Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/554b5153-bd14-3fa2-b11e-cd539e6e2916.roa
File:                     554b5153-bd14-3fa2-b11e-cd539e6e2916.roa (raw, json)
Hash identifier:          iU4M2PgKcrYz82vLqk8cueyQs7dcfghE9FHld3ag4SM=
Subject key identifier:   8F:24:E0:20:15:CA:38:F9:C5:2B:F2:7F:92:43:D9:4F:CC:25:7D:B8
Certificate issuer:       /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial:       010D0C9F4328584EC7A1D316DD3FCDA472A85400
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/554b5153-bd14-3fa2-b11e-cd539e6e2916.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     65104
IP address blocks:        199.212.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d3:16:dd:3f:cd:a4:72:a8:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=79b5e287-8ba5-463c-8628-194032be5c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3a:2c:6c:f6:6b:2a:37:f7:63:d8:56:71:c4:
                    1a:0a:15:18:1d:60:52:f3:8e:80:89:65:62:8e:bc:
                    2a:3d:6c:ed:37:24:14:b1:e1:aa:3e:ea:3a:23:ae:
                    fd:2e:8c:1e:f4:86:a5:88:32:17:1d:e4:9e:66:8b:
                    6e:b6:89:d4:be:82:6a:2f:c5:c1:02:f2:50:c1:78:
                    40:b1:d0:dd:33:b1:1d:cb:b2:43:2a:a9:0c:4d:46:
                    d4:85:f6:6d:08:9b:67:a1:c2:6c:1d:df:3d:0b:0e:
                    aa:90:65:f8:e9:3a:8d:38:95:73:03:e2:71:fd:57:
                    57:e6:81:e4:5a:21:26:33:b0:29:04:43:08:35:fd:
                    c7:6f:34:35:86:a6:39:d1:21:ba:d5:b5:12:a0:f8:
                    1d:11:e7:52:71:6c:25:c9:82:b4:e9:d2:b4:61:73:
                    58:b9:a8:de:ef:1d:b6:a1:2c:e4:68:e7:b6:87:af:
                    db:36:c6:14:45:71:28:cc:3c:34:84:2f:29:df:b0:
                    0d:25:d5:2d:9d:20:19:00:6f:f8:74:9a:80:fd:fa:
                    eb:4e:f6:83:3f:03:c1:c7:3f:51:58:ed:94:67:bc:
                    b8:c6:cb:ef:00:53:56:c8:44:f6:85:af:60:58:76:
                    7c:c9:b8:68:b6:e2:5c:d0:7e:90:a4:3c:f6:8f:63:
                    f8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:24:E0:20:15:CA:38:F9:C5:2B:F2:7F:92:43:D9:4F:CC:25:7D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/554b5153-bd14-3fa2-b11e-cd539e6e2916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl

            X509v3 Authority Key Identifier:
                keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:6a:b9:8b:74:36:08:e1:c9:2e:91:a5:7d:c9:46:8a:4c:45:
         ab:2d:89:e9:16:bc:87:41:19:3d:1c:dd:94:e6:8b:18:a5:d9:
         ea:63:6f:68:c7:33:2d:e1:b1:86:75:67:26:30:50:b6:0f:c0:
         e8:5a:07:17:70:53:0d:e2:cc:62:25:12:33:6e:89:0a:ea:3e:
         08:a7:bc:b1:e8:9e:13:9b:aa:72:ad:50:04:fd:0f:d0:58:4a:
         10:5c:cd:be:a3:a1:32:b6:14:5b:8e:85:2e:17:17:68:83:aa:
         9d:50:6b:3f:03:80:0f:dd:ef:61:03:85:37:fd:87:53:05:92:
         59:36:a2:3c:82:7f:bc:eb:92:74:19:f1:e0:9c:1d:ca:7a:9b:
         2f:d0:df:b5:d9:4b:da:5b:75:6b:e7:e9:6a:15:29:0b:43:c8:
         d6:18:3c:e8:5a:eb:7d:9f:a5:b1:f9:44:21:7b:0e:a4:d0:3e:
         b2:81:d4:ce:ab:61:ff:df:28:09:35:ce:4d:e6:6a:14:f1:9d:
         e8:4a:a9:2c:88:50:37:74:c2:00:f7:cf:4d:fb:40:a4:03:0d:
         71:63:eb:83:ec:a5:15:36:18:1d:ed:83:af:ac:0e:9e:5b:97:
         fe:1b:e3:9d:21:75:dc:d6:7b:5d:a0:7f:2a:04:04:a1:0d:fd:
         b4:3f:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 11:48:50 2026 by rpki-client