Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa
File:                     79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa (raw, json)
Hash identifier:          1hI0rWBN3M8UsCsLNQr2A8qn6OiLTsIF8JdmHb9g+KQ=
Subject key identifier:   EC:E2:9A:02:A0:D4:BC:E5:4F:B3:4A:E3:F1:7A:29:B9:51:6C:7F:41
Certificate issuer:       /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial:       010D0C9F4328584EDC91E60A78F2C4570D359A74
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     26658
IP address blocks:        172.87.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e6:0a:78:f2:c4:57:0d:35:9a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=dcc88ad2-1cc9-4d61-9266-75caca3d7bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d1:91:ec:7a:e6:9a:74:97:ca:a0:9c:18:78:
                    5a:5c:23:e4:8c:1d:42:d3:8c:9d:cc:42:af:9c:f8:
                    ab:b1:60:78:47:e7:c6:2d:69:1a:e4:1e:8f:37:10:
                    b6:76:a5:93:35:b7:6c:5e:b1:57:2a:90:57:6e:80:
                    d2:43:b4:e2:46:6f:b2:64:41:b0:75:ea:92:a0:f1:
                    4b:ad:19:4a:aa:83:26:49:af:ee:5a:52:8e:bf:e2:
                    3f:9e:96:ea:f7:f0:c9:f3:9f:51:d8:f9:65:83:da:
                    2e:f9:5b:57:1b:8d:94:ed:aa:3b:82:04:26:c8:79:
                    de:fd:8b:fd:91:49:5c:a9:68:25:53:0f:4a:84:56:
                    af:92:ec:92:3a:bc:fe:61:84:f1:c2:3c:35:e3:f4:
                    b0:c7:50:58:3e:cd:91:f2:05:63:7c:95:d1:e6:e0:
                    a8:06:68:57:37:f5:4c:3b:13:59:79:03:38:7d:dc:
                    c5:b2:e3:af:65:98:97:0e:d1:23:87:c5:e1:e0:e0:
                    7a:31:09:69:34:ed:7d:d7:08:c2:b6:c1:9f:ce:45:
                    7b:b1:3a:35:dc:96:51:d3:f7:32:df:3d:61:2d:9e:
                    a3:3d:ea:c9:b4:b5:73:9a:8e:58:fc:33:5a:43:89:
                    c1:1b:0a:b2:f4:38:89:10:dc:81:42:76:1d:5a:52:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E2:9A:02:A0:D4:BC:E5:4F:B3:4A:E3:F1:7A:29:B9:51:6C:7F:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl

            X509v3 Authority Key Identifier:
                keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.87.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:42:15:9f:42:ce:a2:91:bb:cf:f0:8c:8c:bf:48:2c:29:33:
         7b:3b:86:88:f4:7e:50:3d:51:77:9e:2f:bf:98:46:b2:95:a6:
         52:54:c8:c4:c3:37:3d:90:f4:5f:d3:5b:b8:9c:2c:6e:fa:09:
         b1:2e:83:39:2e:5d:e1:e6:de:ec:69:a1:b7:b9:8d:32:7d:4b:
         42:51:e1:8e:2f:01:a4:5b:26:3a:18:be:ee:03:61:ab:1d:3a:
         92:ba:c3:d9:84:1e:a6:d1:6a:88:34:0d:8e:54:c8:95:37:f8:
         17:1c:a2:31:67:91:81:ce:ec:01:a0:c6:e8:55:f7:0b:56:de:
         a7:00:99:61:a5:f6:89:d5:8c:a3:ef:f1:9d:95:af:34:21:08:
         da:2e:47:b4:27:56:63:d8:3a:6d:a4:85:db:e9:fd:3c:df:9b:
         62:24:e0:a3:2f:fe:61:47:83:8b:b7:75:47:0d:3a:63:1f:2c:
         ae:1e:36:2b:5d:b8:1e:e3:fe:29:d6:78:02:5f:16:64:b8:1f:
         e9:45:89:ca:42:b4:c8:d7:ee:6e:80:88:63:1b:1f:f9:6c:86:
         92:02:e5:97:07:2f:fe:28:39:c6:78:2d:fa:a7:0f:04:21:34:
         62:10:1f:66:45:12:9a:92:9e:a5:81:6a:b8:1c:f6:25:ab:fa:
         13:05:3c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:30:00 2026 by rpki-client