Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/29f2fc3f-f71e-3867-a9a4-84496b33bf51.roa
File:                     29f2fc3f-f71e-3867-a9a4-84496b33bf51.roa (raw, json)
Hash identifier:          vuTuo9A5oxSl6+Sy2J7/FRDYQp4ZUroqq42LcHopSKE=
Subject key identifier:   52:97:D2:3F:04:C2:7F:A5:6A:31:4A:43:52:D2:43:75:2A:B0:E9:16
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584F57682A43315DD502E31D4080
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/29f2fc3f-f71e-3867-a9a4-84496b33bf51.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     54994
IP address blocks:        157.185.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:2a:43:31:5d:d5:02:e3:1d:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=45db7e24-42c3-4f95-9d8b-0e98933f1d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d6:39:83:58:57:ba:1b:1c:33:79:e1:af:93:
                    ff:87:9d:95:cd:55:0f:4e:7d:1f:82:34:e0:40:7a:
                    70:a6:c4:5a:ea:a4:ae:c6:0b:98:af:2d:a5:e9:d4:
                    85:f7:c2:fb:4c:48:21:d3:c2:28:24:5c:c8:b1:2a:
                    5c:a4:eb:c1:9a:42:66:d1:07:50:43:03:c3:6b:47:
                    4c:25:b2:06:ad:db:19:26:43:ae:ea:46:80:4a:ae:
                    47:81:77:ec:8c:1d:13:62:0d:8f:8a:f7:74:6e:1e:
                    b6:2a:ef:db:ac:ca:85:28:22:82:9c:f2:16:0d:47:
                    ca:1f:7f:9d:7d:6f:d6:0d:5b:de:ee:25:30:47:d3:
                    ce:78:af:42:be:8d:54:cb:38:84:37:e8:f4:83:8d:
                    1b:df:19:ad:fc:cb:e5:b7:48:4d:b7:55:87:a1:d2:
                    9a:e3:d1:59:58:76:f2:5f:35:f4:b4:fd:59:b5:9a:
                    cd:06:09:33:ee:0f:5b:a2:d4:a0:9c:ce:b1:14:5f:
                    0d:75:ff:d9:5b:6e:c5:50:0f:7f:09:7a:99:eb:23:
                    3f:71:41:3d:a8:a2:65:83:4d:cd:61:87:0f:cf:6a:
                    7f:f0:2f:06:57:2e:ad:2a:70:2d:f6:80:16:68:c6:
                    d3:7e:b7:51:6d:f0:9a:db:40:b1:68:d8:f8:9b:e9:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:97:D2:3F:04:C2:7F:A5:6A:31:4A:43:52:D2:43:75:2A:B0:E9:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/29f2fc3f-f71e-3867-a9a4-84496b33bf51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:a2:c5:77:8c:f2:0b:fa:56:0e:8a:1a:5a:43:3b:6f:3b:
         a8:fa:d8:05:c8:ee:b7:1c:15:51:ca:a2:4c:9a:c0:d5:00:c7:
         1c:a4:71:d6:fe:a6:2b:93:be:83:0b:b4:47:43:cf:66:ff:64:
         2d:fd:9a:8c:07:c1:52:37:6d:20:df:37:e6:65:2d:26:77:c5:
         f6:42:e9:57:af:99:51:bc:7a:e7:39:46:f2:c5:7a:4f:5a:71:
         ff:7c:38:4e:65:0f:26:93:a5:f0:6d:b0:94:40:a4:37:18:bc:
         87:36:cc:bd:12:b0:2f:45:28:90:2c:79:d2:5c:e2:48:c8:05:
         e6:7f:e6:4c:b0:ba:7c:65:8a:c6:f4:05:63:b3:40:75:89:5a:
         23:db:a2:25:4d:ca:48:ff:45:ec:90:16:ef:28:47:cb:7f:61:
         1a:7d:a7:e2:f6:38:83:2d:7c:22:39:cd:b4:a9:8c:bc:38:52:
         74:b3:20:30:9a:c2:01:2e:9d:f2:36:5f:b3:ae:0b:91:ac:c3:
         5a:57:48:2a:33:ad:57:a6:0e:91:a1:e5:3f:30:4b:8c:7f:7c:
         96:dc:85:5c:45:12:f8:b2:2d:61:9c:26:55:2d:a7:3c:3e:0c:
         14:b6:8c:3c:ef:b6:79:23:3b:4a:5e:7b:08:33:05:42:98:49:
         06:76:5b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:38:33 2026 by rpki-client