Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/5f95a1e1-8ea3-35d9-bcda-0e2bc4406dad.roa
File:                     5f95a1e1-8ea3-35d9-bcda-0e2bc4406dad.roa (raw, json)
Hash identifier:          XjUWmEP7T91dss/0PNErLHcP1UxpdAiUJWRm7gdEIjY=
Subject key identifier:   7E:89:C6:FE:F2:92:B0:30:79:DD:59:24:7D:35:91:B3:42:6A:E9:E7
Certificate issuer:       /CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
Certificate serial:       010D0C9F4328584F093CD23D7108262C95B4F260
Authority key identifier: 87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/5f95a1e1-8ea3-35d9-bcda-0e2bc4406dad.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     6453
IP address blocks:        104.161.12.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:d2:3d:71:08:26:2c:95:b4:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=e20a2f6a-0905-4f5d-a17d-bfa58c007660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:63:c4:32:0c:23:91:76:40:a2:fc:70:5f:98:
                    44:7a:94:36:8b:14:5e:58:37:76:b7:ce:fd:f7:be:
                    0a:d8:d5:dc:b2:fb:45:98:2d:e2:9c:41:31:7d:77:
                    09:9f:fa:86:ce:e8:97:b4:7f:ec:e6:d4:a5:1b:18:
                    58:5f:1f:e7:e4:ae:fb:6b:32:ab:af:c5:11:36:4e:
                    68:3c:cf:f0:2f:18:24:9c:23:75:36:d6:a7:ae:66:
                    6e:f9:80:1f:90:c4:8d:36:70:8e:fc:69:58:3c:75:
                    bc:33:86:89:0c:ea:65:84:72:60:8a:33:f1:8a:ab:
                    5c:0e:a9:ee:a7:99:4c:1c:ce:ae:6b:ad:21:a1:af:
                    fc:36:8f:85:83:d1:67:a4:87:89:cc:8c:94:6c:0f:
                    24:bc:01:11:0f:a6:d3:eb:46:60:49:66:f9:95:64:
                    02:42:61:03:42:33:e8:8d:1e:34:1d:cc:d8:46:e9:
                    2c:be:27:35:c9:f4:35:e5:84:d2:d0:34:5b:00:11:
                    7b:29:71:f9:84:4f:08:b6:56:76:57:73:6f:8a:d8:
                    34:b1:72:15:24:9d:ab:49:a7:21:d2:ad:4a:5e:9b:
                    60:69:c9:8a:fb:94:06:df:b7:7c:55:ee:5b:30:80:
                    6f:b3:25:2c:e3:ea:f5:09:0f:83:4d:ec:4c:ef:a3:
                    c3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:89:C6:FE:F2:92:B0:30:79:DD:59:24:7D:35:91:B3:42:6A:E9:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/5f95a1e1-8ea3-35d9-bcda-0e2bc4406dad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl

            X509v3 Authority Key Identifier:
                keyid:87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.161.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:15:0d:af:13:82:54:08:49:c7:7a:88:42:e0:f2:48:46:e0:
         40:40:9a:fe:82:41:22:74:5f:b9:45:36:27:95:96:9a:65:71:
         a9:c5:f1:12:bd:b1:3e:73:78:e4:c8:bd:eb:3d:49:2d:5d:5b:
         1a:8d:26:26:40:48:b1:6b:3d:ea:62:2a:ef:f5:b7:29:44:47:
         0d:7b:06:1e:fe:ce:6b:da:53:75:87:a8:8e:ed:4e:83:29:65:
         7c:5b:5b:59:b4:f4:e6:7f:4a:c6:5f:7c:93:a3:c4:98:93:9a:
         cd:b0:82:6f:ea:1f:04:99:a3:45:92:2c:b9:ae:3d:6a:5f:16:
         ce:04:85:b8:fa:dd:9a:63:bf:ed:9e:c4:41:2a:43:d9:d8:07:
         de:8a:04:19:ab:6d:9c:05:c8:51:a8:74:0e:61:1b:98:9f:1e:
         1d:6c:56:8c:a2:ab:32:7c:64:fb:f4:a1:9d:7f:2b:33:46:c2:
         68:6d:0e:3a:aa:55:94:28:4e:8d:bd:e9:80:b7:0d:02:aa:d6:
         e8:af:73:77:f8:1a:9e:9d:d2:56:08:cb:e3:d0:c4:de:13:d6:
         87:3b:2c:6c:90:dd:0c:54:9e:43:b9:ed:01:f8:cb:c9:c4:53:
         c9:d8:c8:ba:ff:a8:1d:55:e6:f1:fc:a2:b5:4a:97:a5:26:f1:
         92:41:81:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:44:48 2026 by rpki-client