Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa
File:                     ed81676c-13be-3e90-97d5-df858a13c13b.roa (raw, json)
Hash identifier:          +PdQazo6TcNGlvw8z2mGrAVGNdL1LZa9Y9aAXpFTpGE=
Subject key identifier:   DB:9A:02:78:75:99:A9:C8:61:F4:AC:40:9A:0D:FF:A7:27:69:00:A2
Certificate issuer:       /CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9
Certificate serial:       010D0C9F4328584E6144A8B08D6F0198FF753700
Authority key identifier: 87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     32787
IP address blocks:        192.243.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:a8:b0:8d:6f:01:98:ff:75:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=66b50208-1c74-4b64-8c55-b4331ac5e249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:1d:34:02:17:42:04:d9:c7:ba:21:b2:77:
                    47:ef:fc:97:43:aa:54:f3:b8:d6:2d:8b:ff:28:2f:
                    f9:5e:37:41:50:50:bc:23:1e:56:8f:f0:c9:91:5d:
                    56:7b:78:c2:1d:3d:0e:57:e7:1a:af:e6:5c:c4:25:
                    15:c3:fc:56:fc:86:c2:bc:af:24:bb:a1:58:b3:04:
                    90:5c:60:a7:ad:83:4e:c7:7a:b5:0c:54:0a:46:9a:
                    ec:37:90:5a:bb:fd:90:66:f9:00:cf:47:ee:f2:c6:
                    8e:92:09:b8:80:8b:2b:27:b1:78:de:a1:e8:20:86:
                    a1:fe:8f:6a:c0:28:10:73:8f:85:c8:76:2f:77:c5:
                    f2:a2:b1:85:cf:29:0d:7a:0f:14:2a:ce:4f:04:da:
                    fd:1d:84:1d:26:9b:47:06:24:f0:ac:89:60:d9:c8:
                    41:13:b3:73:7a:e2:1c:88:56:b4:85:fc:91:4d:7d:
                    ac:52:41:57:6c:32:44:32:08:35:ca:26:be:c4:49:
                    d8:3f:6c:8e:43:ff:59:cc:8b:5f:74:5f:fe:15:2b:
                    1e:d0:57:5a:6d:05:d3:2b:c8:2a:04:f6:bd:ee:0c:
                    2d:f5:5c:24:13:6d:31:34:e4:75:6c:bb:0a:88:16:
                    b1:e0:39:77:6d:3b:9b:32:1d:b7:64:4e:67:9b:2e:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9A:02:78:75:99:A9:C8:61:F4:AC:40:9A:0D:FF:A7:27:69:00:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/ed81676c-13be-3e90-97d5-df858a13c13b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.crl

            X509v3 Authority Key Identifier:
                keyid:87:84:0F:3E:28:8D:EB:FA:C0:58:73:AA:77:33:2A:06:15:D3:DC:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/453b5eab-3cd5-479a-b5ba-ba8e0bdc9ca9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c4:ff:5e:0c:cd:e0:29:57:b4:02:93:95:5e:0f:09:dd:35:
         a6:81:9c:b2:a5:1a:70:4b:a5:c6:a0:e1:0a:6d:bc:7b:e9:93:
         76:c0:c1:17:12:7c:ca:19:82:d8:12:a0:35:57:6f:73:81:87:
         19:8a:05:b5:02:37:32:1a:aa:3a:6c:3f:dc:2b:d5:61:9d:88:
         97:c8:21:dd:f2:a9:15:3a:1e:93:e1:87:db:fe:eb:b5:45:99:
         13:b4:11:f1:40:11:a4:25:5c:17:75:1d:bf:f7:5f:de:94:48:
         cc:b4:7c:5b:e4:86:c7:94:34:12:19:0c:b3:ac:4f:df:fb:7d:
         52:47:3b:8b:61:64:21:6b:ed:5e:79:42:03:45:ef:46:5c:eb:
         fd:6a:c0:ce:af:a6:e0:62:f8:94:40:bf:fb:da:2d:28:ef:f7:
         ae:53:37:db:23:c1:5b:21:cf:48:13:28:c8:48:a1:f9:ca:3d:
         32:23:40:8b:ef:25:f9:ea:06:e6:a6:48:3c:85:fc:c5:33:c2:
         f4:91:c3:c3:99:38:2d:94:91:af:d2:4a:a9:61:48:0c:54:45:
         5b:82:fa:2f:02:ec:59:df:01:f6:1c:7a:ba:24:4e:dc:0f:d5:
         de:26:c7:4d:21:cd:a6:8a:2c:49:ea:74:b2:d7:1f:97:4b:2b:
         1b:4e:38:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:44 2026 by rpki-client