Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c54991e2-fbb5-3e7c-b37c-2df342d10447.roa
File:                     c54991e2-fbb5-3e7c-b37c-2df342d10447.roa (raw, json)
Hash identifier:          dnD+ipwv5C/ouh9xY/QRNiAHTFb7/0P6vQxPudAsMnM=
Subject key identifier:   C9:A5:AA:60:93:CE:F4:A6:39:CD:2C:D9:68:04:4F:A9:76:A3:CA:CE
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584ED9C75643320C13B5E08CC780
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c54991e2-fbb5-3e7c-b37c-2df342d10447.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     53335
IP address blocks:        216.200.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:56:43:32:0c:13:b5:e0:8c:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=155079b1-8ad1-4e8a-bc1a-84dd807b9887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:07:d0:05:81:5c:5c:9a:31:93:71:83:cd:
                    fd:00:a1:35:fa:1c:83:93:2b:2b:c0:b8:fa:ae:4a:
                    b1:aa:68:a7:24:1c:a9:d7:47:18:5c:f1:6b:c6:aa:
                    9f:bc:44:91:03:8d:8e:3e:67:fe:d0:e9:ac:82:a9:
                    a3:d0:b4:e2:2c:8a:d5:08:6f:86:84:73:fd:7c:d2:
                    b4:48:18:64:58:df:7a:b2:9b:92:1a:54:52:5d:c1:
                    d7:87:e0:ba:ce:02:dc:e7:72:a3:2e:56:7b:af:86:
                    93:48:4a:70:bb:85:0c:50:1b:b9:1d:2e:6a:df:82:
                    b1:fa:c7:52:b5:cd:88:35:03:f6:c5:a1:c4:1f:00:
                    f3:5a:b4:05:85:d1:96:c7:f6:34:f7:70:2e:71:e0:
                    a4:ee:bb:bd:12:2f:e3:c0:7a:f3:59:17:0e:c0:95:
                    4d:9a:7b:7a:ca:cb:64:9d:36:24:ca:56:5e:b4:50:
                    04:a3:9f:70:dd:5f:94:07:d0:13:5b:58:71:71:c9:
                    60:ce:74:c1:3d:50:10:93:91:bb:95:26:13:d0:61:
                    7b:e6:13:8c:1f:3c:b7:a9:67:bb:b4:1a:46:7b:4b:
                    3d:a2:27:fd:fa:b6:5a:d9:03:0c:d0:d7:44:51:e1:
                    65:ac:7f:05:62:ae:22:07:31:c4:72:ee:31:1f:48:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A5:AA:60:93:CE:F4:A6:39:CD:2C:D9:68:04:4F:A9:76:A3:CA:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c54991e2-fbb5-3e7c-b37c-2df342d10447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.200.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:11:d4:6d:4d:be:c0:45:36:e0:83:91:c6:ab:0f:22:83:90:
         6b:d6:15:74:f2:84:92:fa:e5:5e:41:f9:ad:70:af:16:56:f1:
         2f:f4:d4:9c:e9:f1:c4:6a:59:8e:e5:60:aa:fc:06:72:fe:2c:
         70:3a:73:61:9d:cb:6c:9d:0e:ed:4f:f2:ff:44:3e:34:5c:6b:
         a5:9f:18:fc:ef:35:e9:2f:0f:6f:f3:4a:70:6f:2d:9c:cd:15:
         2f:3a:aa:3e:c2:5d:1f:f2:10:a6:09:16:20:e4:af:7d:b0:6b:
         02:a4:31:2f:04:50:bb:2a:14:5c:42:c0:e2:cc:5a:d6:6b:65:
         49:87:f7:0d:7e:f2:26:d8:9f:e0:b5:99:26:be:19:6f:3c:4a:
         4f:f3:a1:56:20:24:e2:2b:f0:b7:a4:c7:2c:e3:66:c1:2a:ef:
         da:8b:c3:72:22:cc:0b:2c:4c:e8:b4:d8:82:e1:17:d4:5b:c2:
         02:5d:76:5e:3c:7f:b0:2f:a6:a6:e5:10:c7:5f:69:3c:35:7f:
         b3:04:fe:59:18:71:52:9e:d6:10:49:21:de:a1:ef:24:7b:db:
         79:e9:c2:f8:5c:ee:59:b1:16:55:78:2d:19:d7:5d:05:55:7f:
         11:95:23:91:13:e4:74:fe:ce:39:ed:2e:f8:17:fc:94:e6:31:
         b2:e9:0b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:18:29 2026 by rpki-client