Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/b5e156cc-93d2-3666-8bca-c3c48884270d.roa
File:                     b5e156cc-93d2-3666-8bca-c3c48884270d.roa (raw, json)
Hash identifier:          1JFtv9OJxDPaGUwjAFZoAHWWd3f051yX8ID3dNYthQg=
Subject key identifier:   37:45:91:7C:3A:36:19:0C:96:A5:FF:9A:07:91:FF:8E:3C:7F:D0:7D
Certificate issuer:       /CN=789d5664-f06e-4109-b1d3-3b74abba3346
Certificate serial:       010D0C9F4328584F6A10BA60272A9B67C6FDC300
Authority key identifier: 33:62:E5:22:3C:C3:FE:3D:EF:55:3A:24:E8:04:6E:4F:37:CA:2A:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/b5e156cc-93d2-3666-8bca-c3c48884270d.roa
Signing time:             Tue 06 Oct 2026 17:24:50 +0000
ROA not before:           Tue 06 Oct 2026 17:24:50 +0000
ROA not after:            Mon 04 Jan 2027 18:24:50 +0000
asID:                     8103
IP address blocks:        169.139.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/789d5664-f06e-4109-b1d3-3b74abba3346.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/789d5664-f06e-4109-b1d3-3b74abba3346.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6a:10:ba:60:27:2a:9b:67:c6:fd:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789d5664-f06e-4109-b1d3-3b74abba3346
        Validity
            Not Before: Oct  6 17:24:50 2026 GMT
            Not After : Jan  4 18:24:50 2027 GMT
        Subject: CN=222f8e36-c016-42d2-adad-e5e75a5f0f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:f3:55:95:77:09:cd:0d:f2:4f:96:b9:ab:
                    82:0d:c3:c5:4d:3e:d4:09:ee:cc:07:d5:12:cc:46:
                    d7:04:54:58:f4:0a:59:6f:2d:59:1f:e0:98:45:2e:
                    47:c0:e2:91:db:fb:ad:33:68:c4:12:d7:a7:fd:9e:
                    10:08:2f:e6:5a:de:d7:a3:58:ce:8a:71:34:31:e3:
                    05:41:a7:c2:cb:73:50:c1:c9:fd:9c:a0:50:7f:c4:
                    da:58:c7:9d:92:35:5f:c8:43:dd:73:b8:d5:f6:07:
                    a8:76:98:2e:0d:f3:d5:1a:cf:ef:09:aa:e5:af:3d:
                    a2:70:03:92:e8:34:42:c9:fc:01:13:c6:44:26:d8:
                    40:00:e0:4f:2f:40:9b:bb:1f:df:06:a6:8a:04:66:
                    ce:bb:b3:e9:76:ce:2b:c9:5f:dd:b9:55:47:5b:ef:
                    63:b2:6a:be:a6:10:ba:4e:eb:4e:04:83:bf:5f:5b:
                    2d:65:fc:58:45:59:9f:50:7f:74:da:66:69:85:b6:
                    9b:10:c5:c3:15:a9:dc:3d:01:c6:bf:e2:4b:fa:d7:
                    7a:bb:2e:e6:36:e3:29:83:29:d8:28:3b:18:80:fe:
                    76:42:9e:fe:00:63:67:2d:19:2a:d4:f7:0c:3b:a0:
                    d6:3e:48:ba:a5:98:ce:9f:e7:9d:65:eb:3d:a5:c9:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:45:91:7C:3A:36:19:0C:96:A5:FF:9A:07:91:FF:8E:3C:7F:D0:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/b5e156cc-93d2-3666-8bca-c3c48884270d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346/789d5664-f06e-4109-b1d3-3b74abba3346.crl

            X509v3 Authority Key Identifier:
                keyid:33:62:E5:22:3C:C3:FE:3D:EF:55:3A:24:E8:04:6E:4F:37:CA:2A:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/789d5664-f06e-4109-b1d3-3b74abba3346.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.139.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:11:6c:8e:f1:bb:50:44:12:fb:48:c2:61:af:ad:ce:ae:1e:
         d8:1f:0b:15:53:80:04:da:ae:c8:89:4b:54:77:a5:cf:c9:66:
         9f:02:fa:83:75:01:8c:b9:8f:96:f1:a3:a5:4b:3c:18:c9:32:
         78:bf:69:ee:64:3e:72:b0:3b:e2:12:d5:9d:1a:a8:50:1c:94:
         dc:28:b8:90:7e:18:cb:1f:f9:26:2f:47:2f:d0:54:6a:3c:ef:
         75:ba:7e:f4:94:fa:30:5b:79:5e:bf:40:01:d9:6d:57:d2:07:
         ab:1d:dd:5d:17:80:0f:29:dd:2e:5c:39:7a:c1:0e:88:66:68:
         b7:a6:5f:f5:12:77:71:50:73:57:5c:d8:07:77:e5:b1:9d:8a:
         df:4b:7f:80:aa:32:c1:f6:24:ba:c1:0e:dd:ab:1b:09:70:7a:
         db:16:7a:84:33:a1:67:24:8c:31:e4:bb:f5:f1:54:0c:d5:58:
         96:97:bb:9b:f6:3f:55:8e:c1:1e:b0:75:22:e6:86:8a:e1:a3:
         eb:da:96:a3:fe:dc:39:fb:9c:e7:39:e1:5e:46:d9:0c:93:a0:
         4c:d0:5b:77:50:31:d6:89:9c:40:16:b8:35:64:3d:44:00:dc:
         cb:02:52:86:b0:71:e2:bc:b6:67:a8:9e:b3:3d:0d:47:8a:a3:
         0d:1d:21:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:20:38 2026 by rpki-client