Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a9fcbadc-53e4-3691-9808-a707aa008697.roa
File:                     a9fcbadc-53e4-3691-9808-a707aa008697.roa (raw, json)
Hash identifier:          JPbu3k4F60bogLY1Ap2SpS+MEfieNPyMazTzdcmFeBE=
Subject key identifier:   9F:7B:E0:C8:8A:1A:89:E6:6D:67:28:95:F1:66:3C:BD:25:A3:41:0F
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584EABB6E01A39B89AFC4180A700
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a9fcbadc-53e4-3691-9808-a707aa008697.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     54994
IP address blocks:        157.185.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:e0:1a:39:b8:9a:fc:41:80:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=726ff1e6-5bee-43a3-8dba-93bcb2a392c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:92:df:24:b1:96:b1:b0:77:54:95:3f:ff:
                    26:26:e7:73:91:f5:d2:10:bf:62:cd:7e:9f:34:ce:
                    cd:2d:36:e0:3d:da:a0:c0:32:0a:60:b6:f5:e7:c5:
                    bc:88:0e:8e:21:57:6b:08:ea:4d:8a:22:06:94:7a:
                    82:f0:cd:3b:4c:eb:38:a2:c3:56:ea:b1:fd:75:7c:
                    f8:bd:d0:7b:73:16:33:29:5b:f4:aa:9e:7f:05:cc:
                    48:4d:2b:d7:cd:bb:60:54:d6:82:50:66:d4:54:58:
                    c1:ea:36:38:d0:92:94:39:78:d7:97:18:2f:e5:f9:
                    e7:93:fb:30:ec:36:a1:3a:40:6a:de:3d:27:cf:f5:
                    da:24:a2:17:71:ad:53:a3:3e:c0:aa:c3:95:46:0d:
                    81:b7:97:0e:47:7d:3e:b2:6d:3a:0f:c2:14:81:c6:
                    40:4e:18:6f:03:10:71:0b:eb:25:da:7f:99:0b:da:
                    29:86:d8:6e:f6:d3:7c:30:19:90:64:42:7b:07:ef:
                    f8:b4:65:36:d5:48:54:a4:88:23:55:44:21:1c:4c:
                    2f:98:e1:b4:2c:71:4a:fc:31:d4:b2:4a:cd:bc:86:
                    da:df:83:db:57:ac:3c:41:84:b2:52:c6:ba:04:58:
                    3c:42:fe:f8:92:cf:77:11:39:71:96:57:1c:a3:72:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7B:E0:C8:8A:1A:89:E6:6D:67:28:95:F1:66:3C:BD:25:A3:41:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a9fcbadc-53e4-3691-9808-a707aa008697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:bd:74:36:57:d1:47:48:45:41:a7:d6:15:7c:6b:e7:62:a8:
         eb:2e:01:42:a1:61:94:21:1d:4a:88:fa:29:c2:25:32:e3:51:
         59:8f:65:f5:76:c5:2b:f9:77:f2:37:ed:57:59:6b:cf:b1:59:
         bc:ae:d9:5e:be:4d:55:7e:6a:c2:a6:b3:a6:fb:33:a5:af:b6:
         e1:f1:b2:a7:8d:83:01:cb:be:36:c3:b1:51:d6:a8:8c:1b:1d:
         6e:eb:a9:ec:4e:2b:66:a5:7f:7c:bf:22:72:f1:12:41:67:1c:
         29:01:b4:f5:df:b1:c7:08:a2:94:c1:da:45:8d:32:10:1a:c6:
         8b:44:67:4b:3c:3e:f5:21:fe:bf:92:50:f2:9d:ea:2c:eb:7e:
         60:35:70:84:a1:53:04:10:13:40:24:9d:51:85:27:02:13:77:
         0a:d0:62:0c:29:14:05:7d:e1:a7:9b:70:8e:0e:4a:05:ff:40:
         1c:b3:60:05:91:d7:4e:bd:15:84:a4:0e:c9:c1:5f:05:c7:2b:
         b8:20:fe:1f:45:46:e5:4a:bb:f5:ae:2a:17:89:60:4a:b5:9e:
         0e:3d:0f:17:54:6a:21:54:a0:ea:e3:5c:d8:2c:f0:2d:4f:3b:
         26:15:ed:e5:ff:45:5f:d5:bc:22:bf:18:22:d0:33:ae:29:38:
         5d:62:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:39:24 2026 by rpki-client