Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/658c637a-98ca-3728-8984-bd2a8f1d8035.roa
File:                     658c637a-98ca-3728-8984-bd2a8f1d8035.roa (raw, json)
Hash identifier:          jPLtxdZXn89eWUbumnKeZygeApGoN9ceHBDksU0QaCg=
Subject key identifier:   6C:B5:D0:2C:0C:56:4A:55:F1:64:24:DE:C7:D7:C7:37:8F:FF:82:E9
Certificate issuer:       /CN=4ec5b803-bc8c-4215-9539-153e00d47df8
Certificate serial:       010D0C9F4328584F4973B57067B7531C5A064DC0
Authority key identifier: 31:88:E1:78:F6:38:DF:1D:3B:1F:5C:AA:FF:2E:5C:1F:91:D7:60:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/658c637a-98ca-3728-8984-bd2a8f1d8035.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     393463
IP address blocks:        205.153.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/4ec5b803-bc8c-4215-9539-153e00d47df8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/4ec5b803-bc8c-4215-9539-153e00d47df8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:b5:70:67:b7:53:1c:5a:06:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec5b803-bc8c-4215-9539-153e00d47df8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6ee2e915-19b9-4a75-909b-80f8638eb764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:15:08:cf:7b:6e:14:9c:8f:96:c1:06:74:
                    c1:e8:97:58:90:7e:f1:e0:ec:c0:4d:84:67:41:47:
                    ac:b2:ec:82:c4:49:51:ec:54:5a:1b:61:bc:f6:fe:
                    9a:6c:be:18:9e:be:5e:75:fe:b7:9a:3f:88:32:9c:
                    c0:ca:fe:4e:d3:79:c9:65:fa:1f:d6:14:68:59:77:
                    6b:15:67:b4:4d:59:81:dc:69:e9:5e:a1:06:05:e5:
                    65:94:30:4c:40:73:65:e0:0d:af:d9:de:90:04:43:
                    1a:ad:8a:e5:36:ae:0e:84:42:a0:81:d0:4c:c5:3a:
                    0f:30:61:d7:6e:82:00:15:b7:ce:93:07:44:d7:b6:
                    86:2d:26:b8:cc:f7:54:7f:ac:c3:eb:09:e2:2d:67:
                    94:af:61:28:4b:fc:a1:7b:31:b8:1f:71:64:de:43:
                    06:92:9f:bf:bf:96:8d:4a:ce:82:f3:a8:2a:8f:5c:
                    00:7e:60:bc:01:35:a4:79:f2:9f:4f:0d:63:70:79:
                    e7:6e:71:1c:21:ae:32:59:04:df:51:03:7f:5f:da:
                    92:31:7d:75:32:01:fb:c8:89:06:f3:35:96:7a:3a:
                    e8:01:ca:d2:06:93:a3:67:36:5b:f1:13:05:b0:75:
                    91:ba:ef:59:1b:76:a5:f1:61:3c:18:a4:3e:44:d6:
                    1a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B5:D0:2C:0C:56:4A:55:F1:64:24:DE:C7:D7:C7:37:8F:FF:82:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/658c637a-98ca-3728-8984-bd2a8f1d8035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/4ec5b803-bc8c-4215-9539-153e00d47df8.crl

            X509v3 Authority Key Identifier:
                keyid:31:88:E1:78:F6:38:DF:1D:3B:1F:5C:AA:FF:2E:5C:1F:91:D7:60:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.153.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:64:f3:30:82:51:be:7c:08:7e:13:ba:42:af:89:e0:57:3e:
         77:cb:96:1e:f6:0f:97:30:d8:64:3f:f7:92:81:f2:ab:23:b1:
         79:f2:02:81:98:e3:bc:0e:0d:24:95:d8:4b:32:a3:b7:8a:93:
         b6:73:1a:25:ec:91:f4:f3:8c:ac:89:c8:5a:8b:79:ed:a5:d0:
         0d:6a:3d:81:09:4b:fb:26:87:d0:d9:99:44:29:e7:90:87:a7:
         02:a7:63:ca:90:84:f5:26:32:16:11:fa:48:9b:a1:33:68:38:
         df:1a:a9:e9:46:e6:57:45:39:e6:38:43:41:d4:c1:7a:b2:38:
         fb:16:33:2b:70:98:a4:5c:5a:c4:ca:58:84:2e:7b:31:ba:57:
         32:45:ac:b1:6c:1e:9e:85:1b:ef:85:ba:d2:a2:0d:7a:b9:cd:
         c1:a9:c1:91:9f:42:a6:f6:95:9e:6d:7b:1d:f8:76:0f:4c:7d:
         8c:9e:e0:3f:34:26:ff:fa:87:9c:8c:ec:80:cc:1e:38:82:7c:
         36:d3:3a:81:c6:71:62:bc:60:fc:d0:1c:1a:e0:42:88:64:aa:
         94:46:58:e1:82:3c:2f:38:68:fb:e3:01:7c:10:ca:d0:6c:c7:
         8c:da:04:1c:8d:a2:ff:21:92:d7:20:c4:82:ea:a8:26:6c:e8:
         ff:66:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:34:19 2026 by rpki-client