Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/cee38cc1-1bbf-31b1-97a2-3ad2db0e8d69.roa
File:                     cee38cc1-1bbf-31b1-97a2-3ad2db0e8d69.roa (raw, json)
Hash identifier:          WHZnSs2U3VWUtqSdAiUAGQHIyV+K+tfSlcgwPL+FwPA=
Subject key identifier:   FC:A1:A6:6E:04:A6:27:9C:22:54:D7:0A:D5:90:D0:2D:9F:CA:8F:5F
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584E2DB9CEC1508FCCF1E24AB500
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/cee38cc1-1bbf-31b1-97a2-3ad2db0e8d69.roa
Signing time:             Mon 15 Jun 2026 09:54:16 +0000
ROA not before:           Mon 15 Jun 2026 09:54:16 +0000
ROA not after:            Sun 13 Sep 2026 09:54:16 +0000
asID:                     31898
IP address blocks:        153.57.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:b9:ce:c1:50:8f:cc:f1:e2:4a:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Jun 15 09:54:16 2026 GMT
            Not After : Sep 13 09:54:16 2026 GMT
        Subject: CN=5ed67d81-1497-4e47-9256-8cafdce35a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c4:68:a7:af:5b:c7:5c:7b:e7:75:7a:90:4b:
                    f8:fd:32:16:5d:2d:53:ab:cd:5f:b1:87:1f:19:e7:
                    20:37:6b:22:4c:2c:30:a5:79:c7:07:a2:c1:ff:92:
                    d9:81:b8:d4:75:52:7c:bd:00:a0:32:b4:b7:6c:b6:
                    4d:b2:f3:ce:04:88:42:a3:05:9e:51:65:6d:68:af:
                    a6:ac:97:43:78:ff:d1:86:14:84:45:2b:1b:7f:5f:
                    37:74:9f:d6:91:1e:67:ad:fc:84:6d:15:1d:36:0a:
                    dc:20:e3:5c:78:01:4e:32:5a:be:3b:e2:22:1d:32:
                    3d:9b:43:51:94:d4:cb:6b:f3:90:78:ac:c6:01:6c:
                    43:97:15:86:b0:cc:bd:a3:03:bc:9e:33:65:69:72:
                    60:73:62:2d:ee:6a:1d:92:81:12:3e:ef:9f:3c:15:
                    da:9c:cc:04:35:62:58:2d:c0:c1:7c:67:7c:65:94:
                    11:0d:82:ba:6f:18:16:e7:fd:09:28:c8:b9:b8:15:
                    ae:67:05:53:f4:bb:05:1e:4c:e5:63:01:e9:23:fc:
                    38:5a:84:38:7c:43:b6:c8:11:ea:6f:7f:bc:ec:70:
                    43:d0:1a:86:a7:d0:39:fa:b4:4d:70:c4:d5:9c:2a:
                    b3:fd:a8:05:66:d0:4e:c3:78:29:3a:af:3b:0b:dd:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A1:A6:6E:04:A6:27:9C:22:54:D7:0A:D5:90:D0:2D:9F:CA:8F:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/cee38cc1-1bbf-31b1-97a2-3ad2db0e8d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.57.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:40:21:06:f5:6f:a1:be:27:e2:cd:f4:dd:4f:11:78:51:46:
         d1:f6:41:2b:53:61:65:5e:5e:df:34:82:54:70:2c:3c:ef:70:
         d9:0b:79:cf:9f:67:7d:d8:f9:31:7e:cf:80:eb:3b:f3:48:00:
         1b:10:99:ca:de:9d:22:ed:ed:af:98:67:06:0a:7a:ff:92:92:
         c2:33:55:17:a3:36:42:a0:f6:17:7c:63:4a:01:34:9e:f8:74:
         2a:98:2a:42:9e:5a:d2:9a:3a:19:bb:2e:0b:a9:1e:4c:4b:f5:
         c6:00:7d:71:73:ab:38:57:ad:05:49:c6:79:f6:3b:35:69:cc:
         1e:1e:69:ca:24:81:2b:e9:e9:94:22:05:82:6e:96:58:ea:ff:
         b1:9b:ef:6b:94:ce:c4:15:ba:3d:37:8e:bb:c3:2e:5a:79:5e:
         43:f8:12:d9:ef:b9:d8:7c:34:6f:5e:5d:bd:9c:7f:e6:6b:ec:
         6d:9c:93:25:81:92:3d:aa:c3:46:51:ab:fc:d7:07:b8:2c:46:
         3f:cb:4b:50:56:cb:7e:7b:f3:58:41:3e:f9:7f:a7:41:a0:6f:
         92:a2:ba:59:dd:2a:d5:ad:37:96:21:9a:d7:f7:b3:91:5d:af:
         3f:bb:71:c3:57:c3:22:3f:7a:cb:85:d8:34:60:4a:8f:e6:c1:
         93:e8:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:20 2026 by rpki-client