Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/d50ed0af-6b2c-39b8-8ab5-7518873cf5c8.roa
File:                     d50ed0af-6b2c-39b8-8ab5-7518873cf5c8.roa (raw, json)
Hash identifier:          ANurB0RMoCgklL8C+XcmGSiKXdOd4JYHXXTiDU0Adxg=
Subject key identifier:   C5:1C:17:77:2B:6E:4F:FE:83:2D:5A:A6:4F:6E:89:3C:0A:84:B7:05
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584F31B7BA36D4D279FF52A3D8C0
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/d50ed0af-6b2c-39b8-8ab5-7518873cf5c8.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     8987
IP address blocks:        152.55.144.0/21 maxlen: 24
                          198.29.20.0/22 maxlen: 24
                          2602:f9e7:2e::/47 maxlen: 48
                          2602:f9e7:38::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:ba:36:d4:d2:79:ff:52:a3:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=d97d5e2c-712d-409e-9591-2b8d82d5838c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:f7:82:24:eb:67:1e:58:e8:92:2a:67:65:
                    96:7a:c7:78:bf:e8:af:e6:9d:d9:38:98:c4:a3:e3:
                    02:4c:6f:95:23:a8:12:0e:2f:c4:92:ff:8d:ea:9e:
                    78:dc:83:70:65:cd:84:22:06:2f:2b:0c:8b:19:fd:
                    0a:45:03:38:58:52:22:ba:d6:b7:46:39:18:cc:47:
                    cf:b5:c3:f4:e4:ae:5f:ee:ef:d7:33:a1:06:09:49:
                    b2:56:0c:b0:89:b0:32:b7:23:db:dd:99:88:e8:41:
                    32:ea:09:24:0d:c4:53:38:5f:ea:9f:f2:43:93:bb:
                    7c:97:6f:98:94:fb:48:82:23:a2:76:83:be:1a:de:
                    25:db:9c:e6:2c:ae:aa:4c:34:a8:6e:fd:ca:68:84:
                    d0:15:34:40:62:f0:33:3b:a8:6a:99:d9:ff:fc:da:
                    40:6b:0c:e5:41:60:eb:59:5c:98:90:ab:ff:30:44:
                    d4:ef:ab:f6:eb:76:c7:77:1a:4d:06:41:b1:b5:7a:
                    84:0e:f1:e5:07:98:a5:19:bb:3f:44:21:c6:9d:65:
                    12:9a:d9:03:e8:b7:b6:c4:a1:b8:50:3f:52:af:f7:
                    49:a3:a5:f0:c5:f2:a9:ff:55:6f:a3:ce:f1:df:f4:
                    53:b9:cc:45:1c:4b:f7:a3:20:bb:4d:68:85:6d:03:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1C:17:77:2B:6E:4F:FE:83:2D:5A:A6:4F:6E:89:3C:0A:84:B7:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/d50ed0af-6b2c-39b8-8ab5-7518873cf5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.55.144.0/21
                  198.29.20.0/22
                IPv6:
                  2602:f9e7:2e::/47
                  2602:f9e7:38::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b0:be:7c:9a:d2:dc:46:bf:47:b7:56:56:e3:18:ea:c6:fb:
         ae:b0:c7:31:85:87:00:2d:6c:0d:49:06:c7:f0:43:0b:9e:58:
         51:25:ae:95:cb:da:9b:8c:1f:b8:49:8d:a7:76:e1:99:11:e3:
         a2:86:b5:c2:0e:82:c6:46:a0:16:0a:7e:96:15:58:17:e5:11:
         52:83:38:fa:cf:5b:a9:53:35:68:b0:5b:8d:08:5f:bf:e5:4f:
         06:59:18:44:e9:34:d7:55:99:98:97:60:9f:70:07:3d:48:45:
         ba:88:e8:85:a1:36:c3:77:a6:cf:cf:7d:2a:b8:4c:9e:d0:a5:
         2d:cf:65:f8:08:a9:07:2d:f7:87:73:b8:bb:d4:fa:56:4a:2b:
         d6:0b:1d:fa:54:b9:fe:7a:df:35:07:37:2f:c4:37:5a:27:80:
         85:d6:55:ae:ad:38:86:ea:df:27:7c:02:23:7f:d0:b4:43:84:
         97:33:b5:f7:ef:5e:b6:fb:73:9d:b6:c4:62:87:d8:7a:b3:ff:
         78:6a:46:c8:cd:ba:73:c2:c6:d4:19:2b:2d:8a:a7:7b:93:04:
         38:29:aa:0c:08:a5:39:75:16:3b:48:19:b4:ff:0a:5c:05:cd:
         2e:67:79:05:37:29:b2:d0:e6:c7:5d:1e:16:94:d9:ce:d8:dc:
         f1:c3:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:14:53 2026 by rpki-client