Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/a0f559b4-6239-3212-be83-b4c0773d87e3.roa
File:                     a0f559b4-6239-3212-be83-b4c0773d87e3.roa (raw, json)
Hash identifier:          ctFleG586tnYed8+uwlY7CoNmX/7HhVWgBcoM4q+L4c=
Subject key identifier:   27:9A:B1:E9:98:1E:70:5B:BF:26:99:23:B0:7D:48:8C:67:88:65:2F
Certificate issuer:       /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Certificate serial:       010D0C9F4328584E577F484B408C4DC7B03EC980
Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/a0f559b4-6239-3212-be83-b4c0773d87e3.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     398875
IP address blocks:        167.153.244.0/24 maxlen: 24
                          167.153.245.0/24 maxlen: 24
                          167.153.246.0/23 maxlen: 23
                          167.153.246.0/24 maxlen: 24
                          167.153.247.0/24 maxlen: 24
                          167.153.248.0/23 maxlen: 23
                          167.153.248.0/24 maxlen: 24
                          167.153.249.0/24 maxlen: 24
                          167.153.250.0/23 maxlen: 23
                          167.153.250.0/24 maxlen: 24
                          167.153.251.0/24 maxlen: 24
                          167.153.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:48:4b:40:8c:4d:c7:b0:3e:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=d2602cd1-13fd-4250-9fc9-f834a14ab826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:68:fb:e7:5b:6c:bd:8a:ab:07:49:5a:a0:57:
                    97:e0:0b:42:6d:cb:cf:ca:2a:e9:e6:97:2f:a8:42:
                    24:40:c8:23:52:b2:29:16:9c:9f:53:d2:11:f7:0e:
                    93:e4:b3:df:0e:db:e5:e5:47:fe:d0:05:22:ef:dd:
                    bf:08:51:da:bd:e0:d6:be:3a:8b:59:5d:f8:16:8e:
                    e3:55:6d:4a:9b:fa:e2:6d:87:4c:54:ea:b3:a2:f8:
                    59:24:ed:5e:c3:8d:f8:71:13:1a:55:e6:90:b7:a4:
                    86:c6:e6:b5:5f:96:73:13:09:d9:dc:59:e2:38:46:
                    dd:47:65:45:02:59:77:de:b5:47:b4:f5:77:5a:98:
                    9d:95:dd:c5:a7:a5:a7:49:00:6c:ed:c5:98:0f:83:
                    ea:12:52:96:3b:11:3f:1e:07:3d:8d:bb:95:85:a0:
                    f6:fb:78:88:13:ae:ef:b7:26:63:40:1e:46:41:25:
                    1f:bb:83:78:8a:cb:26:b1:22:42:a4:25:dc:ff:aa:
                    89:8c:9a:de:3e:73:66:57:5e:6b:73:8c:fe:1b:0f:
                    af:7b:e0:06:96:c9:bb:a3:e0:4b:6f:78:07:c4:d2:
                    a3:a7:c6:0b:8c:92:3d:2b:68:6d:44:5a:51:37:bc:
                    fa:f5:ec:30:bb:29:f9:d9:3e:43:6e:ec:1b:43:7c:
                    3d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9A:B1:E9:98:1E:70:5B:BF:26:99:23:B0:7D:48:8C:67:88:65:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/a0f559b4-6239-3212-be83-b4c0773d87e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl

            X509v3 Authority Key Identifier:
                keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.153.244.0-167.153.252.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1d:5e:5b:12:ea:6d:aa:8e:d8:7c:ed:87:1b:6f:50:29:0d:
         06:3f:24:84:85:74:92:8e:a4:95:e7:58:70:40:62:47:ae:ca:
         0c:b1:4d:77:fb:23:8a:75:b6:bc:b1:26:33:c3:0a:81:0a:26:
         95:4f:1a:d0:c0:31:1d:86:b9:d6:4e:b2:0a:d1:e7:70:ab:f3:
         3e:83:ac:53:44:df:9f:71:78:14:68:25:b5:54:c7:d8:89:97:
         a6:0f:be:7d:32:c0:2c:52:09:cd:c7:72:d5:aa:f9:8a:ed:0c:
         a5:44:e7:89:dd:a7:61:e3:62:81:0a:c9:ad:52:f3:50:d3:3e:
         1a:ea:c5:ce:0a:1a:ff:1a:77:be:8a:88:c4:9c:1a:b8:f3:b0:
         a2:0d:07:f2:78:1b:8e:59:b4:ca:0c:8c:aa:a7:aa:dc:0c:14:
         74:09:1b:d6:a8:2b:96:5e:84:1d:0b:1b:07:22:75:4e:90:8e:
         b9:40:2c:12:33:54:5c:8a:da:8f:6c:93:40:3f:e0:18:fa:45:
         c9:99:a9:cd:2d:73:2e:65:15:b6:01:3f:db:a8:95:59:20:df:
         69:a4:49:74:22:23:1c:9c:e2:40:b6:7e:02:b3:33:39:a3:59:
         85:71:04:e5:01:be:22:90:eb:20:d3:96:18:15:d2:dc:84:01:
         98:15:49:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 10:29:24 2026 by rpki-client