Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/79ae3d69-897e-391d-8b57-737e29c8d67c.roa
File:                     79ae3d69-897e-391d-8b57-737e29c8d67c.roa (raw, json)
Hash identifier:          yBhMeDp6RKh/PD80iX+w3eQL4l6cVPQF7TULTDR+N+0=
Subject key identifier:   C8:88:03:1B:05:A3:A8:79:AB:2E:31:B9:3B:08:A6:1B:17:AF:C7:30
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA7BC9797F0DE402503080
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/79ae3d69-897e-391d-8b57-737e29c8d67c.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        151.101.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:7b:c9:79:7f:0d:e4:02:50:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=a724bcd2-0cac-40b1-893f-7bb4fea7df26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a6:6d:b6:52:aa:af:ca:6f:ac:42:d6:af:5f:
                    f5:92:ee:0d:9e:95:1b:ba:7e:2a:3f:b6:99:74:c1:
                    a7:ba:7c:52:f2:89:d1:7d:f1:a9:30:28:ae:bd:a3:
                    1b:ce:66:23:8f:a8:d7:83:6c:a6:36:98:21:55:d1:
                    42:f6:66:72:6a:b7:cb:9e:64:ba:b5:64:54:7f:cf:
                    05:9e:23:c3:09:2a:3f:03:95:25:9a:17:0e:68:ec:
                    94:ab:67:b4:dc:c3:fa:a5:39:5e:3c:17:fb:50:96:
                    c2:df:36:73:5b:48:3b:3e:cb:a4:18:50:66:2c:cd:
                    1f:88:c6:74:ef:76:ab:83:35:65:0d:cd:f7:87:91:
                    00:04:20:c0:78:45:d5:56:cd:87:13:ef:c4:8e:63:
                    bb:cf:98:38:e5:8d:d6:21:66:3b:d2:c2:e4:85:f5:
                    c9:aa:16:c0:bd:65:26:c8:a6:76:43:8c:71:37:98:
                    ec:f7:0a:8d:a5:32:25:fb:96:f5:7c:89:8f:1f:b8:
                    69:7d:c0:30:3f:8e:6a:b1:4b:2e:6c:98:c8:5c:73:
                    dc:e1:99:8c:d8:8c:b7:dd:f4:d5:ed:ac:5a:20:7c:
                    ea:ff:cf:65:e9:df:2b:3b:c8:d2:19:2b:dd:d6:a5:
                    a7:0a:f3:34:c7:31:77:d8:82:d0:cb:cf:71:d5:9d:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:88:03:1B:05:A3:A8:79:AB:2E:31:B9:3B:08:A6:1B:17:AF:C7:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/79ae3d69-897e-391d-8b57-737e29c8d67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:38:46:bd:42:d1:0b:e5:ca:df:77:5f:53:bb:e7:7f:de:cf:
         01:88:0a:c8:7e:49:70:e4:a1:e8:0f:a3:66:55:1b:63:70:97:
         da:da:ac:e8:d4:2a:3c:e2:d9:6c:13:87:d9:49:ae:83:0a:5f:
         fe:25:61:2b:dc:a3:6a:bb:f0:e9:44:05:6c:f0:c1:3c:0a:28:
         66:15:ee:41:9e:b5:eb:99:ca:28:2f:26:6d:c6:7f:b8:b4:39:
         b1:88:7f:44:3c:9b:9f:47:6b:0c:5c:a7:28:97:44:89:57:9c:
         46:3b:59:09:51:da:79:a1:56:93:8d:e4:e5:a8:b0:8c:c7:5c:
         02:2d:b5:be:bf:e3:6d:d1:be:89:01:66:f2:67:b2:42:1a:28:
         a0:0e:ec:68:6c:c9:cf:83:01:e4:15:fa:e0:2d:18:fc:7f:21:
         81:64:c5:7e:80:60:1a:ba:55:59:d3:a3:d7:73:70:b8:e9:fc:
         e2:27:9d:53:6d:4f:58:4d:f6:00:e6:ea:65:47:2a:f2:df:00:
         d8:70:44:bf:e7:dc:4e:a7:d6:92:9b:ce:5f:fa:b8:82:18:85:
         fc:b1:3e:76:e0:0d:db:1e:d5:c9:a6:ac:d8:07:a8:48:15:6e:
         2a:01:02:b4:7a:67:ca:b3:16:62:51:84:e0:e2:c6:cb:82:1b:
         55:3a:c8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:58:15 2026 by rpki-client