Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/53d10511-49b0-3916-a772-5ac00211174c.roa
File:                     53d10511-49b0-3916-a772-5ac00211174c.roa (raw, json)
Hash identifier:          krGLNAbmkpLkINCgz2tK8IMzUDSEJ9i+ovjjjBeUysU=
Subject key identifier:   4C:95:E9:C9:CB:25:DF:47:23:F8:70:68:C5:7F:14:4D:07:1A:9D:BC
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584EAFA1901B70C93394AD927F00
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/53d10511-49b0-3916-a772-5ac00211174c.roa
Signing time:             Fri 31 Jul 2026 22:40:30 +0000
ROA not before:           Fri 31 Jul 2026 22:40:30 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     25870
IP address blocks:        149.112.136.0/23 maxlen: 24
                          2602:f777:500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:a1:90:1b:70:c9:33:94:ad:92:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Jul 31 22:40:30 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0879d323-ee3c-4065-976b-7fe0f8de0e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:33:99:d2:46:75:ea:fa:f3:7d:8f:a1:46:
                    50:8c:dc:a1:60:04:7c:78:12:32:30:a5:bc:32:67:
                    6e:35:6c:4f:c9:f2:78:85:c9:71:13:50:f0:bb:ae:
                    45:7a:72:82:19:49:8d:21:8e:75:64:d8:4f:5e:0f:
                    8a:45:79:c5:b2:f3:a7:dd:3a:31:d7:b6:1f:d0:e7:
                    a7:9c:33:3b:0b:f6:df:26:17:98:5c:6f:07:d5:73:
                    0d:da:2c:19:37:cd:6a:9e:31:81:8e:36:70:9c:a8:
                    4f:6b:b1:93:be:31:51:ce:24:23:24:ca:e6:c3:0c:
                    32:70:3b:c2:2b:5c:ae:be:b4:9d:34:7c:ff:82:5c:
                    73:54:35:5d:78:67:91:92:57:5f:33:51:c9:76:e2:
                    56:8c:73:1e:7c:30:40:dc:62:27:f6:8c:11:a7:3a:
                    d2:2f:72:63:cb:bf:2c:8b:40:99:8a:d1:8b:64:a9:
                    36:15:f5:d0:4f:03:25:0e:77:4c:80:c9:63:a6:bf:
                    72:dd:65:14:19:2d:b8:c8:17:c3:2b:21:3d:52:1a:
                    99:12:8b:63:48:95:cd:6a:65:80:14:80:dc:5e:13:
                    50:a4:cf:a3:9b:a0:11:f7:e4:c4:2c:04:87:08:5e:
                    c5:a1:86:82:38:be:cb:8b:77:83:b8:e2:2e:67:80:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:95:E9:C9:CB:25:DF:47:23:F8:70:68:C5:7F:14:4D:07:1A:9D:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/53d10511-49b0-3916-a772-5ac00211174c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.136.0/23
                IPv6:
                  2602:f777:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2c:1f:99:96:de:df:c4:ef:ed:57:e0:b3:bc:6f:83:47:11:
         1c:e8:35:75:c1:33:71:7e:64:c7:3b:03:9d:b8:b7:fa:95:16:
         1b:ae:d4:9b:8a:02:e5:00:b3:b8:e8:a1:19:7f:c3:88:03:da:
         32:47:35:e9:a2:74:10:1f:ef:aa:72:ae:18:b4:72:6d:3b:b9:
         d3:c6:35:9c:95:ac:91:f3:be:1c:94:39:a0:15:04:b0:42:9c:
         df:6d:91:38:61:e8:d7:64:ad:37:9a:6b:c4:e1:c5:c9:63:e4:
         1a:ac:0a:4b:60:ad:da:33:77:c6:59:0a:ef:58:d4:f5:cc:4c:
         88:8f:ed:85:19:89:ce:5a:4d:c4:96:e9:8a:4a:3b:70:2d:c3:
         8e:5d:9f:58:0a:8e:9e:ad:d6:d0:20:83:79:1b:dd:b1:3e:df:
         35:7c:05:38:6d:8f:55:0b:cf:22:63:41:d9:89:a7:f6:d4:5b:
         8c:23:94:71:68:2f:37:95:ca:71:84:e5:79:a7:6e:2a:69:70:
         8b:65:03:6e:3d:82:cc:9e:ed:fc:1d:79:55:6b:71:6e:c8:d7:
         95:51:c0:f0:9f:79:17:0f:14:04:3e:78:80:a6:64:7e:ee:25:
         c9:6f:04:31:a4:f6:1c:12:66:98:f7:ec:67:9f:9a:88:a6:b6:
         34:a3:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:54:24 2026 by rpki-client