Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/f221a3f9-effe-3336-98c9-6079ba80b70b.roa
File:                     f221a3f9-effe-3336-98c9-6079ba80b70b.roa (raw, json)
Hash identifier:          F2rPHdGMmOeWgFzhMNYO4o+0CsrFed+n4YAAV0eoF9k=
Subject key identifier:   B2:9A:59:8A:95:39:B9:EF:44:AC:FE:3F:50:BF:9B:95:27:3D:21:F8
Certificate issuer:       /CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08
Certificate serial:       010D0C9F4328584E5A49ED565A375149F481D5C0
Authority key identifier: 26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/f221a3f9-effe-3336-98c9-6079ba80b70b.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        144.77.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:ed:56:5a:37:51:49:f4:81:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=e76e6708-7320-4fed-aebd-8c68cc1987eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:26:0a:d2:96:09:c0:79:a9:c6:54:1a:9b:d2:
                    3c:1f:86:b8:6d:e0:0e:a1:57:b3:73:b6:1a:63:01:
                    ad:c0:7e:21:38:bd:43:96:cc:dd:60:4d:f4:59:43:
                    63:9e:a3:24:19:8c:6d:a7:2a:21:ed:e6:00:b7:06:
                    81:9c:98:15:e6:e3:0f:91:44:13:35:24:4c:14:31:
                    e9:07:4e:91:68:43:a8:72:58:69:2a:d0:29:e8:2b:
                    2f:ca:5d:61:75:5e:a8:b7:25:76:a9:89:8d:5b:ca:
                    c5:53:b8:07:80:b9:c9:ca:37:71:92:d1:bf:27:25:
                    cb:f4:4f:ed:9e:23:2b:c1:1d:9a:e7:c7:18:67:17:
                    b4:f2:97:71:d2:38:f3:d6:9f:ef:71:63:0c:27:aa:
                    c5:fd:98:e2:d8:a0:ca:2b:51:ab:3e:5a:0e:18:11:
                    dc:09:f7:2d:dd:74:cb:8a:a4:1d:cd:e2:6c:6d:d0:
                    c7:24:be:20:88:c4:2c:93:6e:2d:c7:24:01:65:98:
                    95:1c:40:d1:f8:8c:14:d1:d1:dc:50:96:42:66:0e:
                    56:04:5f:1f:e7:80:62:e9:e4:42:2e:ab:ee:da:d9:
                    08:a3:09:e7:e1:ad:9a:3e:44:06:2a:df:46:42:38:
                    f9:9b:55:ee:8f:a7:5f:da:40:c5:04:d0:bc:93:82:
                    49:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9A:59:8A:95:39:B9:EF:44:AC:FE:3F:50:BF:9B:95:27:3D:21:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/f221a3f9-effe-3336-98c9-6079ba80b70b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.crl

            X509v3 Authority Key Identifier:
                keyid:26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.77.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a3:bd:72:80:82:5e:30:b8:17:66:62:1f:2d:56:a5:ff:9a:
         5a:20:d0:6e:21:23:bd:f4:86:6d:e3:26:89:8a:31:a7:14:0a:
         7a:9d:bd:6c:57:f6:f5:2f:c4:68:95:d5:72:81:05:7b:aa:d2:
         3a:52:46:e4:df:71:40:fe:cb:bd:43:12:bf:50:be:12:00:36:
         1b:23:ab:04:99:2d:f7:94:14:8c:f8:89:46:2a:c1:b6:39:58:
         7f:65:02:00:a1:a8:11:bc:cd:fd:44:d4:83:44:0e:94:70:0c:
         1e:88:25:1f:47:56:e8:33:52:6d:c2:96:c5:75:3a:9b:a3:7e:
         3f:0f:71:90:0c:e7:c6:8b:36:0d:db:42:35:af:8f:fc:14:7a:
         4d:6a:49:18:8b:5b:c5:2c:56:f5:34:b5:09:2a:e1:bf:17:32:
         3e:c8:11:02:7d:c4:2f:05:e3:b9:ec:3b:5d:eb:cd:3e:f6:25:
         58:08:54:07:e8:4a:ab:b7:c3:d8:47:22:ac:db:8f:97:ea:5e:
         31:c3:10:62:c9:16:dc:1f:ed:4e:33:d2:32:62:0c:96:4d:b8:
         b4:f4:68:9c:c6:53:d4:7f:28:f0:17:44:95:5f:7c:38:2c:9c:
         db:61:c7:1e:b6:dc:73:2f:63:dc:f2:2f:e8:9d:75:b8:4b:f5:
         26:d4:62:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:46:00 2026 by rpki-client