Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/042736fc-2afe-3565-859f-26dd3e4a85e9.roa
File:                     042736fc-2afe-3565-859f-26dd3e4a85e9.roa (raw, json)
Hash identifier:          lNEKnqkSkkL1uklgT89/YLSpl5IGoW5VV2p7tYC9t/o=
Subject key identifier:   10:CB:2D:DD:84:6A:1E:82:CE:1F:8F:7D:C5:6B:56:9B:8F:F8:A4:FE
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584F49734F3E9A6604871A11CC40
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/042736fc-2afe-3565-859f-26dd3e4a85e9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     55286
IP address blocks:        152.232.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:4f:3e:9a:66:04:87:1a:11:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b5caea95-bc48-4632-9303-413121f67416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:31:12:01:da:8b:7d:5b:f8:31:88:9d:9e:d1:
                    d4:f1:81:5e:ef:94:0e:30:ab:34:fc:ef:ae:3f:a7:
                    9b:d4:a3:30:7d:a7:91:d3:b7:d7:dc:ba:54:0e:bc:
                    3d:d4:7c:19:a4:96:8c:7e:0a:2f:43:94:7f:fa:88:
                    4c:c9:c3:a4:ec:5d:3e:87:a2:af:a5:14:8e:f7:5d:
                    9b:ea:78:38:46:0f:ca:6a:89:c3:f0:f4:dc:8e:ce:
                    02:cf:ab:44:0f:bc:31:fe:11:a3:e6:2e:c1:1d:5e:
                    bf:19:e2:7c:00:87:70:75:a4:9c:e8:7c:29:01:d5:
                    b6:2e:4f:4d:24:3c:1d:6d:a6:29:08:c3:4f:d8:4f:
                    3b:ec:47:a9:2d:79:96:4a:fa:a6:a5:72:ae:18:b5:
                    46:0c:d1:97:e5:cd:9b:8e:9c:91:1f:7e:ec:3e:29:
                    1b:3f:15:d7:df:66:b3:98:7b:08:48:99:c4:5d:1f:
                    15:d4:81:12:57:0c:67:84:08:da:02:02:5b:09:19:
                    a3:4a:f0:de:08:d8:b0:df:7f:ac:40:41:4a:7f:b8:
                    cb:65:ba:94:66:5c:5f:f5:32:b9:55:68:54:f5:55:
                    5a:9d:36:81:39:6d:8e:2a:ff:c7:09:d4:c9:f4:4b:
                    a9:17:59:46:81:bc:f3:77:7e:6a:85:34:3d:78:fa:
                    49:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CB:2D:DD:84:6A:1E:82:CE:1F:8F:7D:C5:6B:56:9B:8F:F8:A4:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/042736fc-2afe-3565-859f-26dd3e4a85e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.232.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:48:7e:56:c0:e2:b2:dc:ed:a6:4f:f8:c3:3d:45:2c:fd:88:
         38:fe:2f:8d:4e:95:d4:ec:e5:18:56:dd:ce:28:51:48:90:bf:
         97:3b:79:fd:52:a4:9f:4c:8a:40:09:9f:cd:05:e6:5c:0d:69:
         fd:1d:98:02:b5:39:2f:f3:48:dc:f2:61:c2:6c:99:78:41:07:
         65:8f:0d:18:b0:06:f4:e2:19:59:0b:77:3c:23:a3:cb:ac:a6:
         d7:8d:ba:f5:31:37:76:f3:ce:c0:16:e1:10:dc:e4:be:de:2c:
         76:f4:8e:c2:95:73:e1:6a:80:97:31:57:f0:9a:38:90:fd:a0:
         82:08:e1:f8:d3:b5:cc:6d:22:71:18:41:08:b7:a3:7f:1f:a0:
         fc:f4:82:48:47:85:40:3c:cf:14:32:ea:e3:29:a1:14:c0:78:
         7b:e1:19:d6:82:e3:3d:fc:9a:f3:31:f4:c9:20:80:7d:53:d8:
         63:eb:59:21:1d:22:a7:b1:10:69:a4:65:b2:e2:72:16:36:e5:
         0c:c1:1b:92:e1:a1:48:5e:10:fd:ce:e6:77:ed:f3:a6:81:e7:
         ef:d9:2f:36:be:74:62:b2:99:49:a3:7b:57:5d:c0:98:72:47:
         f9:b9:58:13:36:2f:c1:d8:af:39:36:ec:78:bc:58:05:2b:50:
         06:65:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:13:25 2026 by rpki-client