Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/a20e51f0-690c-37b2-93d6-e0013362f971.roa
File:                     a20e51f0-690c-37b2-93d6-e0013362f971.roa (raw, json)
Hash identifier:          axZRVMvPjoR8ZASDgPN2HPvm1FFwgTfUl0enB6uB1o4=
Subject key identifier:   D0:FA:CE:A7:3A:47:8F:F3:4C:A8:32:FE:AF:CC:15:58:D9:46:0F:BA
Certificate issuer:       /CN=211878fe-73c5-4a15-b82e-1d19c2ff542c
Certificate serial:       010D0C9F4328584ED001C5288D0357E955B97400
Authority key identifier: DE:8A:57:3F:0A:54:1A:43:43:7F:0C:FD:0B:AF:75:AF:C2:85:C0:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/a20e51f0-690c-37b2-93d6-e0013362f971.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     46433
IP address blocks:        162.255.96.0/24 maxlen: 24
                          162.255.97.0/24 maxlen: 24
                          162.255.98.0/24 maxlen: 24
                          162.255.99.0/24 maxlen: 24
                          162.255.100.0/24 maxlen: 24
                          162.255.101.0/24 maxlen: 24
                          162.255.102.0/24 maxlen: 24
                          162.255.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/211878fe-73c5-4a15-b82e-1d19c2ff542c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/211878fe-73c5-4a15-b82e-1d19c2ff542c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:c5:28:8d:03:57:e9:55:b9:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211878fe-73c5-4a15-b82e-1d19c2ff542c
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=41b30729-7cb3-42ec-84f0-6bcf718e2a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:46:26:0f:b4:70:af:ad:2b:85:91:e0:5f:
                    22:af:f3:7e:96:a1:b2:69:ff:ba:09:13:60:d6:94:
                    35:d0:b4:13:cb:90:d9:59:64:38:b9:92:80:94:c0:
                    0c:a8:fa:df:46:16:d9:ff:ac:a5:b3:15:3a:69:02:
                    d5:e9:b1:72:21:96:88:ae:01:6c:42:ca:78:66:fd:
                    9f:70:9f:81:97:e8:ce:8b:4a:90:76:5c:77:fa:cf:
                    4f:62:5e:e7:7d:3f:cd:b4:12:42:de:0b:7a:24:c4:
                    1e:90:32:fe:a0:45:d3:53:5f:3d:11:61:31:f9:8b:
                    de:ac:44:8e:1c:a3:5e:a8:91:5b:8a:71:9a:dd:11:
                    dc:07:e0:66:d7:16:bb:4d:51:ff:f0:3a:f2:17:6b:
                    1c:08:1d:73:65:d6:01:fc:16:07:c4:17:d8:32:8b:
                    77:67:0d:4b:59:10:15:7a:82:30:50:d1:9a:bc:06:
                    cc:f3:19:24:62:c5:a5:78:37:ed:9a:f9:60:68:c6:
                    1e:de:06:33:f9:7f:53:c9:29:06:7b:6b:cc:8c:c1:
                    34:d7:cf:2c:11:e7:a2:76:89:f0:fd:01:99:69:a6:
                    3c:7e:7e:d2:04:de:14:3a:5f:6e:fb:ca:42:38:a6:
                    93:7d:c6:1f:28:2b:7b:43:06:4e:14:3e:46:d3:ea:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FA:CE:A7:3A:47:8F:F3:4C:A8:32:FE:AF:CC:15:58:D9:46:0F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/a20e51f0-690c-37b2-93d6-e0013362f971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c/211878fe-73c5-4a15-b82e-1d19c2ff542c.crl

            X509v3 Authority Key Identifier:
                keyid:DE:8A:57:3F:0A:54:1A:43:43:7F:0C:FD:0B:AF:75:AF:C2:85:C0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/211878fe-73c5-4a15-b82e-1d19c2ff542c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:e9:11:e2:36:ba:ef:1b:b5:03:0c:3c:29:d4:80:9d:f5:18:
         5f:20:d6:ae:07:39:2d:af:9e:2d:2a:4b:f0:c8:82:46:84:4c:
         38:07:8b:e2:25:e3:97:29:95:40:3b:f2:82:98:0c:6d:40:ee:
         dd:1a:12:45:18:65:a7:53:4b:e1:33:44:99:1e:d1:dd:ab:6d:
         23:1f:8d:fc:21:25:17:2b:9e:53:11:2d:96:bf:1f:ce:33:83:
         17:73:a8:2e:56:3a:a4:68:03:83:a3:29:dc:b4:c9:ac:ca:a4:
         43:5d:6d:c9:e1:0a:fa:32:da:f4:50:a8:df:ee:f2:25:4c:c5:
         10:38:85:80:81:72:8c:7c:1e:ba:c9:d8:a0:9e:b2:3c:a0:50:
         e8:04:ce:4e:d7:99:e2:cb:c3:c5:8d:6e:6a:78:32:08:c6:c9:
         bb:b8:e1:b4:1e:99:a0:1c:38:de:ed:f2:f5:8a:4c:b4:18:76:
         60:dd:a7:c7:25:e2:fa:0d:c3:a2:a0:45:5b:ea:18:9d:4b:6d:
         9c:c6:e4:6b:d2:d3:4d:1e:3f:ab:b4:39:f7:b0:93:5f:a8:23:
         d4:54:04:b0:ef:2f:27:d8:cb:32:32:45:3e:e0:03:1d:77:df:
         56:28:34:39:ec:4e:08:ba:ed:38:14:d8:fe:e6:1e:cb:d2:a6:
         d3:69:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:56:19 2026 by rpki-client