Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4770d7b5-7f87-33c6-ab5c-4ba8fcb66552.roa
File:                     4770d7b5-7f87-33c6-ab5c-4ba8fcb66552.roa (raw, json)
Hash identifier:          MvUUvTWcqObApVGQsvGASMdDkNsgPbI5AoIUG20erFE=
Subject key identifier:   7A:F8:EE:6E:BE:71:97:F2:C9:26:F5:39:ED:8B:AC:B0:C7:FF:75:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED431F68EBD75636CFC39B040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4770d7b5-7f87-33c6-ab5c-4ba8fcb66552.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     22258
IP address blocks:        174.161.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f6:8e:bd:75:63:6c:fc:39:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=365e6a31-656b-41bd-8c73-0ddf0300fe75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b7:d8:5a:86:cd:5b:12:ed:39:5f:bd:2c:2b:
                    83:f0:dc:10:52:d6:fa:e7:51:4f:04:79:7b:97:64:
                    0b:d5:30:cd:6b:92:90:72:13:f9:dd:8d:9d:de:da:
                    74:30:90:d9:c7:4c:da:fd:09:0b:66:7f:8f:71:0e:
                    0f:b9:29:25:f5:f2:cd:72:61:bc:68:31:51:4d:f2:
                    e6:ed:81:66:31:b1:d8:18:13:c0:fe:de:f2:79:83:
                    a3:cf:51:c8:a6:51:ee:c4:21:19:8f:c8:55:76:9f:
                    58:86:eb:e0:c3:b0:15:7d:fb:d4:57:a5:0b:71:55:
                    0f:1e:7c:66:8f:8d:3b:53:04:68:53:00:3c:64:11:
                    ac:04:86:35:5e:ca:d5:b3:ab:ba:60:ef:dd:31:dd:
                    9c:1f:d7:3b:9f:da:02:55:62:f5:df:1d:7e:7c:22:
                    ea:71:8f:11:2d:73:3b:5c:29:5f:73:68:9a:7c:5c:
                    e3:5f:ba:3c:45:4d:82:d5:75:e1:bd:c3:20:5b:ab:
                    d2:2b:a5:0c:bb:9f:c3:7e:d2:70:a4:62:44:54:6c:
                    24:2f:9e:1b:da:a8:4e:74:ea:95:e3:e8:42:be:10:
                    4b:20:fa:80:38:be:46:07:0e:9e:60:3f:2c:10:5a:
                    81:29:ba:d7:e9:f9:e6:e3:d1:4f:39:ef:0a:54:19:
                    6a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F8:EE:6E:BE:71:97:F2:C9:26:F5:39:ED:8B:AC:B0:C7:FF:75:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4770d7b5-7f87-33c6-ab5c-4ba8fcb66552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.161.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:1d:3a:ac:4f:fd:5c:20:3f:82:b8:9d:16:3d:d7:0e:6d:
         b1:fe:ef:ee:7a:dd:eb:21:12:2f:4f:25:cf:51:b8:89:33:13:
         87:43:8b:de:9a:a3:6a:fe:8f:68:b4:de:fb:c7:b8:a9:3b:21:
         19:9e:d1:a0:98:fe:a6:10:e1:69:2e:f2:0f:cf:c4:cb:6f:cf:
         45:8e:a1:f8:6a:e9:c7:3f:dc:60:67:d8:8e:7d:e0:78:83:24:
         5c:46:a1:ab:5a:75:f9:1a:59:d9:f1:e6:e5:56:54:cb:8d:00:
         8b:09:00:3c:32:db:36:ea:2c:6d:cc:72:9e:a3:25:05:c9:07:
         ef:1f:9a:3f:bc:b9:46:29:f6:ab:8c:af:59:cf:2e:42:10:95:
         98:01:fc:9a:f7:39:1e:f6:7a:d1:db:a3:66:15:3e:4f:96:a6:
         21:6f:ed:38:6f:f0:9b:1a:1b:ca:07:df:29:92:fb:4a:5b:f2:
         70:27:e2:33:6f:44:16:80:0a:98:dd:d0:31:46:bd:d4:85:82:
         3a:91:6e:0d:48:00:f1:79:5f:18:48:8d:63:9b:91:b1:a9:11:
         08:84:bc:5b:1b:fe:31:97:ff:ba:df:2a:d6:7a:a3:5a:b6:28:
         18:56:c7:ca:ef:c5:4f:f5:e7:56:c0:21:3d:49:fa:cc:34:63:
         b0:33:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:22:16 2026 by rpki-client