Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa
File:                     546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa (raw, json)
Hash identifier:          o5QV878Xmb/57BYLXVQpny45wWyM4Qgxz1aFuBUu9kc=
Subject key identifier:   84:3C:94:42:A2:4C:77:4D:44:29:9A:1B:5A:BF:10:8A:6B:7D:5C:DB
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584EA78F755B43FED3B0D5081400
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     394453
IP address blocks:        198.212.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:75:5b:43:fe:d3:b0:d5:08:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=79c9fb8b-f1b1-4964-89c6-3e59addb435c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2f:e7:52:b8:02:3c:09:9e:11:1f:d9:2e:bf:
                    18:95:8e:a8:31:5f:d3:40:a4:03:ba:bd:c4:a1:9f:
                    60:1b:6c:c7:c8:7b:4f:3e:2c:70:cc:80:f5:22:81:
                    ad:43:d7:0b:03:fd:15:2e:e1:8b:da:9e:33:67:93:
                    31:ad:72:c3:8a:5a:4b:4f:f8:f2:f2:70:ab:99:30:
                    52:48:1d:1a:05:74:ba:f9:fa:99:73:83:86:58:11:
                    6c:26:f4:26:08:89:23:c1:80:7a:d9:5b:b2:cc:3f:
                    4a:4e:1f:57:65:c2:71:cf:b3:fa:b2:9a:a8:e2:f1:
                    b8:00:a6:c2:e2:58:49:ba:09:f6:27:c8:11:cc:54:
                    dd:b3:21:84:80:76:68:d8:ad:e5:92:da:a8:a7:4f:
                    8c:7b:9a:19:74:16:83:b9:cd:bd:c1:a2:bc:5b:ce:
                    46:10:5f:de:41:3b:44:de:c4:c3:6c:37:df:87:e3:
                    16:d7:4c:80:47:39:d4:01:53:fa:d5:64:65:25:51:
                    a5:e3:bf:65:ba:6e:a2:d0:93:8b:d3:23:bd:49:d3:
                    93:ee:63:b3:9a:61:06:7f:59:0f:7c:36:5d:f2:b3:
                    25:b3:bc:28:71:d7:be:02:53:ad:4b:ee:40:e5:30:
                    1b:76:82:33:e1:9d:62:e5:47:1d:41:6d:53:a6:74:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3C:94:42:A2:4C:77:4D:44:29:9A:1B:5A:BF:10:8A:6B:7D:5C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d7:31:95:95:29:b2:ff:36:f7:a3:d8:c2:60:e9:bc:c4:8e:
         12:5f:03:95:f9:52:83:f2:5b:71:b6:ff:d1:81:f9:da:2f:5a:
         9e:b7:eb:78:dd:d0:51:2b:22:98:56:25:9d:20:a6:73:38:89:
         50:06:ae:6c:ee:92:6a:1c:8a:0e:62:39:be:b2:86:4d:1b:1b:
         35:fe:22:da:82:14:90:79:60:26:f3:cf:4c:19:6f:00:26:1a:
         ba:0a:a1:fb:5b:36:4b:16:bd:bc:2f:43:e1:e2:ee:21:55:25:
         03:a9:7a:33:ee:98:c7:ea:c4:37:cc:06:5b:ba:33:9d:e0:e2:
         b2:a2:3f:cb:e1:df:8a:17:2a:30:86:fd:67:70:4a:a6:95:44:
         b2:fa:0e:c8:02:c7:5d:bb:4c:21:fa:5a:5a:00:6d:3f:3b:59:
         44:4c:29:a5:8d:72:2b:e8:4f:e9:41:bd:a3:ab:80:02:82:97:
         b0:28:51:ac:fe:fe:1a:b7:c1:5d:ff:a2:89:4d:ec:79:b9:e9:
         c4:66:07:b4:2d:2a:f8:c3:02:42:70:22:c8:56:d2:2d:96:01:
         f1:de:ec:ac:e7:9d:70:83:cc:13:70:60:ad:9d:c3:83:ba:b4:
         fb:d9:66:ad:c7:82:37:30:c2:ff:12:a0:4c:b0:a8:0a:6b:54:
         68:cb:2c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:55:42 2026 by rpki-client