Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa
File:                     01949cb6-dbef-38e7-b253-ca7fee6dea68.roa (raw, json)
Hash identifier:          NwF7SMDIsRY8clJUCGNbp+GvRs2z05hXgMdPMZrSsyw=
Subject key identifier:   2B:7A:0F:9F:07:71:C1:6C:1C:B8:BA:F3:44:59:93:F3:90:0B:6C:31
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EA79155054AC49EA088C4C180
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11233
IP address blocks:        162.255.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:55:05:4a:c4:9e:a0:88:c4:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=590f30f1-d142-4c80-b8b7-b36af3c4552c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:e1:ec:a9:01:9e:8e:40:35:a5:a3:a3:af:
                    83:69:72:44:8f:69:9a:8d:8b:93:14:d4:fc:6d:43:
                    36:11:4c:09:45:cb:2e:e5:b2:48:0c:b7:95:eb:77:
                    45:30:04:14:de:f4:60:95:37:94:ee:cc:75:e4:bc:
                    69:7f:8e:ca:62:ac:34:70:ad:b5:0b:bc:23:bd:55:
                    2c:41:82:57:3d:7b:90:dc:39:7a:ae:7c:ba:db:71:
                    80:0e:b7:04:14:66:c1:e5:08:d9:50:8d:d0:2e:98:
                    f4:30:0b:96:81:a5:9c:a7:13:8d:33:63:58:50:c6:
                    21:10:f3:d8:57:8a:cb:d4:97:2c:7e:ff:94:5d:b2:
                    0c:73:39:b7:b4:49:c8:26:b7:4f:88:68:37:2e:e3:
                    29:fe:39:22:24:59:12:0a:de:ec:a5:62:ad:1e:eb:
                    79:31:44:60:3e:9b:f8:60:c2:c2:15:f4:d9:9c:fd:
                    f2:4b:2f:2c:99:4d:25:c0:34:d3:1e:86:ea:47:a8:
                    e8:27:19:1e:cf:ad:b4:c5:01:34:a7:62:54:77:4d:
                    1e:73:44:93:08:9b:5d:b6:32:4e:5d:96:45:c0:04:
                    d7:32:b9:da:28:46:c0:28:4c:8c:c3:10:c1:17:b0:
                    56:77:a7:9a:a8:dd:4d:6e:68:10:2d:04:a7:af:c8:
                    21:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7A:0F:9F:07:71:C1:6C:1C:B8:BA:F3:44:59:93:F3:90:0B:6C:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e2:fd:c7:ab:24:b0:33:cd:31:c0:23:9a:d7:92:3e:78:d0:
         d0:63:06:d9:9e:52:46:38:42:8b:6d:4d:6e:41:2f:22:a6:82:
         e6:77:80:be:1a:d3:ff:25:ba:6b:17:e8:62:4e:c9:c7:70:18:
         34:c1:7a:97:e8:fe:54:64:9e:bd:ce:93:e3:1d:24:ee:80:ac:
         5c:76:f8:82:c6:36:de:1f:a0:ec:70:ee:70:cf:bf:24:65:02:
         36:de:b5:d2:44:f0:36:1f:bd:da:68:b0:79:d9:a2:ee:b9:52:
         cf:c1:9c:03:68:01:27:db:20:93:ce:b1:1c:6f:b7:49:36:59:
         a5:58:48:16:dd:b5:f0:6a:0c:1b:5f:6c:52:6c:87:8f:f4:f7:
         79:57:7e:1b:6c:b3:ca:1a:36:ca:32:0d:a6:9c:a1:c8:69:53:
         f9:24:b6:ba:ec:03:63:53:76:38:67:a3:8e:76:d9:9d:63:9e:
         9f:1b:f0:1e:cf:d3:59:ea:81:ff:33:0e:70:8c:6d:f2:bc:6e:
         83:01:ae:08:83:f5:8a:fc:a8:6a:86:ef:71:7d:eb:be:7e:2f:
         66:36:46:f8:7c:da:d3:ed:11:30:47:ea:c4:20:6c:4f:79:ed:
         c1:38:41:74:3c:12:cc:74:bc:f9:94:3f:d8:b6:cf:1d:ac:1a:
         2d:8f:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:31 2026 by rpki-client