Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f56d7fc-a067-3a99-9cf5-012650c13930.roa
File:                     4f56d7fc-a067-3a99-9cf5-012650c13930.roa (raw, json)
Hash identifier:          nlscJXRlJCK3G1MuGNoN2r0Sid4y8pYeLj06J2nG7Qs=
Subject key identifier:   BA:BB:F3:E4:93:0F:28:08:E8:05:BF:70:17:DD:72:3E:66:1D:47:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED431F6C68C6D0BC7B5BBB55C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f56d7fc-a067-3a99-9cf5-012650c13930.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     22258
IP address blocks:        174.161.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f6:c6:8c:6d:0b:c7:b5:bb:b5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=a3c1d819-f0de-42c5-b496-57aabfefb1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:f3:01:9c:aa:1c:54:99:05:6c:db:23:54:
                    c0:dd:01:da:34:9a:4c:a6:89:c1:7a:cb:38:d8:08:
                    e5:77:17:e1:ee:78:c3:cf:6e:4b:4f:6e:47:00:98:
                    3b:26:62:31:ff:b4:3e:b0:83:d4:54:83:08:94:2c:
                    18:87:ef:f1:d3:c7:bb:62:bf:83:7b:2a:08:56:39:
                    a0:7a:8e:c5:10:0b:a6:8d:0f:7e:cf:89:a2:cb:a2:
                    58:69:15:c1:7c:43:46:4b:f5:fa:8c:9d:67:fd:30:
                    75:2b:5c:7c:b5:6d:bc:b0:ab:e4:b3:66:83:58:cd:
                    99:65:79:1b:44:62:e2:5d:f9:c1:df:31:aa:4c:5a:
                    01:1a:41:e4:a2:7a:33:79:72:aa:9c:42:b3:27:d4:
                    a2:33:2e:a8:fc:40:c7:91:0d:9f:95:6f:80:ee:fc:
                    89:9e:3a:eb:cc:07:c9:12:ae:7a:18:f5:eb:9a:be:
                    f0:ad:fb:e2:7b:72:55:f8:79:84:26:d8:14:e9:6f:
                    fe:7f:42:a9:f3:aa:3a:89:06:cd:96:22:6c:e0:34:
                    65:32:d8:7d:d6:db:26:57:7b:da:ea:0d:49:ff:4a:
                    a1:bd:c3:78:b5:64:3b:e4:c4:89:d4:30:8d:75:79:
                    1e:11:76:4e:8d:79:d6:2d:4e:4b:07:26:89:cf:9e:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BB:F3:E4:93:0F:28:08:E8:05:BF:70:17:DD:72:3E:66:1D:47:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f56d7fc-a067-3a99-9cf5-012650c13930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.161.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:cf:ca:08:61:7e:a6:b0:1d:45:52:72:70:1c:08:2a:b9:be:
         8f:b8:25:cf:46:bb:cb:1b:22:83:db:ab:9d:e0:71:73:63:8d:
         05:b9:73:4a:35:25:9c:84:7e:60:b7:a8:83:9e:35:ac:2e:18:
         0b:87:70:76:2f:f3:b9:26:fa:c0:73:60:a6:7d:f2:0b:28:7b:
         4f:f2:22:ce:cd:08:87:78:81:62:0c:80:02:65:b7:5f:9b:95:
         5a:c3:f4:bc:c3:bb:ee:bc:97:f0:05:a0:c2:c3:32:32:89:80:
         80:56:4b:4e:c6:db:d7:00:8e:2c:3c:67:53:a1:55:a0:07:ca:
         eb:68:e0:3c:33:6a:fa:34:f0:b8:b4:47:0c:e1:ff:81:bc:26:
         f7:e0:af:16:1b:76:6d:27:0b:76:ab:e8:67:7b:ac:ae:bd:1b:
         45:12:7b:5f:a7:ad:2f:3a:64:66:08:23:e5:d0:2c:78:87:de:
         aa:fb:8b:d8:a5:b2:e9:dd:8a:f6:38:80:49:03:18:9a:17:71:
         b5:2e:73:62:af:4d:e0:c1:aa:30:e6:ab:5c:0b:87:35:75:3f:
         66:62:41:b6:5b:d2:fc:a2:f2:d2:67:92:fb:a2:eb:f6:f3:3a:
         74:cb:86:ed:94:7a:09:99:d3:7d:6d:94:36:07:34:a3:84:99:
         9f:cf:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:09:53 2026 by rpki-client