Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/540a2df3-0215-38a8-a937-7972678893ab.roa
File:                     540a2df3-0215-38a8-a937-7972678893ab.roa (raw, json)
Hash identifier:          aqQB9GZWtgdEYxXRf3LkT0MLbPkOui75ZuF9zSTNvHI=
Subject key identifier:   86:21:68:01:51:68:F1:FB:08:64:AB:01:F3:9E:AA:DC:4D:EC:9E:3F
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF2349BFC20DF3CEC11C9140
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/540a2df3-0215-38a8-a937-7972678893ab.roa
Signing time:             Fri 31 Jul 2026 18:26:04 +0000
ROA not before:           Fri 31 Jul 2026 18:26:04 +0000
ROA not after:            Thu 29 Oct 2026 18:26:04 +0000
asID:                     81
IP address blocks:        192.101.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:49:bf:c2:0d:f3:ce:c1:1c:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:04 2026 GMT
            Not After : Oct 29 18:26:04 2026 GMT
        Subject: CN=978de11e-18b5-4e9a-884e-b4a0aebc5b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d1:f2:a8:19:46:b0:d6:61:e9:18:46:0d:45:
                    93:03:5d:7e:55:a1:85:ab:85:6a:f6:f4:6c:b3:53:
                    b0:30:5e:b8:fb:1f:93:d0:80:bf:1c:69:3d:33:7e:
                    74:7b:9e:04:06:9f:be:71:ff:6c:c3:db:40:2a:df:
                    30:bf:54:63:9d:81:48:58:9f:28:d9:dd:b7:5b:52:
                    5f:ac:f0:a9:5a:32:4d:64:f5:d2:68:80:1f:0b:88:
                    68:a9:38:b6:9c:0f:70:97:aa:64:a2:77:3d:b0:aa:
                    52:d3:0c:94:f1:21:84:90:ce:32:33:e6:5b:b3:fe:
                    68:17:40:16:1d:33:3d:da:f6:12:f7:94:41:80:59:
                    77:2e:cb:5b:0f:ba:20:6e:90:18:41:2d:d9:19:4f:
                    ca:79:a2:8b:a3:70:93:f7:2a:84:be:fe:cb:4d:00:
                    70:3f:aa:90:d3:a0:6e:73:e2:ce:9a:78:fd:98:44:
                    fe:b6:ca:ee:61:d6:c1:6a:61:16:b2:83:35:ca:9b:
                    1c:82:e8:e7:e4:99:26:5d:b2:5f:6c:af:b1:af:56:
                    a9:9b:b3:26:fc:2b:2d:a5:2d:6e:a2:5b:d4:f9:b7:
                    d4:72:3c:fb:93:60:d5:a8:75:80:9d:01:92:0c:cd:
                    28:9f:9d:2c:95:00:37:08:fe:36:cd:c9:44:b0:e7:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:21:68:01:51:68:F1:FB:08:64:AB:01:F3:9E:AA:DC:4D:EC:9E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/540a2df3-0215-38a8-a937-7972678893ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:2a:8a:3a:d1:94:0d:e8:28:75:a3:0e:11:d9:6f:da:39:c5:
         b8:b2:bd:44:c0:91:71:62:4d:e0:0a:07:5c:7e:0c:b4:17:cc:
         3c:25:af:e9:b8:71:82:75:28:ba:a5:90:48:d7:40:51:91:2e:
         37:3a:b4:cc:e1:d1:be:8a:dc:14:7f:c3:cd:cf:9f:92:f3:47:
         02:5c:31:61:e6:33:e4:ae:bc:59:6c:f2:f2:01:c6:ea:77:c8:
         b4:5c:59:a3:4a:7b:72:34:94:fa:18:cb:e6:07:79:28:e6:ca:
         ba:a7:52:1c:28:0b:6b:ce:d7:d1:5a:21:b4:56:12:f4:7f:a0:
         f4:cd:10:2c:d5:5f:0c:2e:84:2b:a4:70:01:8b:da:43:ac:9b:
         0e:87:29:13:f5:fe:8f:a7:bc:33:97:b9:30:78:4a:87:f5:ef:
         60:62:bd:f2:c3:78:e3:d9:8e:cc:d9:78:fa:7e:92:0d:3e:05:
         55:9a:a5:dc:02:1b:e6:da:88:bd:b6:f1:9a:d8:c8:7e:ab:c3:
         a6:0f:cf:16:cb:94:df:16:89:1d:36:77:20:9e:4c:30:23:c2:
         2d:99:80:5e:e1:ef:57:a9:27:de:91:ce:3b:1e:1f:05:7c:32:
         eb:b7:fb:41:eb:14:b2:a6:e3:de:b2:2d:57:d7:88:1c:87:d9:
         3a:cb:55:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:01:48 2026 by rpki-client