Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d74639a3-cdd3-398c-8bfe-ef7608ef66f7.roa
File:                     d74639a3-cdd3-398c-8bfe-ef7608ef66f7.roa (raw, json)
Hash identifier:          mK1Uacm43ecB6RiRzc39Wiv2KmerKDcO3cHNeZkP8U8=
Subject key identifier:   23:C2:46:56:3D:17:43:36:CD:03:89:7C:35:AF:CF:81:12:8D:B7:D2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EC20C762B43234AA0DCEF6F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d74639a3-cdd3-398c-8bfe-ef7608ef66f7.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     396614
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:76:2b:43:23:4a:a0:dc:ef:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=ed765151-a19e-4418-8212-f96c376a6afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bb:ad:51:af:4b:37:d8:b5:ec:bc:3a:55:cb:
                    ff:ae:61:44:f8:f9:05:dc:13:af:06:60:fc:63:40:
                    28:45:ad:6f:f6:6d:0e:2d:85:f5:5f:e9:eb:47:5b:
                    e3:db:ab:54:6d:ef:09:82:06:5f:2e:bd:24:fd:d8:
                    74:be:83:9a:6b:1f:d0:08:34:47:d7:61:f2:e9:6f:
                    2a:a4:57:fa:8e:08:d9:77:b0:74:9d:7c:33:2a:12:
                    7c:19:a7:04:53:53:97:b8:77:2e:e6:f3:a9:64:f4:
                    39:c4:65:29:77:87:c9:88:d0:61:7e:36:a3:6b:62:
                    b6:c1:69:0a:24:92:d1:7a:31:02:5f:ec:3f:89:cc:
                    2d:20:c7:ef:e1:85:6f:86:a4:ad:70:84:55:ae:72:
                    98:95:1e:f8:67:e3:38:a3:a9:7f:84:92:fb:f7:0c:
                    7d:e6:55:c5:c9:95:a4:4d:51:5e:37:38:16:0e:97:
                    38:7d:ec:a4:ce:63:c2:bc:b1:bd:c8:38:34:a7:3e:
                    c0:fa:85:39:2e:ba:dd:98:b6:d5:b8:d8:0d:48:ac:
                    cb:d8:7b:5d:7d:5d:27:11:1f:b4:47:12:92:73:da:
                    af:7a:62:68:98:58:e5:2f:e2:c6:e8:e1:6c:73:e6:
                    fd:69:6f:cd:1d:46:5c:19:8d:d6:6f:e5:91:1e:4d:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C2:46:56:3D:17:43:36:CD:03:89:7C:35:AF:CF:81:12:8D:B7:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d74639a3-cdd3-398c-8bfe-ef7608ef66f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:18:b8:7d:a9:1c:1e:24:6b:8a:2d:21:96:f1:4d:52:b1:75:
         34:b6:88:2f:23:02:65:18:9b:e6:43:42:48:0b:45:94:eb:5f:
         83:c3:24:78:a1:02:aa:25:11:70:b0:99:cb:82:7d:d0:88:cb:
         2b:ce:2e:0b:23:0d:89:10:b4:89:76:fa:0f:73:48:89:00:29:
         90:fa:05:4c:30:d8:1b:30:1a:95:91:d7:25:bb:2f:44:93:df:
         fc:91:7b:9d:8a:5a:4d:f7:59:aa:47:a4:eb:b1:86:9d:5d:69:
         67:6d:5b:96:d7:ca:40:bb:2a:df:ff:6c:d1:17:7f:d5:7a:c3:
         80:a1:be:00:83:e9:ea:df:f5:78:85:9a:dd:55:50:64:3c:34:
         a4:5f:ea:2d:b3:23:86:1c:57:5d:3a:56:a3:6c:c7:29:37:35:
         0f:f1:91:b4:7a:b0:f8:05:71:98:ab:1e:2d:13:6d:a8:71:1f:
         1b:99:54:cb:e8:da:b6:00:34:00:1c:2e:6d:b5:1f:d3:09:2e:
         c0:a3:50:82:af:d5:36:c1:28:de:7c:00:0e:e0:86:54:0a:72:
         56:89:25:c7:f0:12:e6:bc:99:9c:eb:44:df:1c:89:f4:28:4d:
         8b:91:47:e0:97:f2:bb:39:37:42:fb:fe:d7:b7:61:0e:fe:d1:
         c0:30:cb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:55:19 2026 by rpki-client