Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/77778fb8-e0f7-35b6-8597-35ba089aabf3.roa
File:                     77778fb8-e0f7-35b6-8597-35ba089aabf3.roa (raw, json)
Hash identifier:          /5P6TN0GRc/BkwbHy2ZTnL0XXZpDuKxo2qR0zSG9Cek=
Subject key identifier:   8E:4F:2B:50:61:19:0A:2D:9C:BF:09:DA:6F:3F:3A:61:F9:DC:4F:E3
Certificate issuer:       /CN=1b8475b2-e8c1-422b-8853-c21bc9cd4a47
Certificate serial:       010D0C9F4328584FAC981033E11CBFEFC83BFA80
Authority key identifier: 22:8C:9E:94:F2:6E:94:F0:6F:3A:FE:5C:55:CD:7A:D4:24:46:32:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/77778fb8-e0f7-35b6-8597-35ba089aabf3.roa
Signing time:             Fri 30 Oct 2026 13:20:52 +0000
ROA not before:           Fri 30 Oct 2026 13:20:52 +0000
ROA not after:            Thu 28 Jan 2027 14:20:52 +0000
asID:                     16509
IP address blocks:        198.136.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ac:98:10:33:e1:1c:bf:ef:c8:3b:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b8475b2-e8c1-422b-8853-c21bc9cd4a47
        Validity
            Not Before: Oct 30 13:20:52 2026 GMT
            Not After : Jan 28 14:20:52 2027 GMT
        Subject: CN=4151ed51-3ea8-4c4a-9cbe-6d91305d8b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:22:7e:84:ed:97:78:39:ca:a6:8e:21:1e:
                    c6:0a:ad:f9:3a:f8:45:c3:ed:d9:17:98:10:c8:f9:
                    ef:4e:1c:78:28:c3:d7:c5:52:24:ee:16:f0:14:ea:
                    c2:9e:ca:39:67:b1:6c:69:3d:49:cb:ce:0f:d4:33:
                    b2:0c:2b:54:54:cc:7d:77:7d:53:f1:18:13:fd:3f:
                    aa:99:ca:63:30:1b:7e:82:ee:e6:62:a9:4e:1d:c1:
                    2a:3a:f9:79:ad:fd:15:70:c1:67:39:99:8e:38:79:
                    ba:c3:ec:f0:33:4f:8a:3c:4e:bf:db:93:dd:31:98:
                    2c:11:28:55:1f:23:e1:c9:d1:44:96:1b:0f:ad:59:
                    db:ab:41:54:37:80:2e:e4:4b:9b:44:cb:a2:0c:af:
                    2b:ff:0d:af:ee:ed:c2:61:c7:b8:fc:8d:b8:57:d6:
                    dc:2a:bb:d6:d0:83:65:4e:6a:74:c8:f6:03:5a:c6:
                    c8:9d:3d:e5:d2:2b:48:b1:83:63:91:18:c1:aa:0b:
                    5f:80:02:36:13:04:81:e0:27:2a:3d:1b:be:af:88:
                    af:18:a6:dd:45:89:55:c2:80:8d:9b:fa:be:be:f0:
                    d8:de:16:61:01:46:55:cb:33:b9:ad:fe:5d:5a:8f:
                    e4:71:50:a2:97:7f:2d:a2:f5:dc:cc:96:21:a3:77:
                    07:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4F:2B:50:61:19:0A:2D:9C:BF:09:DA:6F:3F:3A:61:F9:DC:4F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/77778fb8-e0f7-35b6-8597-35ba089aabf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.crl

            X509v3 Authority Key Identifier:
                keyid:22:8C:9E:94:F2:6E:94:F0:6F:3A:FE:5C:55:CD:7A:D4:24:46:32:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1b8475b2-e8c1-422b-8853-c21bc9cd4a47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.136.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:66:96:3e:81:8c:da:4d:b5:c6:94:01:fc:f5:46:99:c2:38:
         59:f7:c1:e5:76:fb:f2:33:a4:b1:e3:ea:ce:be:f1:72:c4:55:
         1d:cd:62:ac:a8:78:15:e4:4b:42:a0:cc:78:c3:98:28:e8:ef:
         25:61:2b:a0:1c:79:a6:39:7f:3a:87:e8:d1:22:95:12:3c:14:
         f7:ec:3e:ca:79:44:33:9a:13:df:08:b0:7e:b2:d1:9c:d5:18:
         e6:7e:1d:9e:3f:04:a9:20:7d:e2:ad:07:ed:f2:4e:26:c2:85:
         5b:12:69:4b:fd:73:b5:3f:32:06:77:1d:0d:1f:d4:dd:62:13:
         57:8f:bd:80:0d:6c:b9:ec:cf:46:0c:64:38:b2:b9:67:a9:1a:
         4b:f6:98:b6:f6:3e:1f:61:8c:77:d0:71:3a:db:df:f4:34:63:
         cb:f6:90:91:e1:ec:b0:d0:43:b1:42:00:ce:d2:25:95:bc:1f:
         86:46:3c:b7:b4:c8:e3:31:72:d1:db:27:c4:85:ac:2a:f7:d0:
         3b:1c:e0:3b:7c:10:10:49:30:f1:83:57:2d:c3:90:4a:24:c6:
         c9:4e:08:07:ad:10:f8:ea:f6:8e:99:f1:26:eb:53:91:63:e8:
         e1:dd:c4:df:81:24:40:f9:f4:2e:9d:04:3d:fd:41:10:7d:38:
         ec:1f:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:25:47 2026 by rpki-client