Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/384f6058-27a4-3abd-bf9a-034ee27bc480.roa
File:                     384f6058-27a4-3abd-bf9a-034ee27bc480.roa (raw, json)
Hash identifier:          +oymcpZXX0KWHRBDyK9uOlvpkaiK+rWdVzirdZ1WRkY=
Subject key identifier:   46:B8:06:B1:E5:A6:BE:1F:C1:FD:65:A3:64:E3:1D:EB:DF:1D:CC:4E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F4984B54DC93C971A62EC6700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/384f6058-27a4-3abd-bf9a-034ee27bc480.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54113
IP address blocks:        157.5.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:b5:4d:c9:3c:97:1a:62:ec:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dbeb0207-1cc1-400e-8c24-b801b9047953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0e:f0:d0:e5:29:54:86:3e:79:54:2b:a1:d3:
                    6c:6e:b3:ff:9a:4c:39:fd:98:41:99:6c:54:16:84:
                    59:a2:2d:ed:0d:9e:5b:15:4d:a4:fe:dd:36:f5:26:
                    dc:2c:65:63:88:f4:bc:2e:c4:42:60:b3:e3:56:99:
                    bd:51:b8:10:ac:d1:4f:a6:50:bc:e6:4c:d9:00:ac:
                    88:4c:54:cd:c4:06:c7:2f:74:2a:a4:1b:1a:56:67:
                    63:9f:8c:95:9e:be:a3:ba:23:2a:8d:81:a5:c6:10:
                    83:7f:5c:9c:06:03:f7:78:b5:88:44:ee:ab:7d:b7:
                    a8:57:79:ac:16:94:39:1a:79:ab:da:88:4e:42:a7:
                    39:74:06:a0:f1:a1:71:21:c7:ec:9d:18:c5:3d:e4:
                    5b:8e:db:17:35:bf:12:91:65:31:f7:fd:96:11:68:
                    17:c1:e9:9a:4d:ed:4f:c2:5c:a0:d6:0b:2c:69:1a:
                    7b:8c:21:e7:52:88:6d:62:ae:f1:de:09:24:21:a7:
                    25:e3:8b:69:98:43:06:20:23:12:ea:6f:df:6f:2f:
                    73:45:f4:b4:a8:3c:69:cd:2c:96:ce:2c:24:42:83:
                    ff:1a:f6:22:83:1d:2e:61:63:09:54:b2:a1:ca:e1:
                    ff:68:33:42:09:98:d5:d3:8c:7a:58:cd:5d:78:62:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B8:06:B1:E5:A6:BE:1F:C1:FD:65:A3:64:E3:1D:EB:DF:1D:CC:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/384f6058-27a4-3abd-bf9a-034ee27bc480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0c:d6:3e:aa:9e:b9:6c:5b:fc:4c:0a:b0:1c:3d:e2:f1:63:
         1c:5b:70:dc:8f:98:05:c0:43:96:f1:cd:43:3a:ab:4b:78:c3:
         3b:79:13:01:c3:57:8a:43:ed:ef:0b:87:0b:b6:19:17:dc:90:
         af:d6:56:f0:4a:15:e0:3a:a4:b4:09:31:6e:0d:b1:c6:0e:83:
         3f:8d:e6:66:97:3a:af:d4:c2:fc:87:cb:fc:c7:3a:e4:0a:61:
         33:b6:72:75:60:51:b8:17:e3:4d:eb:00:3e:4e:03:72:3d:06:
         da:3f:17:ac:36:69:72:69:d2:ef:0b:94:31:de:6f:08:02:f4:
         fd:59:98:56:3e:6e:0b:de:41:36:1b:a7:56:c2:e2:bb:aa:de:
         59:88:0b:49:df:d9:f9:ef:e2:5a:93:fc:2d:27:41:bf:2f:d4:
         fb:32:2f:cf:b2:33:10:fe:1a:c0:d3:dd:18:b5:52:cc:99:60:
         a0:27:cf:14:cb:76:9a:e5:22:da:fb:c4:6e:59:b5:c5:59:e0:
         48:f6:29:dc:22:cb:ac:59:d0:89:6d:18:b2:db:c6:c7:f6:d5:
         2d:8f:6d:48:ad:c5:d0:fc:e5:0a:25:0d:44:22:65:b4:16:b1:
         5c:22:e2:c5:42:dc:f2:bc:3a:ef:4d:45:f4:0b:ba:ce:f9:4e:
         83:47:ec:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:11:35 2026 by rpki-client