Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5ed5505-5241-3cae-a6d7-16ab760fc28c.roa
File:                     a5ed5505-5241-3cae-a6d7-16ab760fc28c.roa (raw, json)
Hash identifier:          i1Q4hrIxgmKLzmuFWFL3lABUi7NAo8Suv2EV8E7IZ98=
Subject key identifier:   23:5E:E5:49:CA:6E:8D:C8:79:83:2B:E8:2E:04:CF:C4:37:48:EB:1B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EAFE70753A775B8DE2118A200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5ed5505-5241-3cae-a6d7-16ab760fc28c.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     396595
IP address blocks:        216.168.228.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e7:07:53:a7:75:b8:de:21:18:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=5a134440-d662-4e59-930e-c55af520058b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:1d:36:a7:f5:ef:2f:1b:ad:ae:fe:95:76:
                    2d:8d:0d:d6:0b:e5:05:5b:97:5b:40:a8:5a:e3:38:
                    42:1d:d8:3b:40:57:3f:4d:af:b4:ee:a8:e0:e0:f0:
                    8d:60:a1:b2:1e:f9:79:aa:bc:1b:9c:75:27:bf:3f:
                    ba:c0:33:17:76:a8:39:51:07:a5:9f:0b:88:b8:89:
                    a1:ea:48:55:bf:9c:aa:54:88:a1:58:89:ba:0b:a6:
                    fd:04:45:1b:68:60:32:b5:04:69:1a:79:88:66:5c:
                    1e:2c:b5:83:cb:e2:37:14:71:ae:3d:ab:a3:5f:af:
                    3d:1a:7f:ec:01:51:2d:0b:5e:c1:e4:14:9a:ac:e9:
                    b9:a3:b2:63:07:10:51:9f:b9:63:12:88:c4:d0:eb:
                    f0:dd:8c:84:32:ff:6e:83:2c:2a:c2:47:1c:34:c3:
                    b6:b7:4d:6a:02:5f:54:ab:c1:51:02:09:8e:26:a6:
                    68:42:60:da:2c:6e:25:11:af:c1:a5:aa:81:a9:3e:
                    c4:e4:36:c1:58:6c:6c:49:36:30:b2:69:a0:93:81:
                    b2:2a:05:6f:42:e1:52:df:42:c8:d5:f8:fd:8e:33:
                    ea:83:e5:27:17:46:50:40:ad:a4:19:de:7d:93:d2:
                    c6:85:e0:eb:d3:4a:f1:4a:ba:20:01:e2:ac:2c:63:
                    05:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5E:E5:49:CA:6E:8D:C8:79:83:2B:E8:2E:04:CF:C4:37:48:EB:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5ed5505-5241-3cae-a6d7-16ab760fc28c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:df:c3:03:71:30:9e:7a:b3:fa:68:ae:ee:d8:45:df:9b:97:
         32:36:b4:a1:60:c0:36:a8:54:ed:f7:be:8b:f5:68:bc:c3:54:
         6a:b3:07:be:91:5c:1d:71:a4:41:e9:a0:81:21:f3:31:6e:1a:
         b8:38:71:a4:3b:d1:d2:66:89:21:c1:4f:03:01:50:d9:d6:2b:
         a5:be:2e:34:63:c4:32:62:48:92:04:5b:0a:5f:27:c8:13:c1:
         86:76:ab:eb:50:b0:9f:1b:4d:db:a1:7b:8a:11:f4:b3:e5:c3:
         e4:a0:0c:de:a3:5f:2b:33:b6:9b:d0:09:93:8d:ed:95:1b:ab:
         6b:b7:a5:c1:7a:b9:ce:55:5e:66:05:59:7f:61:04:ec:28:6e:
         25:0a:7d:ff:8d:c7:22:58:f0:ac:d6:e8:df:af:2b:93:21:cf:
         04:30:c9:25:38:a7:fc:fe:81:65:37:ca:12:25:cb:f6:40:60:
         e2:20:2d:8d:a2:80:b1:4b:97:01:ae:dd:ec:11:58:45:d7:1c:
         c7:e2:2b:5b:8e:d4:41:38:e2:3c:33:81:ee:b0:19:89:c1:3b:
         fc:1d:3d:35:38:ea:52:9a:cb:c4:07:cd:3e:4f:2d:3c:3b:06:
         7c:f3:e2:6a:2a:8e:02:4d:61:e3:77:b7:0c:c4:38:ec:b1:be:
         4f:2e:21:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:57:27 2026 by rpki-client