Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/a838f49d-f401-38c0-8985-7a049f64a168.roa
File:                     a838f49d-f401-38c0-8985-7a049f64a168.roa (raw, json)
Hash identifier:          csJwP+SnsiO+SD2YFYfkTdb2XVnhdfeE5gWKZBo4EJ8=
Subject key identifier:   EC:3B:56:5F:AE:2D:88:54:C7:27:57:B3:7B:E0:2C:52:BF:F7:F1:A5
Certificate issuer:       /CN=512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2
Certificate serial:       010D0C9F4328584EC371CA5E6A6154975A66B9C0
Authority key identifier: 08:DE:39:A7:0E:01:3D:8D:65:B0:9E:22:68:F7:61:28:97:EE:3E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/a838f49d-f401-38c0-8985-7a049f64a168.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     15164
IP address blocks:        205.236.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:ca:5e:6a:61:54:97:5a:66:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=b1cf04a6-7e36-4daf-b3be-196955e1388a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:af:8f:c1:dc:26:ce:d8:70:3c:20:e5:55:
                    59:f9:76:5f:ee:ea:08:d3:ba:d1:f7:e1:19:30:cc:
                    03:0c:06:80:4f:99:af:25:5a:98:c3:66:c6:ba:18:
                    06:5e:8e:e6:ae:29:eb:35:33:e6:33:18:f0:94:76:
                    49:cd:af:f1:5d:30:a5:b0:c2:bc:e2:9b:58:61:6c:
                    50:82:d7:9e:55:c1:54:99:75:51:03:89:20:4c:fb:
                    3d:a5:cd:e1:8f:f7:6b:1c:d5:5a:c8:0d:8b:26:60:
                    8f:4d:5e:39:61:60:94:a7:6e:bf:a7:27:fb:2e:27:
                    36:10:4f:5e:4e:fc:27:c1:f6:ca:9a:e2:3a:39:02:
                    ea:6b:1c:d2:31:44:54:ae:ce:a9:ff:91:1f:0a:d1:
                    e7:c8:f5:44:d3:3d:b4:30:ad:c9:5d:46:fb:24:17:
                    88:06:34:62:5d:f5:e1:eb:31:52:20:db:43:75:9f:
                    75:52:f0:1e:a6:9b:b7:88:b7:b0:d5:f0:cc:c3:1d:
                    a8:03:a8:69:9d:f5:df:19:cc:ed:65:ea:d0:21:4f:
                    69:a8:51:b3:bf:d3:13:b9:bc:e9:bf:e0:c0:ce:e7:
                    80:62:e0:0c:b2:cd:fa:a6:1b:a7:e5:b7:3e:e2:80:
                    01:85:22:38:46:f0:8b:aa:3f:ac:a2:a4:45:b5:bc:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3B:56:5F:AE:2D:88:54:C7:27:57:B3:7B:E0:2C:52:BF:F7:F1:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/a838f49d-f401-38c0-8985-7a049f64a168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.crl

            X509v3 Authority Key Identifier:
                keyid:08:DE:39:A7:0E:01:3D:8D:65:B0:9E:22:68:F7:61:28:97:EE:3E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/512b2783-aa0c-43d5-b61d-4fe2c8a3a3d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:14:54:7f:80:76:c4:b9:8b:10:85:c3:7d:48:67:ed:e2:
         d3:08:78:22:16:a5:6a:b9:64:e9:d0:2b:fe:bf:13:ed:4d:18:
         6b:0b:ce:87:69:a3:31:a1:3d:a8:d1:cf:b0:cd:90:b4:ff:53:
         35:2f:d2:5a:57:84:f4:4f:9a:56:64:e5:ef:e3:1a:78:5d:fb:
         8d:eb:86:b2:6d:37:ef:8c:51:df:b8:c1:40:c8:39:7e:bc:28:
         92:3a:ef:c2:a8:c4:75:dc:49:c1:db:c7:37:1a:6a:fb:8d:23:
         3c:14:d1:d5:d6:f6:0f:26:c7:70:62:cc:3a:95:ab:c5:3e:1d:
         b4:ae:d3:2f:28:60:f6:b4:01:e4:4a:61:94:c4:fe:65:3d:1c:
         1a:72:07:1e:10:2f:07:2a:a5:af:6d:7b:9a:7a:15:58:d7:20:
         95:58:69:92:57:1d:f9:a9:66:ea:37:3c:ce:4a:e1:79:95:ff:
         4f:82:df:7a:15:48:f0:76:b1:c7:9e:1d:e6:df:6a:ff:7f:40:
         f8:db:7b:6d:80:a7:2d:50:68:d8:cc:99:cd:66:25:6d:f5:0d:
         e4:c2:c3:99:33:74:ee:04:60:59:c8:fb:9a:86:2c:f9:bd:52:
         aa:85:d7:cc:05:84:8c:91:97:d2:b6:31:f7:ef:3c:ce:71:a5:
         1e:92:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:26:46 2026 by rpki-client