Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa
File:                     1d5b64a0-14ba-398c-be22-b579612157ce.roa (raw, json)
Hash identifier:          P/UtdTc9PXyO/j+dhUprd+C1hswZ5A70nS3+4pqSgYo=
Subject key identifier:   95:83:B9:C5:5A:18:0D:7B:DD:5B:28:66:13:74:52:EF:BC:C1:38:3A
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584F20F7BAACBE91D6AC5D34AD00
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     21949
IP address blocks:        199.167.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:ba:ac:be:91:d6:ac:5d:34:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=152bee40-dc46-49a1-a636-e178e84c3003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:1f:f7:3a:f0:b5:4f:1d:44:13:67:15:ed:
                    d9:35:a8:d6:02:65:0f:fa:ac:8d:ab:d1:97:0a:08:
                    7f:c3:63:90:25:5b:bf:4a:19:f1:44:05:3f:28:79:
                    77:ed:5f:5c:5c:e2:1b:71:49:49:91:14:cf:ba:a6:
                    51:35:c3:bf:e9:25:35:39:e3:87:e4:f9:9f:41:c2:
                    a6:bb:4f:dc:79:8c:11:f1:60:77:4b:d5:71:c2:43:
                    b8:31:13:1d:83:d2:16:da:14:e1:f4:a6:cc:76:f2:
                    85:b5:d8:34:65:30:6d:e7:a0:c1:58:08:54:64:90:
                    67:98:1a:ed:15:f8:9e:e7:fb:99:ab:bb:76:a1:96:
                    18:3f:f4:74:31:b6:1c:d7:a0:21:30:f4:27:50:cc:
                    9d:bd:83:08:3f:8c:b7:a0:2e:a1:e7:12:b4:48:5c:
                    cd:83:24:a5:95:24:f4:06:4e:fa:a5:d4:45:53:58:
                    ee:9c:58:1c:74:b1:79:56:0f:f3:81:c8:03:fa:5b:
                    55:9a:9a:06:46:7a:c7:92:41:88:33:2b:71:dc:7c:
                    ff:86:ad:3c:70:fa:6b:5f:a7:75:73:11:f1:8d:61:
                    3c:62:cc:13:0a:25:57:64:52:8e:95:a3:31:69:20:
                    3e:fe:9b:1a:01:db:01:87:c2:67:f4:16:69:f2:ef:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:83:B9:C5:5A:18:0D:7B:DD:5B:28:66:13:74:52:EF:BC:C1:38:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1d5b64a0-14ba-398c-be22-b579612157ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c9:91:6e:a5:87:6e:71:ed:52:4e:8f:f8:a8:a4:3d:6b:b4:
         71:1b:34:b4:21:24:f6:78:be:fb:09:c1:22:71:bc:bd:b5:16:
         f7:3f:26:f1:04:06:30:0e:62:e2:c7:b0:fe:a9:89:3f:6d:d4:
         bb:75:29:3e:90:fa:f9:be:5f:2d:24:c3:1a:33:de:bf:e5:58:
         4f:4c:27:97:bc:c0:e7:6c:57:44:4c:eb:85:be:2c:e1:92:7c:
         05:68:31:41:ed:9e:4e:bf:8e:28:eb:13:ab:39:16:2f:20:dd:
         ac:83:2a:80:94:45:27:81:df:12:e0:ce:71:ec:e3:dd:39:82:
         f7:9d:e6:91:bf:a7:dc:c9:58:7b:68:e6:74:44:9a:91:ee:66:
         bd:a1:df:e5:55:a7:c5:e6:ed:f1:aa:f2:79:90:d3:e7:f6:31:
         c7:55:2e:10:b3:4e:ac:62:19:d8:56:4e:94:d4:c8:58:20:d4:
         c9:86:3f:0c:08:8a:2b:70:71:a0:d3:e0:50:eb:54:35:ad:e2:
         e4:36:3f:5c:44:70:1d:8a:f5:e0:ef:db:8c:cf:bf:f9:e8:9a:
         32:91:6a:ef:0e:4f:d8:b5:aa:45:6c:78:37:b3:6f:74:a5:ca:
         59:5b:2b:c6:47:9f:89:6e:be:7e:53:61:3f:8b:d7:ea:3d:f6:
         1b:f6:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:01:44 2026 by rpki-client