Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/c680d96c-ff82-375e-822b-e0d09613fa44.roa
File:                     c680d96c-ff82-375e-822b-e0d09613fa44.roa (raw, json)
Hash identifier:          omgFonP4ONrqZ2qTLoINcGNFhurNJVxEhEBR6BB3LaU=
Subject key identifier:   3B:38:AD:D6:7E:6A:83:85:25:78:BF:3B:DA:91:CC:1F:93:35:46:FE
Certificate issuer:       /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial:       010D0C9F4328584EC7A1C81FE03B3B04BD0B6980
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/c680d96c-ff82-375e-822b-e0d09613fa44.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     397457
IP address blocks:        147.160.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c8:1f:e0:3b:3b:04:bd:0b:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=820cf7a8-3f8d-495c-bf29-080227c129e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:d3:6a:7d:69:f9:eb:0d:75:dc:e9:9c:2d:
                    a8:b5:a3:e7:ff:d6:c6:de:65:de:b9:83:5a:0e:79:
                    73:8b:72:e4:09:6c:62:f7:1d:dc:37:8e:c2:2b:2d:
                    39:33:5c:ab:f5:41:60:9f:bc:18:07:79:39:9d:20:
                    7c:d3:3c:6b:72:2d:6e:1d:82:36:9e:70:07:54:48:
                    db:1a:0d:00:c3:27:89:0f:03:71:7d:ed:2e:01:9c:
                    a0:86:f4:53:91:e9:c5:54:37:fa:24:c8:c0:f1:7d:
                    da:d9:e6:92:df:e2:72:83:23:b1:60:2c:7d:ed:2e:
                    fc:9e:b7:a1:90:f3:b2:13:7d:64:0b:2f:1e:24:79:
                    9f:09:4d:6e:bd:47:ae:83:db:ae:3d:37:c6:09:19:
                    eb:43:82:ce:bd:3f:09:a7:b5:f5:40:08:83:6b:4d:
                    66:5c:6a:d4:86:ae:f0:f5:f0:c3:ed:c9:4b:ea:b4:
                    a7:b1:34:57:f4:33:a0:c1:5b:65:7a:d7:d0:5a:fb:
                    07:c4:08:89:2a:41:79:6f:80:6c:2f:18:53:da:2a:
                    70:11:17:b5:d8:86:44:80:62:a5:86:7a:7e:a4:df:
                    d3:87:09:18:10:d1:0f:d0:84:06:f7:da:e6:3d:16:
                    2d:50:83:eb:97:c7:7e:f2:03:85:3d:85:78:e5:96:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:38:AD:D6:7E:6A:83:85:25:78:BF:3B:DA:91:CC:1F:93:35:46:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/c680d96c-ff82-375e-822b-e0d09613fa44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl

            X509v3 Authority Key Identifier:
                keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b2:4f:9a:51:34:f2:e8:35:84:d2:bc:e8:7d:e7:08:1e:66:
         49:bd:4f:c8:37:51:07:fa:cf:18:af:e2:aa:ad:01:ce:5e:dd:
         61:6c:42:35:dd:b9:7d:83:62:ae:03:ae:47:10:d3:e6:8f:e4:
         9b:b8:29:9e:f6:c4:90:7e:06:c0:b0:77:56:e2:69:9f:f6:17:
         e1:33:a6:b3:56:07:47:03:3b:21:d7:96:c4:1b:f1:30:38:ac:
         ec:cd:9e:aa:7e:eb:0b:90:31:3e:bf:1f:76:a0:d3:c0:86:68:
         38:3c:6e:f0:70:68:84:0b:33:9c:7d:44:ef:d8:81:e3:3a:44:
         08:7a:7b:04:40:da:bd:72:61:9c:9b:c6:d1:96:c4:33:89:37:
         ac:60:ea:cc:b6:72:9c:25:6a:b5:fe:e1:d0:e2:e6:b6:fd:5c:
         c6:c9:dc:7b:17:87:05:0b:9b:24:56:e5:4e:7e:2b:f0:eb:4e:
         81:6c:cc:fd:15:6a:7c:d0:ed:44:80:40:b6:a4:72:9b:29:73:
         c8:48:59:8b:20:ed:06:12:7c:43:59:68:ca:ec:b7:db:bd:f2:
         df:bf:51:4e:e0:6c:38:58:dd:e5:3b:53:f0:dd:ad:b2:57:3f:
         af:71:2b:dc:c4:ab:01:29:1f:2d:b7:23:49:ef:58:2d:e9:e6:
         de:bd:84:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:22:06 2026 by rpki-client