Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5d19e291-b207-3147-b345-b28446bcdd8c.roa
File:                     5d19e291-b207-3147-b345-b28446bcdd8c.roa (raw, json)
Hash identifier:          HjEBHlv37fZv49Pv3oJRB6n3tMfxLTf6PO0ap6X75Pk=
Subject key identifier:   C6:EE:65:65:61:A5:A8:79:95:01:E9:20:A5:80:1C:3D:7A:A9:D6:97
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF74E1A0877F4FE82D31D80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5d19e291-b207-3147-b345-b28446bcdd8c.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     53813
IP address blocks:        209.55.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:4e:1a:08:77:f4:fe:82:d3:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=c53d3161-aaff-4c3c-9fbc-050b45424042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:40:c4:9e:6e:96:08:af:aa:b7:ae:e4:c3:d3:
                    d1:b8:f4:94:82:4f:24:9e:c9:88:94:22:94:36:03:
                    e5:59:4b:37:5b:71:b3:8c:a5:f5:02:7c:3c:48:17:
                    fe:f5:ed:ac:d2:a1:76:ff:b3:50:17:dc:d4:f3:5c:
                    0d:28:93:3f:b7:93:77:91:0c:a7:ee:cc:f7:cd:30:
                    ac:e9:fe:2a:7d:27:00:9a:93:1a:bb:5a:ae:6e:36:
                    a9:01:2b:ef:1c:f1:56:16:c0:e4:d8:b6:84:f5:53:
                    0c:b8:dd:17:9f:f4:91:7b:0b:62:7b:40:44:72:8c:
                    85:9c:03:10:e7:60:35:d0:c5:80:2a:58:57:6c:dd:
                    dd:ac:08:83:da:f2:06:7a:63:4c:32:8a:fd:fe:7d:
                    72:cd:3e:7f:e8:6a:c1:ba:c1:8d:4c:78:d0:35:49:
                    14:ce:16:a4:68:57:96:02:60:65:3c:a1:51:50:51:
                    c9:21:1d:c2:9e:71:19:85:3a:ff:16:42:c0:5b:25:
                    04:f1:88:22:95:70:d0:7d:c4:4f:fc:b5:2e:1f:79:
                    2d:d0:6f:0d:63:2a:0a:57:d5:9f:bc:cd:67:3c:db:
                    eb:81:49:0b:18:17:bb:8c:70:34:90:82:9c:0e:96:
                    c4:fb:05:c2:8c:69:9e:43:37:ec:8f:42:7f:5b:53:
                    27:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EE:65:65:61:A5:A8:79:95:01:E9:20:A5:80:1C:3D:7A:A9:D6:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5d19e291-b207-3147-b345-b28446bcdd8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:30:b0:8a:5b:fc:be:5c:a5:e1:e3:0c:14:b6:18:6c:80:87:
         7e:fc:cb:c1:72:e8:e9:06:f1:a4:04:3f:d7:d2:ef:40:26:2c:
         cd:84:e6:16:f7:5c:dd:16:af:4b:5c:7a:6d:a0:fa:a5:86:b3:
         64:49:60:6e:40:09:e1:0c:00:5c:55:8c:bb:de:54:6a:8e:d6:
         f3:c8:01:fd:ce:c6:24:8b:ad:ee:08:8c:4f:a0:20:a5:87:6d:
         f0:da:25:ec:5a:28:f8:70:8f:ad:dd:25:48:50:4a:fa:b2:3d:
         27:69:38:df:54:fb:25:7e:20:89:9b:65:73:80:31:64:bd:0b:
         91:ea:89:fd:ca:eb:17:61:df:ea:b2:26:6c:db:7d:98:8d:9e:
         fe:83:fb:c0:26:d5:7e:4f:38:66:79:50:b0:2b:10:79:77:c8:
         f2:82:bd:21:e0:17:75:07:2b:74:37:74:e8:1f:e4:09:34:6a:
         b4:2e:dd:b6:70:2a:35:ca:ac:e3:4e:91:aa:be:b3:80:ff:36:
         bc:4f:07:37:10:33:99:f5:4c:12:62:4d:66:42:29:91:fa:e9:
         2b:7b:58:d7:4d:e8:8b:bb:a5:cd:15:91:3a:78:55:ae:92:49:
         7e:d7:96:8e:44:4c:97:8c:62:ca:30:6f:5d:70:33:49:c4:ff:
         a3:1c:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 15:03:56 2026 by rpki-client