Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0d1f3032-3ef0-3711-87da-734e8bc5a541.roa
File:                     0d1f3032-3ef0-3711-87da-734e8bc5a541.roa (raw, json)
Hash identifier:          Gdpino79XdoEJ4b72TF1LQV+tM7H0pd45zgWRyufBQk=
Subject key identifier:   37:F0:05:B3:FE:F6:7A:DB:15:AF:C6:0B:56:37:BF:A2:23:43:B0:34
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584F778363EBF149E6FF4A788698
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0d1f3032-3ef0-3711-87da-734e8bc5a541.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     199779
IP address blocks:        153.43.227.0/24 maxlen: 24
                          153.43.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:63:eb:f1:49:e6:ff:4a:78:86:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=99d63dfc-b26a-42c6-804e-15451c32d127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:df:4e:c8:1c:6a:91:93:70:0e:2c:cd:5a:
                    ff:12:b8:2f:64:c3:fd:37:e9:fb:db:38:da:c5:ed:
                    72:3d:65:79:ee:f5:ad:e4:d4:0e:26:d4:1e:b1:0a:
                    94:59:c6:d8:60:5d:76:f3:89:5b:79:28:ce:87:ca:
                    33:bb:32:3b:8e:65:2f:82:fb:30:cd:2a:8e:55:05:
                    74:f2:0a:ff:18:43:66:ae:35:77:82:46:de:69:16:
                    0f:bb:a5:b4:09:da:21:34:86:c8:62:8e:68:a7:e4:
                    69:74:1c:24:3e:3f:65:32:3a:60:16:5b:05:a2:9a:
                    71:d3:76:6d:48:a2:68:39:7a:35:71:f5:e0:e7:64:
                    fc:17:a1:8a:83:9f:64:9b:0c:d0:a2:b9:7c:12:01:
                    37:fb:92:4a:23:8d:bf:b9:e2:c5:bc:5c:35:0f:46:
                    fe:ed:1c:eb:67:39:f7:5d:96:49:dd:38:37:6f:c4:
                    db:71:05:7d:d6:5f:24:4a:e5:c9:52:3c:01:1e:ce:
                    59:07:fc:18:67:2e:9d:a0:bd:89:77:84:72:6f:d6:
                    29:18:6a:a8:03:f0:22:b8:55:8b:8f:45:44:ce:8b:
                    ac:5e:10:1f:db:a0:8b:5c:bb:b7:29:35:ab:3b:4b:
                    6f:83:93:8b:ec:e2:d3:83:f4:34:bb:36:57:79:69:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F0:05:B3:FE:F6:7A:DB:15:AF:C6:0B:56:37:BF:A2:23:43:B0:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0d1f3032-3ef0-3711-87da-734e8bc5a541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.227.0-153.43.228.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:54:c0:c0:55:ef:fb:19:f1:0d:a0:6b:09:6a:34:ba:ba:
         f1:12:81:82:02:d1:de:cb:09:ee:60:a5:2d:ba:4d:22:b7:e5:
         58:c3:91:7b:79:9c:9d:8d:a8:9d:f0:ca:73:a0:af:fa:c0:10:
         80:15:65:5f:0e:59:64:87:a5:e9:3b:32:f1:2a:da:91:6d:ec:
         2a:f8:46:3e:69:91:14:1e:48:e3:9c:67:30:18:2b:99:8b:41:
         90:7b:ae:27:6e:ca:72:eb:47:3b:9e:26:f7:be:9e:bc:77:d1:
         0a:d4:bb:29:9a:aa:b4:e2:cc:ac:b9:0a:f3:2e:3e:c0:8d:79:
         07:79:88:40:c1:d8:5c:3e:92:3c:7a:aa:da:5a:7d:5f:c5:26:
         18:9d:91:11:25:8c:21:4f:ac:0e:13:a0:15:f5:87:a3:6f:41:
         99:e4:e4:8c:67:e7:df:82:08:f9:2f:7d:e1:9b:0a:02:29:d9:
         15:f2:3a:db:d8:21:7d:51:1d:86:68:a6:20:ef:4c:98:86:50:
         70:81:cf:19:8b:e5:db:78:5d:4a:ca:51:80:af:a7:d0:bf:a9:
         24:64:91:44:97:a2:ed:73:96:5c:03:c4:8b:16:ba:b9:3e:ae:
         fc:9f:01:2d:ec:34:17:53:5d:4b:35:a2:c8:3c:85:64:6f:09:
         da:d7:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 15:38:26 2026 by rpki-client