Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/ae8ad375-d312-35a7-8de3-794474cd3e8f.roa
File:                     ae8ad375-d312-35a7-8de3-794474cd3e8f.roa (raw, json)
Hash identifier:          9e23MNAn67PwSmTTQB6s150GuibSfLEBwY/NHKamTSg=
Subject key identifier:   54:ED:C5:34:6C:D4:FF:5F:33:FE:89:5F:0A:B2:C6:45:7F:4F:54:E1
Certificate issuer:       /CN=503d278e-3d64-45f0-9c99-0926a5eec14c
Certificate serial:       010D0C9F4328584EA787F13688D16950C64E0CE0
Authority key identifier: 3A:A5:E2:51:83:F9:FB:6D:B8:1B:0F:08:67:A3:B0:25:EA:19:BF:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/ae8ad375-d312-35a7-8de3-794474cd3e8f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     198949
IP address blocks:        204.63.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f1:36:88:d1:69:50:c6:4e:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503d278e-3d64-45f0-9c99-0926a5eec14c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d49ca39c-b8aa-43d3-8d62-182c870f978b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:43:a5:45:46:4b:8f:ad:13:c8:9f:b8:a2:
                    24:1d:9a:26:6f:57:0d:db:3e:c5:5d:21:1c:6b:30:
                    c4:50:8b:0a:42:1b:e8:16:50:f8:c3:0e:34:e3:59:
                    11:29:40:e4:f7:bb:b9:82:c2:d5:82:31:55:c1:7a:
                    ec:de:25:5a:6a:13:01:c6:35:b3:8d:b9:55:72:dc:
                    3c:6e:a6:d9:e8:05:0e:43:52:75:f5:a9:6f:75:f8:
                    3b:9b:81:90:df:84:2e:8c:39:c6:3e:4a:e5:06:7e:
                    7d:6a:a7:a7:84:87:d5:2b:13:ca:24:06:d6:a8:16:
                    0e:40:c8:50:01:0c:dd:11:50:be:38:0e:fe:95:7c:
                    ae:c7:5c:c4:26:f1:72:38:09:f5:eb:e4:fb:75:d3:
                    14:aa:ec:3e:dd:e1:f8:e9:a6:e7:b6:2d:0f:99:d6:
                    a0:2d:e6:81:75:97:57:f0:f2:b7:10:6a:a4:0f:a9:
                    48:6e:20:93:b9:0f:10:a9:5c:27:22:89:67:d8:8a:
                    10:bf:66:21:2c:19:9a:de:c7:34:73:c2:b9:4a:7d:
                    a7:36:6e:06:f1:fa:1f:fd:58:a9:59:7e:f2:f3:ae:
                    84:33:4d:18:e6:08:0d:79:21:d7:25:c0:b5:2b:2d:
                    47:6c:e1:84:57:b6:dd:a5:45:72:f3:18:8f:f8:df:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:ED:C5:34:6C:D4:FF:5F:33:FE:89:5F:0A:B2:C6:45:7F:4F:54:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/ae8ad375-d312-35a7-8de3-794474cd3e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.crl

            X509v3 Authority Key Identifier:
                keyid:3A:A5:E2:51:83:F9:FB:6D:B8:1B:0F:08:67:A3:B0:25:EA:19:BF:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:48:2a:27:6f:8b:a4:d8:1c:d0:15:5d:6e:65:28:88:d9:d5:
         97:43:62:52:4f:0c:7b:21:c8:b0:8c:43:72:3e:2c:48:c3:e3:
         12:49:cd:c0:5e:fc:b6:a8:f5:dc:c1:61:9f:ed:ed:50:f9:4f:
         68:1c:9b:81:5e:34:fd:20:80:ad:46:93:a4:bc:ab:69:ea:d9:
         c4:67:bb:f0:5a:4b:f5:d4:f5:72:db:4c:6e:6c:63:6b:f2:3c:
         ad:13:ae:b0:0f:85:4c:e0:51:e1:c3:21:2c:c1:d9:b3:70:cb:
         eb:24:24:55:d9:e1:e4:35:67:c8:c4:6d:ef:49:5a:12:61:fc:
         3f:7c:e7:83:83:66:9a:6f:22:f4:e8:e3:11:2c:9f:84:e7:6b:
         b4:4d:86:81:9b:08:48:de:e8:99:b0:27:52:54:4b:54:ac:b0:
         35:67:5b:df:20:7e:74:9b:ed:83:1d:2f:24:b4:78:27:29:62:
         fa:1c:40:25:fd:6e:b1:f9:af:a7:b3:7f:95:62:48:43:79:f5:
         8a:e7:ff:90:b0:4e:ba:63:69:0e:46:da:51:3b:8f:e6:57:1a:
         a5:18:97:a3:9c:d7:04:c5:42:96:66:cd:38:5b:24:13:e9:30:
         2b:f1:0d:24:5f:d4:bf:38:b8:5f:8e:54:7a:de:1a:23:ab:9c:
         51:56:b5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:11:05 2026 by rpki-client