Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/517a729e-f5be-3f32-acb8-f63a972d4afc.roa
File:                     517a729e-f5be-3f32-acb8-f63a972d4afc.roa (raw, json)
Hash identifier:          zuNd5WFhAThooqxHoU944y3/XcuwLSHu0JDxg1luExQ=
Subject key identifier:   D1:1D:26:D8:D6:9E:43:71:5D:E1:A0:3C:FD:B0:90:43:BE:F6:C7:27
Certificate issuer:       /CN=c5aae53f-608a-4f49-919c-d5976c7324b1
Certificate serial:       010D0C9F4328584F14678C07A1013E380F14BFC0
Authority key identifier: 19:D3:EB:D3:5B:A3:F2:19:71:9A:32:D0:85:07:E0:A8:79:4C:1D:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/517a729e-f5be-3f32-acb8-f63a972d4afc.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        199.47.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:8c:07:a1:01:3e:38:0f:14:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5aae53f-608a-4f49-919c-d5976c7324b1
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=0457232f-f6de-4c58-9987-c19c185941a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:e4:b6:ec:ae:8e:f3:a3:9f:57:d6:5d:a0:
                    96:43:ca:20:da:4d:fa:00:8b:3a:e5:78:2b:b2:6a:
                    b0:b0:c7:b8:e7:34:42:b8:58:12:39:11:b2:c7:9e:
                    62:92:b8:68:32:e6:a8:95:50:19:17:98:79:b4:8e:
                    8c:ac:ec:a2:05:97:e3:25:ed:63:3a:48:96:69:84:
                    a6:5f:fe:14:c4:d6:af:fc:f4:a1:b3:7e:e2:56:55:
                    d5:8a:f7:57:b6:fc:4e:24:ba:8e:0e:df:ef:09:7e:
                    8a:03:c1:b8:f2:f3:99:d2:13:46:42:4a:5d:6a:dd:
                    0b:11:82:81:66:7f:1c:d4:fc:ef:5a:e4:88:4a:da:
                    6a:27:19:ca:d5:68:5f:33:a3:29:46:70:71:73:52:
                    30:bc:fc:e6:0f:de:41:ff:f1:34:6c:1c:dd:b5:9f:
                    d9:f1:0d:4d:8e:b5:b6:be:14:06:a1:6e:f5:99:6a:
                    5d:a2:78:f0:36:9e:10:b5:58:46:d7:cf:92:3b:5a:
                    f0:74:25:1e:d5:e5:45:e8:2d:fd:27:e6:44:53:c6:
                    bc:ae:6a:bf:02:50:21:5e:7d:a7:28:ce:8f:50:61:
                    da:74:8a:d1:91:6c:4e:0e:27:97:a0:01:2f:1f:4c:
                    0c:85:19:9c:10:c1:fb:1b:a2:a8:62:8f:54:3b:d1:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1D:26:D8:D6:9E:43:71:5D:E1:A0:3C:FD:B0:90:43:BE:F6:C7:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/517a729e-f5be-3f32-acb8-f63a972d4afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1/c5aae53f-608a-4f49-919c-d5976c7324b1.crl

            X509v3 Authority Key Identifier:
                keyid:19:D3:EB:D3:5B:A3:F2:19:71:9A:32:D0:85:07:E0:A8:79:4C:1D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5aae53f-608a-4f49-919c-d5976c7324b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5b:c4:dd:d1:ba:02:82:db:24:67:98:7b:c0:53:4c:8e:cf:
         f4:b8:b1:44:9b:46:94:ee:83:ed:c4:52:3d:b1:87:f8:3c:4e:
         34:a1:cf:0a:c1:2a:4a:86:2f:aa:57:d4:57:89:e1:26:58:5f:
         eb:2a:61:16:49:f4:a6:7e:1e:3e:02:1e:96:ee:e0:a7:47:95:
         c0:78:fc:7a:db:2d:46:ac:3f:74:d9:1b:65:f6:77:a8:b6:12:
         71:2e:b1:4f:4c:7a:37:b9:d1:97:79:ac:4b:c2:e7:f9:4a:37:
         e3:6c:fb:b9:2b:ec:73:f2:c3:3c:e9:fd:5f:a6:5e:3b:4a:d0:
         73:16:f6:cf:b1:70:4c:98:30:d2:14:d0:aa:42:0a:56:c8:11:
         c9:91:6d:98:ae:b5:b0:17:11:7d:f0:52:fc:54:89:fd:c7:fa:
         80:80:3f:08:b4:f2:d5:a0:b6:cb:f3:37:af:b1:8f:99:01:b6:
         c8:6c:55:cf:95:0c:3e:d7:cb:78:10:ee:ce:d3:0a:24:06:66:
         a8:5e:03:ca:b2:fd:c6:d3:7f:49:6a:fc:09:fc:a3:1a:7e:31:
         12:68:3f:d0:09:45:17:73:07:2d:1b:20:8d:38:f3:77:29:08:
         1a:7c:fd:66:2c:45:cb:15:6e:b6:13:34:35:da:1f:e5:0d:c7:
         cd:53:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 05:53:10 2026 by rpki-client