Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cdf336b1-dd49-3807-ac93-54704ffafb28.roa
File:                     cdf336b1-dd49-3807-ac93-54704ffafb28.roa (raw, json)
Hash identifier:          FYHT7FTYrmxwJkfqB3f9B+f/mhowjuYhbzWf05L71Nw=
Subject key identifier:   8E:44:4C:F7:9B:DC:CF:B9:69:E6:6B:BB:31:C1:C7:59:63:DC:2E:EC
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584EC4F9F32E3C2CD4A1ABA23F30
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cdf336b1-dd49-3807-ac93-54704ffafb28.roa
Signing time:             Sat 08 Aug 2026 14:10:34 +0000
ROA not before:           Sat 08 Aug 2026 14:10:34 +0000
ROA not after:            Fri 06 Nov 2026 15:10:34 +0000
asID:                     153810
IP address blocks:        192.48.152.0/24 maxlen: 24
                          192.82.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:f9:f3:2e:3c:2c:d4:a1:ab:a2:3f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Aug  8 14:10:34 2026 GMT
            Not After : Nov  6 15:10:34 2026 GMT
        Subject: CN=15d38b8b-113b-4e52-90b2-ed4d0efcd532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:a7:79:c3:ff:fe:57:e6:e0:70:ae:36:ad:
                    8c:eb:81:99:e5:1f:3e:6c:d2:17:38:68:8c:c9:8e:
                    21:2b:92:71:58:d3:45:b7:ba:c5:84:b9:4b:f6:35:
                    3f:6f:31:6d:3d:16:ae:5f:65:d7:84:69:c7:bb:62:
                    88:f3:4c:d2:7f:23:e6:7a:4d:a1:dd:97:10:09:2f:
                    93:bd:55:7c:b2:a5:ce:23:36:99:27:20:13:5d:64:
                    e9:08:8b:e1:86:1a:bb:95:3b:2d:35:b5:79:96:52:
                    c2:73:f2:66:be:15:78:75:6a:50:c3:80:26:d2:61:
                    06:59:4b:1c:5d:50:eb:28:23:6f:12:26:96:26:fa:
                    63:5d:62:35:73:c6:35:c2:8e:be:e3:3f:16:f2:f1:
                    8a:63:7d:4c:18:77:a4:c3:cf:db:99:7b:2c:76:6d:
                    a6:8d:db:13:6e:7a:b3:9b:34:31:1a:ee:95:4a:90:
                    cb:1e:31:f6:c5:fd:38:30:75:05:ab:e4:69:00:9d:
                    61:73:45:fa:b2:11:62:0a:b9:f6:7d:e9:ac:96:2c:
                    4f:78:d2:23:56:81:bc:7a:2f:46:85:42:37:24:ee:
                    2c:cc:87:81:2b:92:cc:a0:fc:32:cc:37:bd:87:96:
                    f1:56:f3:64:38:f9:5c:88:e2:bc:cd:8f:71:dd:96:
                    ff:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:44:4C:F7:9B:DC:CF:B9:69:E6:6B:BB:31:C1:C7:59:63:DC:2E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cdf336b1-dd49-3807-ac93-54704ffafb28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.152.0/24
                  192.82.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e2:c8:aa:91:de:99:3d:98:e4:07:ab:25:ed:60:e8:71:9c:
         dd:d3:d9:d8:a2:5b:99:16:67:57:6a:de:33:79:d2:08:b5:eb:
         bd:b6:21:e6:f4:1d:7c:7a:89:0d:fa:b0:09:60:37:7c:c9:5e:
         54:c7:9b:f4:24:2e:b1:4d:1e:c5:96:70:d6:a7:2e:28:0f:78:
         8d:3d:de:82:84:67:75:76:4f:1a:3c:b5:cd:96:cb:47:13:45:
         3a:0a:2a:ce:5c:89:4b:87:e2:d4:0a:f3:1d:e3:bd:e7:05:fc:
         5e:b9:ba:10:31:88:99:b1:f3:6f:ef:3b:f1:c2:fc:c5:eb:c9:
         f3:6f:3a:50:60:66:7b:ae:d3:ea:7b:32:9f:31:55:d8:92:eb:
         62:93:48:1a:b6:47:98:19:f9:1d:4a:9c:de:23:df:29:ae:f8:
         7d:b3:22:8c:d6:a5:47:ad:ef:cf:61:a3:4b:87:0a:d6:62:2e:
         a5:95:dc:87:82:62:03:54:59:89:31:db:6b:6c:04:47:d3:0d:
         85:0d:99:79:56:1b:2c:e8:61:af:6e:3d:4f:82:6e:d9:83:da:
         61:cf:bc:ad:66:99:3f:9d:c4:7c:14:34:e3:54:94:80:d5:f8:
         c7:54:0c:d7:5c:1c:1a:38:5d:7f:8e:d2:c2:c6:1f:9c:5c:74:
         e4:96:f5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:03:05 2026 by rpki-client