Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4e1336eb-67b5-3398-af90-f7d611728ee1.roa
File:                     4e1336eb-67b5-3398-af90-f7d611728ee1.roa (raw, json)
Hash identifier:          Rqep8B/wSIkXgEvVJRrkDw2Ia+DJF0yOJyUoycQGB0w=
Subject key identifier:   46:33:AD:36:E7:64:14:C8:2C:C6:3A:AF:B6:33:DD:52:C8:A4:B2:0D
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584F49743F1AEC29E878E2DC0B44
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4e1336eb-67b5-3398-af90-f7d611728ee1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     55286
IP address blocks:        152.232.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:3f:1a:ec:29:e8:78:e2:dc:0b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a03c6e74-8073-4267-8280-45af415a9937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:8c:de:f6:51:a4:7f:44:4b:7c:12:7c:12:
                    4c:6a:04:aa:81:59:05:47:09:34:3f:29:ed:f6:de:
                    69:53:57:3f:5d:75:89:7f:e9:fa:fa:63:da:e7:ca:
                    65:5d:bd:da:1b:ea:ef:51:44:1c:26:f5:6e:2e:a5:
                    47:1b:65:2e:75:49:ce:63:ba:d9:32:e1:1a:f1:f9:
                    a7:86:2b:0c:35:91:3d:48:68:ca:d7:e6:c6:f3:81:
                    f8:0d:73:e7:99:e9:90:30:64:2c:b1:32:0a:a0:15:
                    20:01:94:91:e8:c6:8f:cd:4f:d4:b5:02:a4:53:6e:
                    29:0d:9d:b8:a2:95:6f:99:fd:fd:70:fc:19:1a:a9:
                    26:d2:a5:7a:53:fd:54:6a:a4:0a:45:bd:a7:2f:00:
                    a7:91:dc:3a:86:82:e0:05:9b:d1:37:ba:a1:a2:0f:
                    9d:ec:ce:e6:20:4c:3d:4f:e3:ea:1d:8a:e1:69:a2:
                    90:48:a1:bf:46:7e:29:83:74:8b:66:4f:d7:1d:06:
                    ca:c5:eb:6f:1b:b1:7b:c6:8d:35:33:40:d2:bb:15:
                    ae:20:a4:74:56:30:e9:9c:48:2d:d0:1e:44:15:0a:
                    f3:73:2a:be:19:da:5c:14:bf:49:22:43:50:72:d3:
                    37:89:32:bb:d9:76:79:59:33:f8:2e:c3:19:6b:69:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:33:AD:36:E7:64:14:C8:2C:C6:3A:AF:B6:33:DD:52:C8:A4:B2:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4e1336eb-67b5-3398-af90-f7d611728ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.232.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3e:c1:9d:af:26:de:6a:15:6e:df:29:df:f2:48:66:10:f6:
         23:18:39:8b:b4:94:22:34:c3:ca:3e:76:0a:ef:47:77:60:c6:
         f2:21:bc:2f:90:55:cb:c5:80:08:92:8f:ec:e4:93:6a:c3:e4:
         cb:67:1c:e1:2c:60:8f:d8:44:e9:84:99:ba:71:fc:4d:e0:52:
         b9:49:3c:ae:dc:9a:65:44:47:54:e7:ac:ea:26:9f:ac:1b:01:
         c1:86:2c:e4:93:bb:45:d1:e3:3a:8e:dc:d6:21:af:5a:1d:74:
         6c:3e:0e:96:da:19:2e:06:40:a9:77:5a:aa:84:a3:3c:42:cd:
         db:55:10:31:16:0d:46:c9:f3:f9:02:85:b8:23:1e:27:20:3d:
         84:ab:02:eb:21:40:ca:53:b9:a4:21:d2:0f:a6:4f:34:e7:a3:
         70:62:d7:6a:f3:f0:90:ed:f2:1e:bc:0f:c4:f0:df:d4:bb:48:
         6a:84:23:5d:a9:eb:df:a6:7c:40:7c:ea:e5:0e:d0:57:dd:f3:
         26:4a:4b:37:68:00:ab:65:1e:4a:73:18:16:1c:26:8d:1a:dd:
         8f:d5:7c:29:bd:d1:1e:4c:4a:7c:15:75:48:50:56:6b:5f:e5:
         03:4d:45:d8:49:36:2b:54:ad:ae:2e:18:b4:89:df:5c:8e:3a:
         ed:e0:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:09:08 2026 by rpki-client