Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa
File:                     2054c310-0e3b-3368-b12e-ea712380783a.roa (raw, json)
Hash identifier:          54UrkC5Sr6KO3sJmdFwmwMOf73E7E2GjSCzlcUmwb3U=
Subject key identifier:   42:19:69:D8:ED:9D:6F:F2:9C:AF:4A:8B:DF:43:BF:59:49:62:E7:ED
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584EAE81A5BC3AE0A1568FAFD780
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     9009
IP address blocks:        162.246.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a5:bc:3a:e0:a1:56:8f:af:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=d5a6ae5b-584d-412d-b353-fde9f0a9e52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:87:0d:ca:df:5b:30:cc:a6:a3:c2:7e:26:ff:
                    96:08:bf:4c:f8:60:d0:92:92:97:05:ba:33:ce:cb:
                    67:7f:09:d5:f1:4a:9d:26:76:e3:fe:22:75:13:be:
                    90:67:ff:7e:25:15:f8:24:eb:b0:a7:6f:76:73:ba:
                    d3:18:76:22:a6:50:5f:13:3f:fb:66:69:6a:fe:a4:
                    e9:ae:34:bf:85:88:76:87:77:de:a8:aa:17:a4:5f:
                    db:f1:94:bf:70:e3:29:6e:39:04:e5:ce:1b:66:21:
                    c3:56:07:c1:26:a4:fc:89:9f:ba:c2:91:d5:88:37:
                    1b:3c:6a:ab:7b:0d:c7:57:d8:6e:f7:ba:15:03:eb:
                    e6:58:ea:c1:ee:32:81:10:b6:44:8b:4f:f8:fc:be:
                    92:bc:30:6a:a0:9f:67:3f:de:d4:8f:31:da:b9:c7:
                    57:1a:ef:df:9a:46:1b:fa:53:9b:0e:95:00:70:a6:
                    59:35:f7:34:0c:16:80:77:c6:c2:59:91:e8:bd:ae:
                    23:be:82:2f:88:7e:fe:bc:62:3b:f9:c7:08:68:33:
                    70:35:e8:a8:15:da:27:c5:bf:83:51:af:bc:3c:e9:
                    a8:5f:11:53:98:24:d6:2b:08:ba:38:82:e7:12:63:
                    b7:be:dd:36:91:a6:d1:fb:08:19:4f:1c:ab:09:dc:
                    b1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:19:69:D8:ED:9D:6F:F2:9C:AF:4A:8B:DF:43:BF:59:49:62:E7:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:6d:4c:76:d6:3d:23:b1:8a:0d:10:33:f8:a0:c4:a9:44:19:
         7b:d7:2d:80:b5:9e:da:7c:d1:32:ca:15:6a:4f:dd:6e:c3:d5:
         ea:8c:55:39:9c:e2:38:82:3b:fe:13:21:c5:f2:96:a5:ef:e3:
         56:e8:dc:d5:70:a8:33:2e:d3:f0:b3:3f:fd:12:40:b2:0c:6f:
         b2:a3:5a:39:e9:3a:98:37:67:6f:1d:50:58:c6:ed:01:51:d8:
         42:e6:58:4e:17:d2:68:51:4e:31:6b:ec:94:b4:36:e1:ad:eb:
         a1:66:f9:8a:05:98:3e:3c:d7:0c:79:c1:bd:e7:44:1e:7b:0f:
         cd:90:a4:4e:8c:cf:3d:b4:51:b0:7f:f4:d7:20:5d:78:af:1a:
         a9:f5:1f:35:36:d5:43:ec:57:ef:8d:4f:97:27:87:d1:ba:d5:
         9c:e7:b4:1d:d8:f9:f3:2b:80:97:44:02:7a:30:ca:72:77:42:
         a9:5f:44:68:c5:cc:1f:43:43:34:3d:81:a1:39:c6:5d:9c:c0:
         bb:90:b4:8d:76:a9:24:21:9e:27:92:3f:e8:9a:84:a9:eb:a8:
         89:b4:bb:9b:e1:b9:ff:cb:ae:7e:c8:60:d6:b5:04:dd:1c:3e:
         62:ce:f7:2b:e8:87:e2:d9:74:e8:18:58:d0:32:ec:1c:20:a1:
         80:0d:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:27:35 2026 by rpki-client