Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/e82149d1-85bc-3c55-bc5d-9a2c7d95cd04.roa
File:                     e82149d1-85bc-3c55-bc5d-9a2c7d95cd04.roa (raw, json)
Hash identifier:          tdYs9FljSZXf6CwZ7yiCIn7ts4hsCbX00NGueDhlA7g=
Subject key identifier:   93:49:65:15:5C:61:9F:EB:68:8B:31:44:38:59:46:23:38:E6:44:11
Certificate issuer:       /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
Certificate serial:       010D0C9F4328584E878D891EF9DE3AA97BF33FC0
Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/e82149d1-85bc-3c55-bc5d-9a2c7d95cd04.roa
Signing time:             Fri 17 Jul 2026 14:07:49 +0000
ROA not before:           Fri 17 Jul 2026 14:07:49 +0000
ROA not after:            Thu 15 Oct 2026 14:07:49 +0000
asID:                     10279
IP address blocks:        164.153.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:87:8d:89:1e:f9:de:3a:a9:7b:f3:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
        Validity
            Not Before: Jul 17 14:07:49 2026 GMT
            Not After : Oct 15 14:07:49 2026 GMT
        Subject: CN=d94c1ef4-6a97-4bb7-8ff2-299ec43a0d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:e2:c2:c1:85:d5:31:f0:49:74:c5:9e:30:
                    78:c5:53:2e:b3:8f:69:ee:c2:b5:f5:bc:1f:22:1a:
                    26:cc:df:e6:3c:a2:d8:fd:0d:f6:12:bf:07:7c:70:
                    07:9a:f0:6d:2a:fd:ba:9d:5b:f5:cc:71:1a:ae:d9:
                    0f:db:85:ae:4a:4f:0d:83:de:03:40:63:98:25:0d:
                    2c:51:e4:12:4e:de:31:d2:5c:81:0c:1b:41:c3:08:
                    2f:1b:58:46:d2:c2:f3:a6:81:31:18:af:bd:77:2e:
                    65:2b:a8:8a:c6:9f:5e:73:6e:d0:f8:6a:fd:31:44:
                    d2:ed:f4:77:02:23:78:c6:79:54:09:66:c6:19:77:
                    25:79:a9:74:3b:22:a9:93:95:67:29:81:eb:11:36:
                    f1:26:f4:7e:8d:03:64:24:a3:bc:71:ca:cd:30:f3:
                    b4:48:04:7d:3a:62:ac:74:ee:44:2e:51:5c:60:db:
                    d5:e3:de:37:8a:e7:19:0b:ec:e6:2f:15:36:ce:3c:
                    76:ec:48:58:f5:d3:c2:aa:66:7b:0e:5f:8c:f5:ea:
                    ed:ce:71:f0:c4:6b:32:8d:a2:bd:15:d7:97:b1:0b:
                    c0:f1:de:6c:08:e1:89:35:55:e9:1a:c5:10:9d:f0:
                    b9:77:03:22:ee:ab:ca:88:0f:fb:e8:1e:75:da:bd:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:49:65:15:5C:61:9F:EB:68:8B:31:44:38:59:46:23:38:E6:44:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/e82149d1-85bc-3c55-bc5d-9a2c7d95cd04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl

            X509v3 Authority Key Identifier:
                keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d6:53:10:fd:10:1b:4f:99:5c:eb:5a:a3:14:16:78:bc:f4:
         f6:90:91:49:53:eb:92:16:2e:36:6e:5e:1c:e5:19:6b:43:76:
         3d:27:16:69:5d:dd:c1:7c:75:0d:b0:fd:c2:39:c8:0a:55:ff:
         c7:6f:ea:38:49:45:52:81:49:4b:fe:51:21:79:9b:4e:a4:37:
         ab:37:10:fc:6c:b7:15:93:a2:9d:d6:d7:5c:c4:fd:05:80:69:
         93:5a:50:c7:a1:9e:35:26:f5:ff:27:10:3f:6d:cc:da:45:36:
         b6:94:b4:63:ca:8b:ba:09:63:56:15:3d:31:25:82:8b:11:97:
         65:26:01:df:36:9d:93:78:c9:37:07:17:18:72:98:2b:88:13:
         92:bd:11:3a:d7:73:0d:5a:2b:d7:e2:c2:30:39:09:92:65:b2:
         47:70:ed:ed:24:42:c2:fa:cb:f6:12:dc:65:d3:5c:94:c6:a1:
         ce:f4:eb:e4:fb:7a:aa:b7:c7:72:89:7b:72:ee:cd:9f:44:5d:
         23:91:bf:53:6a:e4:c9:f2:62:24:09:6e:37:1b:c7:f4:57:a5:
         fe:a4:0d:f5:a6:5b:ad:95:16:9d:fd:81:be:5b:f2:cb:b7:69:
         bd:77:78:d1:bb:68:3f:59:c8:98:0f:e5:fa:23:bc:b6:01:3b:
         46:ad:9d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:07 2026 by rpki-client