Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a4354639-270a-3236-86a2-200c531c9a81.roa
File:                     a4354639-270a-3236-86a2-200c531c9a81.roa (raw, json)
Hash identifier:          rlf3SdRgUE93yi7aYBNe2L7QEhhuEhCaXIC4CiDBbUk=
Subject key identifier:   36:30:47:01:BD:A5:E9:7D:0E:C6:FF:4E:D1:E2:F3:E0:62:40:47:A8
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584FC03674C36287C0BCE69F1D00
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a4354639-270a-3236-86a2-200c531c9a81.roa
Signing time:             Fri 06 Nov 2026 14:00:13 +0000
ROA not before:           Fri 06 Nov 2026 14:00:13 +0000
ROA not after:            Thu 04 Feb 2027 14:00:13 +0000
asID:                     216047
IP address blocks:        43.225.126.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c0:36:74:c3:62:87:c0:bc:e6:9f:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Nov  6 14:00:13 2026 GMT
            Not After : Feb  4 14:00:13 2027 GMT
        Subject: CN=a48aaef4-fcfb-494a-a9d2-8e53e0731cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:63:41:36:70:5a:da:31:3a:ed:a1:86:36:
                    bd:4c:0d:8c:08:f7:22:eb:1e:f8:e7:29:a4:d4:71:
                    8b:08:0c:c3:d3:b9:ed:83:d8:34:c9:f7:59:2b:90:
                    03:32:29:ad:f0:10:91:fc:b7:c5:26:6c:ef:1e:c3:
                    05:c3:b6:b3:4c:5c:56:d4:f4:4a:fa:73:b4:ec:01:
                    24:2b:61:3a:31:d4:ba:ad:cb:9e:be:03:d3:f4:3a:
                    52:e3:d3:e9:81:1e:74:9c:05:fd:ea:8d:b6:d1:0a:
                    64:02:49:8d:8c:b8:3a:67:6d:94:20:d0:74:a2:05:
                    1d:4d:0a:fb:8d:b6:64:52:72:6a:5a:25:d6:11:74:
                    e4:81:ef:2f:d1:ba:4f:fc:a8:82:bf:e6:9a:03:41:
                    ce:66:7f:84:34:f0:58:bc:1e:c4:b5:48:c1:14:46:
                    c0:b4:43:e2:9d:21:c7:d1:f4:fe:98:96:0e:40:7e:
                    88:f9:09:50:61:88:08:5f:c2:9a:9e:36:b0:ab:26:
                    12:23:7a:4d:4e:91:3e:37:fd:c3:10:29:c0:2c:1b:
                    f4:14:5b:6d:be:aa:e2:61:71:c1:8c:82:ba:ad:37:
                    f5:f3:16:7c:7b:d3:8e:5b:75:b9:f1:df:2c:d0:62:
                    2e:41:39:58:29:0f:05:c1:51:a8:80:89:6c:2b:d3:
                    74:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:30:47:01:BD:A5:E9:7D:0E:C6:FF:4E:D1:E2:F3:E0:62:40:47:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a4354639-270a-3236-86a2-200c531c9a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:ce:3e:fb:31:7c:a3:68:c2:3b:6c:a3:04:a0:8e:69:c0:a7:
         18:fc:92:25:0c:85:45:9b:e4:84:8e:78:3e:1f:b1:30:26:0d:
         e0:ea:95:52:bc:79:4e:45:ef:99:9b:35:2d:da:e7:d8:ed:91:
         bc:a5:52:e8:13:a8:86:85:8e:a0:25:6a:b4:2a:06:27:aa:bb:
         c3:46:33:9d:6e:de:21:81:55:ba:92:21:c4:78:eb:fa:5b:d4:
         b5:b3:65:1d:53:75:a4:cf:27:d1:65:51:88:b3:09:fb:11:f1:
         ca:16:5b:85:91:40:fc:f6:6a:ba:d7:96:01:18:23:0f:95:78:
         0e:f5:97:93:42:61:3e:f6:02:57:da:9c:d8:c0:73:1f:6f:a3:
         34:3b:86:e3:89:12:6f:d2:4b:db:73:94:93:fb:b6:6d:57:a1:
         3e:7b:70:ae:3f:28:3d:f7:d8:ff:de:05:47:87:00:bc:f9:b0:
         ba:4b:61:70:91:a5:aa:93:95:8e:9f:32:54:7b:78:ca:5f:b0:
         3f:03:4f:05:02:26:54:0c:9e:64:92:52:c3:6f:53:38:11:e9:
         9d:a0:b3:4c:8a:1c:a6:a7:6d:58:5c:00:37:61:0f:5f:9b:65:
         28:36:0d:11:55:83:23:c0:ab:8f:1f:f1:78:c5:f1:e1:a9:cd:
         c7:57:60:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:06:35 2026 by rpki-client