Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa
File:                     fd434724-7632-35bf-832e-50b74b1f77f7.roa (raw, json)
Hash identifier:          lCQW9JE81qgb7XDKw5bok633umGp52OM4zGH4y30Vsk=
Subject key identifier:   05:DB:FA:F6:F6:E5:39:FD:2C:7D:47:6F:D0:C6:FA:6A:C3:69:DE:38
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584F9FFDDFA7DC91E2496A8DE000
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa
Signing time:             Mon 26 Oct 2026 01:00:13 +0000
ROA not before:           Mon 26 Oct 2026 01:00:13 +0000
ROA not after:            Sun 24 Jan 2027 02:00:13 +0000
asID:                     54535
IP address blocks:        156.53.200.0/24 maxlen: 24
                          156.53.201.0/24 maxlen: 24
                          156.53.232.0/23 maxlen: 23
                          156.53.240.0/24 maxlen: 24
                          156.53.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9f:fd:df:a7:dc:91:e2:49:6a:8d:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Oct 26 01:00:13 2026 GMT
            Not After : Jan 24 02:00:13 2027 GMT
        Subject: CN=75148d7b-4535-410c-b409-e3deafc1589a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:89:fc:c7:d3:44:ce:5a:56:1f:18:5d:00:f6:
                    4f:f7:72:3e:11:9e:70:27:78:97:c8:40:44:a7:66:
                    d1:cc:49:77:63:62:69:85:2f:7b:bd:0d:f2:d4:10:
                    77:19:d0:23:c6:fb:6c:f7:43:1f:b7:f1:19:15:2b:
                    74:b0:1d:b0:d0:65:2f:29:29:53:48:85:f5:78:17:
                    f3:44:fb:be:25:a4:ea:ee:8f:21:91:7a:d0:32:0b:
                    65:1f:d3:3d:dd:cf:da:e1:b8:52:fe:40:5f:22:3e:
                    63:d6:77:9f:69:1b:91:36:81:c8:1b:7f:3f:54:9b:
                    82:9c:55:be:3e:cd:56:0b:0c:27:90:80:5e:32:79:
                    e1:16:71:63:1c:2c:5c:89:1f:99:e3:51:8d:2f:9d:
                    28:13:37:9b:3b:e9:cd:e3:52:99:71:58:7d:98:73:
                    88:ab:15:14:fc:f0:c9:42:90:67:6f:c1:ea:bf:89:
                    69:94:6c:13:7b:7c:ec:c6:5e:9d:3b:c9:7d:0e:fe:
                    78:ad:aa:b2:36:5b:aa:5d:ab:1e:59:c8:5d:74:fd:
                    ed:56:79:31:b8:19:5d:e6:23:30:a3:ac:4f:a1:d3:
                    a1:c3:a1:fe:98:73:3d:23:59:fd:a3:eb:f9:20:bd:
                    3e:63:24:6a:51:e4:51:30:85:db:0e:34:89:dc:8b:
                    79:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DB:FA:F6:F6:E5:39:FD:2C:7D:47:6F:D0:C6:FA:6A:C3:69:DE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/fd434724-7632-35bf-832e-50b74b1f77f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.53.200.0/23
                  156.53.232.0/23
                  156.53.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4d:9a:55:8e:80:50:26:58:7c:33:d7:ca:fe:8d:81:03:86:
         47:25:ca:5b:19:ef:c5:c1:fe:89:c7:a9:b3:07:3d:06:1a:3d:
         45:23:a4:f7:2b:af:36:bd:55:e2:d2:80:a8:c9:3d:81:7e:eb:
         06:07:a6:ce:17:fe:d0:47:e0:bf:a7:af:a8:db:fb:dc:b1:27:
         94:4a:7d:67:fa:6c:e0:93:74:80:b2:cb:91:6e:aa:2a:5b:d8:
         82:68:56:c4:30:a4:56:67:3e:97:ae:dd:3e:07:91:a0:b8:25:
         6b:a7:c6:4f:0b:5a:49:05:32:a1:ec:17:81:76:02:64:d0:86:
         62:69:b6:69:5c:3e:0b:39:54:ba:bb:48:67:13:45:a3:0e:b6:
         40:1b:34:3d:f8:07:a9:6f:de:47:24:9f:89:53:75:d2:2e:78:
         1a:15:95:ad:9b:e4:07:04:b2:8b:91:0f:7f:90:da:0d:81:86:
         b3:77:54:30:8c:40:a9:3c:78:c6:8e:69:6f:a0:6d:36:e1:b9:
         71:6c:94:95:1b:cd:d6:1c:fd:33:a4:92:4b:f8:7c:e4:3b:bd:
         14:d0:6f:44:bb:fe:5f:4e:7b:e8:bd:86:19:6a:5b:fc:0e:7e:
         fe:18:44:77:9f:d1:60:e6:b3:49:59:be:c3:38:18:83:9b:37:
         b3:f2:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:41:13 2026 by rpki-client