Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/56626dda-23f2-32f5-b134-775c438da07a.roa
File:                     56626dda-23f2-32f5-b134-775c438da07a.roa (raw, json)
Hash identifier:          ovyFWO9nicgJOPgyOnR/Q9YjvJcQKcTLxR/6Xjig9IY=
Subject key identifier:   2B:9A:A1:6B:CA:44:E6:C5:B9:D9:2F:BC:9A:EC:65:8D:20:52:EC:39
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584EA7912C459BCCADE1967CCE40
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/56626dda-23f2-32f5-b134-775c438da07a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10794
IP address blocks:        171.159.20.0/22 maxlen: 22
                          171.159.20.0/24 maxlen: 24
                          171.159.21.0/24 maxlen: 24
                          171.159.22.0/24 maxlen: 24
                          171.159.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:2c:45:9b:cc:ad:e1:96:7c:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2ae462da-7040-41f7-9143-bb6fed9f948d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:29:b2:fe:49:8c:22:07:2a:61:16:13:95:
                    47:0e:95:99:7f:c1:b6:8f:93:7a:dd:a2:2c:a3:e7:
                    4f:0b:8f:9d:28:53:f1:e5:95:2f:ff:39:ca:39:70:
                    e3:4b:7f:3f:f3:4a:4e:fa:ed:15:66:b0:3f:ae:92:
                    1e:fc:3c:6b:c3:c9:97:c2:86:40:96:84:a4:69:c3:
                    9e:0b:4b:58:62:13:b9:ae:40:1e:54:19:26:92:1d:
                    79:53:04:89:ab:1e:62:c4:e9:8e:75:ab:f1:6f:9e:
                    9d:e9:c5:ed:45:7d:68:c6:ba:23:8c:59:38:49:f2:
                    2b:32:5e:f7:74:37:e6:11:26:57:5a:73:02:93:6c:
                    ba:35:b7:a7:8c:61:1a:6e:7c:8e:0b:3a:c0:ba:3c:
                    b3:cb:0b:35:c2:b3:72:63:ae:79:70:11:2c:2c:c2:
                    a9:26:2f:e2:5a:a4:34:c7:4a:8b:5a:9a:0d:ad:18:
                    53:2a:28:b5:3d:9f:d7:fc:f0:7b:47:b0:9a:7f:2e:
                    b2:0c:e4:44:54:10:31:5f:32:f0:e6:5a:03:65:9b:
                    3f:70:41:5f:42:1d:4a:2c:84:b6:83:38:2f:92:3c:
                    64:ef:0a:7d:cd:83:74:9e:c6:b5:bf:fd:1c:cc:02:
                    c7:ac:be:da:7c:a6:4b:47:35:0c:6a:84:7c:85:e9:
                    04:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9A:A1:6B:CA:44:E6:C5:B9:D9:2F:BC:9A:EC:65:8D:20:52:EC:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/56626dda-23f2-32f5-b134-775c438da07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.159.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:56:df:75:29:16:a3:44:93:ab:ff:fb:66:8b:5c:cb:88:72:
         27:3c:4c:17:ee:64:3b:5b:bf:df:18:d7:c6:c1:8c:5c:4c:20:
         75:ef:4b:74:2b:4c:38:85:64:0e:30:8a:e9:37:ea:4e:e9:2b:
         45:f1:8b:d6:58:69:a1:0f:25:b4:72:ac:89:a6:e6:0d:15:18:
         51:e9:fe:0a:2a:44:f9:ca:9c:1c:79:0f:ba:45:f8:13:f9:b4:
         04:23:14:00:35:a3:b0:fd:6c:0b:26:66:0d:ec:80:6d:41:cf:
         38:64:c3:f2:40:53:18:66:17:f0:24:41:62:8a:20:82:75:cb:
         e3:c4:b3:96:f5:c8:16:c3:8d:13:37:6e:38:a7:65:6a:b7:9a:
         e6:66:ba:15:26:2d:65:2e:e4:ac:6d:13:e2:01:60:bf:9f:69:
         11:51:ca:60:fc:f6:8c:c5:5b:6b:c6:41:fc:55:a4:d8:0e:3f:
         df:55:49:66:06:ad:09:7f:8c:a1:55:5f:83:d0:3d:c0:84:a2:
         1a:cf:89:d1:48:fd:46:0e:f2:37:c6:6d:b8:d9:a1:5f:28:91:
         e9:f9:af:4f:4a:8b:71:bf:e6:47:3d:b5:0c:ee:09:c8:ad:5b:
         c8:58:bc:dc:a7:ef:0d:eb:97:10:3e:a7:36:1f:1a:d0:c4:5a:
         e0:da:08:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:53:33 2026 by rpki-client