Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c8b343cc-ea0c-31f5-9544-92cc00178733.roa
File:                     c8b343cc-ea0c-31f5-9544-92cc00178733.roa (raw, json)
Hash identifier:          iPEJ+YxlJ0E3Js++FOHzoMHGZ1reqX96ucFx/RtdV7c=
Subject key identifier:   FC:3E:21:B6:99:13:D7:AA:F2:36:55:DF:79:A6:8F:15:C2:64:2D:2C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA77FAC29C666DB45F7D00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c8b343cc-ea0c-31f5-9544-92cc00178733.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        157.52.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:77:fa:c2:9c:66:6d:b4:5f:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=47be558c-cd84-4a40-aa5d-201ed37beff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:fc:fe:3f:d0:21:d4:7d:5d:2b:87:00:ec:
                    6a:68:8d:77:96:9c:53:a5:07:b5:05:7a:e6:92:7b:
                    56:06:7f:bb:b6:8c:14:0a:31:cb:0b:06:f0:99:6d:
                    30:78:83:ef:c6:32:c5:7b:0c:5c:c1:3c:e1:34:97:
                    39:50:b6:41:00:a8:3a:00:60:ff:f9:9c:c0:72:ee:
                    74:3d:d3:60:e8:cf:f2:37:ce:ff:b7:23:31:48:14:
                    2a:30:d3:c3:f6:3a:de:a7:e6:35:db:62:6c:f0:61:
                    82:aa:01:59:4f:91:df:fa:52:ae:74:04:ea:de:3b:
                    45:34:47:fd:20:8e:07:95:d5:51:ef:7e:36:23:37:
                    ca:7f:55:42:65:ba:83:ac:8e:31:c6:e4:21:14:6a:
                    1e:5d:69:00:9f:05:68:5f:1f:55:e8:aa:89:13:84:
                    55:bb:6d:2a:6e:19:42:75:7b:97:de:22:00:51:79:
                    6d:bd:0c:14:e5:64:f7:96:ec:86:96:4b:fd:fd:49:
                    30:eb:e8:b3:79:51:ca:40:bd:12:51:ab:90:36:97:
                    06:1b:e9:02:0b:2f:ae:4c:62:29:0a:b9:9b:03:61:
                    75:f0:89:26:fc:61:0a:43:bc:8b:9c:93:13:17:3b:
                    fb:7d:e4:a4:0c:8c:36:2c:15:9f:43:a4:ec:9e:7c:
                    49:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3E:21:B6:99:13:D7:AA:F2:36:55:DF:79:A6:8F:15:C2:64:2D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c8b343cc-ea0c-31f5-9544-92cc00178733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a3:0e:2a:4f:3c:69:7f:4d:cd:09:d0:c2:f6:71:46:7e:c6:
         71:9e:cd:4d:dd:73:ea:75:e9:ab:bc:e0:ad:82:c0:09:1a:c3:
         40:a4:3d:f7:ee:28:96:dd:3f:55:1a:7f:04:03:84:ae:e2:8a:
         01:ed:0d:54:f6:6b:67:3e:3f:05:ac:8d:88:a2:09:74:a1:d2:
         67:de:a7:94:a4:47:24:d6:29:35:3d:74:0c:6e:a4:7b:8f:49:
         6f:12:42:3d:81:f7:ed:e1:4b:ad:05:d0:5e:e6:de:0a:d7:a1:
         04:f2:38:24:a1:be:04:ec:5f:6d:14:06:0d:f5:be:ad:e2:5b:
         cb:17:1c:63:d2:52:d3:51:c2:3a:7f:b2:36:a2:ad:70:ca:28:
         cc:da:fe:d1:a7:22:d7:6c:58:50:a3:11:c3:90:dc:e3:a6:b0:
         57:c8:e0:48:f7:1a:b3:8b:4a:d7:bf:87:03:14:ef:18:6c:cb:
         19:e9:40:e7:99:4d:37:b2:29:84:e4:53:43:80:ec:fd:8f:57:
         dd:1a:a2:e7:c9:f6:61:1a:89:ec:59:c9:3e:d2:1c:50:e5:6a:
         e9:87:b1:24:7f:0c:5d:dc:fb:18:92:dd:0f:a4:8f:ee:6a:69:
         51:9e:60:77:8c:d3:86:26:6f:33:71:c8:07:1f:d1:9d:91:8a:
         84:1f:98:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:09:14 2026 by rpki-client