Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a73ccbb9-7e13-35db-bb31-0ca5d43d83d0.roa
File:                     a73ccbb9-7e13-35db-bb31-0ca5d43d83d0.roa (raw, json)
Hash identifier:          PcLpCOWW6hDCNgkHwsphrbw+y5WebmehHQicjqQzpBI=
Subject key identifier:   36:10:57:2E:5A:2A:90:90:8A:5C:C1:E4:31:53:38:08:9E:8A:96:C3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F497C7B0CF4434D808D06DB80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a73ccbb9-7e13-35db-bb31-0ca5d43d83d0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54113
IP address blocks:        157.5.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:7b:0c:f4:43:4d:80:8d:06:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=82e136ae-9fd4-476f-bc7b-07b818899a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:c5:ad:a4:03:d1:c8:f9:33:e9:30:91:cf:
                    7c:36:39:09:60:13:0d:60:2e:a2:5d:ad:3d:65:5c:
                    02:3b:68:24:83:6e:3d:7e:42:61:f0:63:20:fc:1b:
                    95:ee:6a:2a:cf:d4:20:9c:e5:54:73:75:f8:a2:8b:
                    dd:37:b4:0e:8f:9f:82:35:d3:c4:f8:a3:36:8e:9d:
                    c1:c6:a4:b0:04:6d:01:cb:41:86:c2:e5:d5:b2:1f:
                    45:3b:da:4d:04:f7:74:7f:a0:03:d2:4d:89:9f:01:
                    33:6c:d2:82:fe:59:ef:37:ab:bf:f7:c7:f1:fa:1e:
                    3a:16:27:7d:8f:81:ec:37:22:d5:a5:29:8c:57:a1:
                    1b:c8:96:60:dc:a7:b4:43:7a:40:5d:05:41:5f:5a:
                    ef:78:ab:52:bf:d3:f4:8d:27:e3:ef:8a:f3:2e:1e:
                    62:2c:3a:af:d8:db:b0:ae:af:54:73:59:aa:13:e8:
                    3f:ed:69:57:5d:53:63:ba:8e:2a:ca:4f:7f:4f:7a:
                    a5:eb:2a:7e:0e:06:18:28:89:31:e5:56:54:aa:e2:
                    35:c5:6f:e4:8c:30:4e:54:a5:12:b4:43:02:a4:34:
                    91:ba:40:d8:2a:4e:81:c0:f1:cd:4a:4a:bf:5b:07:
                    8c:d4:85:7e:c1:48:9b:ed:06:12:81:9c:55:8e:be:
                    1f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:10:57:2E:5A:2A:90:90:8A:5C:C1:E4:31:53:38:08:9E:8A:96:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a73ccbb9-7e13-35db-bb31-0ca5d43d83d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e7:8a:8f:bd:3b:d7:6c:27:f3:75:9d:34:0b:2c:70:f8:52:
         61:59:ab:fc:05:13:9e:d8:93:d9:a3:41:51:1c:2e:1c:23:6d:
         de:0d:1d:c9:90:86:86:6d:1f:a1:bb:35:65:7e:69:64:1b:67:
         e1:95:b8:98:e7:f2:58:4d:99:da:c4:6e:cc:1e:58:64:6c:b3:
         90:ae:a2:17:99:92:08:c6:c2:b5:19:aa:05:77:e3:49:bc:f5:
         70:18:f4:f8:7c:cc:d7:4e:1b:15:0a:26:83:c2:20:83:00:13:
         b4:1e:a4:10:d6:3a:da:d8:a5:2c:eb:78:65:6e:65:d5:5b:c5:
         38:b2:7e:07:81:f7:9e:38:95:67:b9:0b:1d:3a:7b:2e:78:5b:
         78:8f:55:e4:71:5e:84:54:23:0e:42:45:ce:6a:fa:49:1b:bb:
         d3:20:8c:d0:c0:f7:b2:08:cf:dd:40:63:af:5b:80:7b:d4:53:
         e4:c2:b0:36:11:13:8c:87:5f:45:b0:d0:ee:c9:c4:89:46:0c:
         43:3b:76:3b:c0:75:20:43:9e:8b:c3:80:83:c3:e9:51:c3:b1:
         fd:51:fc:b9:89:d9:f0:7b:94:47:62:c5:c1:d1:f9:30:dc:77:
         01:bf:65:25:38:68:1c:2c:f7:6a:5e:68:1a:c2:a2:36:ec:8f:
         1f:a1:e7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:17:38 2026 by rpki-client