Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3/a53f4ae9-96a0-3fae-94fe-17911a170ad9.roa
File:                     a53f4ae9-96a0-3fae-94fe-17911a170ad9.roa (raw, json)
Hash identifier:          BeSpujL4Vh+sJa8iNNGl8lf0dLt7KD7ulFst1x94tWQ=
Subject key identifier:   A2:80:D0:86:27:7B:FA:D3:46:33:06:3E:72:9C:59:D9:C8:46:CF:50
Certificate issuer:       /CN=73301555-60f7-4965-845c-618a2fcceec3
Certificate serial:       010D0C9F4328584E97B4F9B393101C2BFF41EA80
Authority key identifier: AB:E0:89:0C:2C:E7:6B:15:94:CC:18:E8:1B:DA:5A:DD:0C:B8:13:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3/a53f4ae9-96a0-3fae-94fe-17911a170ad9.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     32196
IP address blocks:        198.175.186.0/24 maxlen: 24
                          2620:0:aa00::/48 maxlen: 48
                          2620:0:aa00:2000::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3/73301555-60f7-4965-845c-618a2fcceec3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3/73301555-60f7-4965-845c-618a2fcceec3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b4:f9:b3:93:10:1c:2b:ff:41:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73301555-60f7-4965-845c-618a2fcceec3
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=a88b9357-d888-4080-93d8-1ba02e5de80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9e:b1:34:dc:02:5a:a7:71:6d:e8:81:8f:4f:
                    19:c0:de:f8:8e:f6:f9:ab:dd:9b:d4:dc:cd:a0:e1:
                    2c:91:80:d5:47:c5:de:19:ba:96:1c:f3:4f:7e:f6:
                    8a:4b:4f:d6:3e:88:72:e1:c7:8f:0a:70:e9:1d:92:
                    82:02:b2:d8:90:69:4a:3e:53:ef:eb:6f:e0:46:ff:
                    76:18:1b:27:d8:a1:89:3a:a5:86:11:d5:8e:b5:ed:
                    bc:98:c7:ec:09:ec:5a:9a:e1:ce:da:82:51:c1:e3:
                    d1:0a:96:0f:7b:e6:63:49:cb:dd:2f:1e:db:95:b2:
                    42:60:e1:7c:6d:a9:0f:05:91:77:d9:f2:7d:80:28:
                    66:e8:93:97:00:f8:0d:4a:ae:89:36:b0:56:45:b8:
                    99:1e:32:46:78:44:a1:fb:9b:a9:8e:86:f9:02:f7:
                    6e:89:50:9d:0b:1c:6d:2b:45:9a:47:4a:fb:45:b7:
                    6d:32:e2:a2:0a:84:69:66:4e:69:5e:01:82:b8:b8:
                    b4:2a:33:38:e6:5f:90:2f:04:87:dd:2c:1e:56:54:
                    43:92:b1:06:03:4e:4a:ee:7b:79:c6:5d:ba:07:47:
                    4b:6c:e9:30:ea:10:2c:c5:5a:19:f7:46:2d:78:98:
                    6b:95:10:7c:79:a9:e8:d5:70:0f:e2:6d:99:47:47:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:80:D0:86:27:7B:FA:D3:46:33:06:3E:72:9C:59:D9:C8:46:CF:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3/a53f4ae9-96a0-3fae-94fe-17911a170ad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3/73301555-60f7-4965-845c-618a2fcceec3.crl

            X509v3 Authority Key Identifier:
                keyid:AB:E0:89:0C:2C:E7:6B:15:94:CC:18:E8:1B:DA:5A:DD:0C:B8:13:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.186.0/24
                IPv6:
                  2620:0:aa00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:3f:de:74:b4:81:06:cc:18:41:39:f7:45:fa:b8:2f:27:92:
         dd:04:92:e0:70:17:35:16:c5:88:5f:8e:e8:ae:58:21:35:55:
         e9:9f:9b:21:05:03:79:b0:e6:85:5d:32:80:e5:3c:7d:a7:70:
         f6:70:31:fa:a2:d9:66:16:25:0a:eb:91:f8:6e:97:38:be:b4:
         bd:ca:13:0b:22:97:93:66:b8:d7:32:ec:c7:f9:27:5d:89:2c:
         bc:77:a2:c5:27:bf:08:4a:70:e1:33:84:e5:21:6a:a0:81:2d:
         aa:ad:15:de:4f:fa:33:e2:d1:ae:7d:67:06:c5:ab:49:57:ac:
         6f:f6:dd:5b:fb:d8:b2:fd:c5:49:21:74:52:62:b6:d2:40:e6:
         c1:62:08:8c:c0:e7:0e:0c:1d:63:62:33:19:ae:cd:57:57:69:
         c6:9d:b9:42:aa:e0:32:b7:4c:64:47:0a:0a:e2:3b:a4:8f:6c:
         07:c2:bb:10:ee:66:1e:1e:2c:42:e5:a5:56:df:7f:b6:31:64:
         53:13:b7:74:68:38:eb:bd:8d:04:b8:a9:bf:2c:8f:20:e2:aa:
         31:43:53:66:e8:a6:d5:bc:78:c5:f0:23:d5:6f:bb:a4:80:2d:
         27:f5:41:c5:d3:d9:ce:5f:52:32:f7:a2:17:e2:74:64:99:89:
         ed:44:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:40:24 2026 by rpki-client