Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a1758f69-3d80-384d-ac5c-ba03439080f8.roa
File:                     a1758f69-3d80-384d-ac5c-ba03439080f8.roa (raw, json)
Hash identifier:          Edt+5mEbF2FUTWSHdCZBo/Ath+snlFdlSCligGaDezE=
Subject key identifier:   5B:5A:88:60:32:BA:F7:1C:63:22:44:7C:A7:62:D0:38:A9:DC:F0:8E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF2350175A08507764ECA600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a1758f69-3d80-384d-ac5c-ba03439080f8.roa
Signing time:             Fri 31 Jul 2026 18:26:07 +0000
ROA not before:           Fri 31 Jul 2026 18:26:07 +0000
ROA not after:            Thu 29 Oct 2026 18:26:07 +0000
asID:                     81
IP address blocks:        192.101.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:50:17:5a:08:50:77:64:ec:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:07 2026 GMT
            Not After : Oct 29 18:26:07 2026 GMT
        Subject: CN=10d710f3-4416-4b69-b4ae-c0e6515c54a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:d7:0c:dd:fc:ce:0a:c6:88:3f:05:40:c5:
                    3a:14:9b:f7:9f:cb:1a:dd:a1:31:4b:54:be:c3:69:
                    e6:71:3b:3e:98:c8:bd:a6:dc:1c:1a:e3:86:4b:69:
                    29:22:31:03:f1:19:88:f5:de:d9:50:23:0d:cf:81:
                    cc:a2:31:63:01:14:81:4c:e4:26:c7:26:9f:b9:34:
                    e1:c3:98:9e:e6:33:be:22:65:0c:d3:0b:71:40:4a:
                    5a:cd:05:eb:bc:f1:59:ff:15:e1:e6:7f:4f:8a:3c:
                    54:23:1a:2e:28:69:dd:ea:6f:04:7c:6f:f4:25:27:
                    aa:bf:26:d7:dd:97:37:ce:32:9e:82:21:e8:ca:c0:
                    2b:52:df:f1:fa:a7:e7:e5:3b:ad:b5:cb:e5:ef:cd:
                    d0:68:be:b7:27:4f:72:2d:50:8b:5e:4c:9c:52:55:
                    9e:a9:84:4e:3f:a9:74:16:1e:b2:3c:e7:f0:1e:2d:
                    2f:8e:36:ec:36:7b:5a:3d:8f:55:fc:0e:cb:8b:b1:
                    34:43:92:1b:25:88:16:13:00:b7:6e:5e:9f:ca:40:
                    24:2c:4c:92:c2:5d:65:61:0c:22:75:5d:b2:28:c6:
                    15:49:d9:2e:61:1d:99:3b:d6:4a:8d:c6:0c:04:46:
                    68:87:ea:0d:70:54:34:e8:1e:3c:09:a8:bf:fe:eb:
                    c8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5A:88:60:32:BA:F7:1C:63:22:44:7C:A7:62:D0:38:A9:DC:F0:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a1758f69-3d80-384d-ac5c-ba03439080f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:05:9f:80:6e:b9:bc:aa:fd:91:ff:f2:fd:f0:1a:06:c0:
         27:94:b9:38:3e:d3:8c:6d:ae:03:11:5c:ab:cf:fd:1e:90:5d:
         7f:f5:a8:60:84:94:2d:1e:84:c3:cd:73:35:5c:b5:bd:37:e4:
         d0:71:a4:c4:2f:c4:ab:c9:1a:3a:60:3f:70:5a:b4:a0:63:7e:
         bb:63:35:d6:06:04:46:3d:0c:9c:c4:8e:57:3f:53:cf:63:b3:
         7c:b2:ef:c0:d1:55:7a:27:5f:29:08:f6:a4:30:3c:0e:7a:21:
         6a:61:28:dd:b7:d4:e4:ad:d5:16:f6:9e:20:9a:3a:1e:9d:27:
         fb:e8:56:54:4e:be:63:df:a6:b8:f5:94:e3:f7:0f:3c:d2:aa:
         a3:41:a3:f5:10:6e:84:b9:10:90:a0:cc:b8:b4:16:68:21:ce:
         87:4c:5e:33:3b:af:cd:88:d6:2a:ca:1a:25:36:25:22:0b:20:
         d6:de:b0:e6:7e:6e:50:b7:36:8c:f2:59:63:8c:3e:04:2a:bd:
         62:ce:de:6a:ab:95:86:e1:48:58:45:a3:ad:5b:76:8a:35:e8:
         bb:f8:2b:ba:f8:1f:94:69:47:51:b8:2f:b2:60:9c:bc:d3:60:
         fb:57:56:43:69:65:35:11:02:06:1b:62:90:45:3a:26:9c:12:
         a1:f3:e4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:23:33 2026 by rpki-client