Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ef495be-c2fb-341a-95ef-f915cb6d4d40.roa
File:                     8ef495be-c2fb-341a-95ef-f915cb6d4d40.roa (raw, json)
Hash identifier:          OOgFfCn12qQRgfDDwfSKzocx7ieKw+qWWww100qIYWs=
Subject key identifier:   88:C4:2C:22:A1:08:75:3D:53:0E:06:DD:2E:8C:20:8F:A0:99:8C:D6
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F549D8C6918F32F8A7BE03280
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ef495be-c2fb-341a-95ef-f915cb6d4d40.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     54113
IP address blocks:        157.52.89.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:8c:69:18:f3:2f:8a:7b:e0:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=0724e17c-f83d-40c1-9c82-a8eb1323f8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:cc:f9:71:11:b3:f5:ee:58:d0:7a:a1:15:
                    6e:82:9a:e9:3c:3f:3b:6b:ca:2d:b1:6b:c6:62:e5:
                    e0:96:ff:fe:e6:a6:3e:db:f9:fe:a6:0e:8a:f1:e9:
                    07:87:d3:2d:f3:32:6e:5c:c3:31:e6:93:cb:77:c2:
                    67:d8:02:56:a9:5c:79:71:99:c7:7e:e7:36:66:3b:
                    a3:13:98:bc:3b:b6:c5:dd:0f:bc:37:7e:65:02:37:
                    31:98:6a:2a:ba:f5:94:83:c6:7b:2c:fc:ea:92:ed:
                    ff:76:a1:a6:ad:54:4c:47:e3:cc:48:71:51:74:0b:
                    b2:c4:06:e3:ca:87:31:66:3f:35:24:b0:80:16:62:
                    85:74:39:cd:d2:e3:39:2c:4a:66:9a:99:fd:6d:da:
                    a5:d0:7e:a5:64:b8:59:d7:f6:71:12:0c:e6:0a:c0:
                    92:ad:ae:04:83:33:62:b5:e9:35:df:a6:2a:f9:21:
                    cf:17:3c:6c:f8:89:b3:f1:35:a5:12:15:41:86:b0:
                    92:eb:71:05:7e:f1:f9:90:01:ac:0e:7c:9e:fa:6e:
                    dd:7c:00:bf:b0:69:cd:2f:9d:ff:97:9f:16:c2:35:
                    2b:32:10:da:df:0c:39:7d:5f:09:60:40:ff:71:29:
                    de:60:7e:ce:75:c3:30:ed:a3:c6:d8:f2:8d:cb:e3:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C4:2C:22:A1:08:75:3D:53:0E:06:DD:2E:8C:20:8F:A0:99:8C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8ef495be-c2fb-341a-95ef-f915cb6d4d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.89.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:10:19:31:32:58:b7:c1:75:34:f0:1b:38:2f:18:f6:77:9d:
         bc:54:d5:82:25:db:7f:30:52:04:5c:5a:49:15:11:33:22:06:
         d7:e0:6e:92:02:da:4d:d5:e5:04:3d:34:a1:24:d8:59:59:e1:
         0e:e6:cc:84:6a:05:f8:a5:d7:fd:fe:e0:00:d0:c6:1f:f5:e7:
         b5:89:dd:75:ee:30:b9:07:bf:7b:0c:2d:b8:bf:02:ce:4a:40:
         a2:ed:c0:f0:5f:12:c8:0e:02:16:c8:42:a5:d4:1a:d9:51:16:
         06:71:4a:b7:bd:84:25:da:f1:5d:70:df:df:b3:54:99:19:4a:
         7a:7e:16:15:61:22:dd:ac:4d:a8:6b:f9:03:dd:05:73:56:04:
         91:5e:84:6e:ff:08:43:7e:e9:71:69:a7:98:81:b0:63:be:69:
         a6:c9:ca:7c:9f:ce:4a:11:b1:7d:9c:9e:83:30:1e:53:03:75:
         46:7a:cf:73:7a:e9:50:77:4e:97:ba:7f:58:a0:d1:24:16:03:
         b7:77:ba:f7:12:fe:41:9d:21:08:a4:92:61:99:be:92:2f:37:
         21:5e:a2:f8:1f:5a:d3:98:f0:0a:d6:46:2f:c0:14:50:9c:59:
         c9:c4:d0:f1:16:d5:b4:d2:59:0a:5a:5c:5e:aa:1a:0d:35:ec:
         cf:a0:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:31:40 2026 by rpki-client