUOBJfBG9GaOes/5Hfcnc=
Subject key identifier:   B0:2A:51:F3:84:F6:71:27:1D:FE:88:93:DD:30:34:8B:38:7D:23:57
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584E7E95080CF14B5CBFEAC489C0
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/d9191d0d-76d3-3cf3-9488-1ada1bc8dd40.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     16504
IP address blocks:        157.96.144.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:95:08:0c:f1:4b:5c:bf:ea:c4:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=e7109e4b-d820-41fc-964d-bad75d33af1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:31:f3:d4:23:3f:15:17:df:8e:ad:32:7c:
                    da:1d:16:7c:a5:8a:05:4f:f5:7c:86:02:7f:d6:a1:
                    c8:70:1e:6e:d3:39:6e:36:0f:f4:87:02:a9:13:e0:
                    2c:55:54:58:9d:86:dd:88:d6:a3:31:ff:5f:15:de:
                    ff:b9:be:80:fc:12:3f:3a:6c:a7:a3:db:3f:19:8a:
                    0a:8f:90:9c:d9:b1:63:19:3d:62:da:10:11:af:e5:
                    98:be:db:16:e1:6a:bd:67:37:ec:4c:a4:e7:99:f1:
                    e4:79:09:99:5c:33:f9:4f:f0:d0:a5:15:66:18:a3:
                    8b:b1:b1:a9:98:50:39:13:8e:b2:03:9b:c0:11:bb:
                    d3:14:c0:79:1d:e2:45:b7:a3:70:25:e5:1d:63:29:
                    0a:83:70:f5:48:17:cd:69:7e:58:f4:72:a3:0d:6b:
                    d7:64:92:ea:b5:9e:0e:30:50:ca:ed:56:c1:59:d1:
                    ba:f4:c9:ca:c8:3b:4a:0e:de:a6:55:fb:da:40:6d:
                    88:5f:4d:8c:b8:9a:55:e3:92:de:fc:9a:08:2b:b0:
                    bb:1f:85:90:3a:c8:33:d7:ee:48:0b:cc:6a:a1:c3:
                    d4:48:47:6d:7a:7e:65:69:87:46:9c:53:52:03:68:
                    55:15:42:ab:d6:3c:86:86:9a:23:12:6e:af:7f:14:
                    91:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:51:F3:84:F6:71:27:1D:FE:88:93:DD:30:34:8B:38:7D:23:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/d9191d0d-76d3-3cf3-9488-1ada1bc8dd40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.96.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:a7:8c:a4:b0:aa:62:9a:ba:0b:c0:54:aa:1c:d4:59:75:8b:
         0f:8b:1d:b7:f0:04:ca:76:69:65:2f:35:32:c2:51:a5:cf:bd:
         82:54:c9:a7:bc:50:17:22:1d:eb:e4:05:5d:bd:7c:43:72:d6:
         96:4a:29:7f:71:82:c3:aa:d5:36:9a:6d:7c:d1:d6:b3:57:ad:
         80:ad:f3:75:55:6d:bf:79:27:c6:d1:e9:75:71:09:0a:b6:38:
         4a:ce:ad:a9:93:8c:72:d1:bc:3d:1e:03:6d:7c:8e:e4:ee:65:
         4c:ba:b4:97:35:b9:60:20:86:78:f9:55:08:48:10:aa:f5:5e:
         06:9b:48:0b:2e:c7:30:b5:56:c3:a3:d8:46:0e:90:8e:01:12:
         c9:00:07:6d:0b:58:25:d1:04:46:14:e7:4d:00:e8:5f:e7:b6:
         ee:c0:af:64:80:e0:d6:08:71:8f:79:95:93:00:89:ac:91:e0:
         0e:e1:a0:5d:cc:81:47:ee:0b:c1:22:eb:16:99:2c:40:16:34:
         d9:af:59:fc:dd:21:fb:15:3d:3a:f2:9b:0c:69:40:6b:68:ff:
         64:71:e4:34:a6:8f:e8:97:e6:89:f0:38:0c:76:0c:22:37:1f:
         8b:be:23:cf:a3:91:77:d6:0d:60:4b:db:aa:d5:bb:80:d3:7f:
         2e:78:79:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:23 2026 by rpki-client