Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/0e536322-fcad-3263-a4f7-bfab2dd5c1b3.roa
File:                     0e536322-fcad-3263-a4f7-bfab2dd5c1b3.roa (raw, json)
Hash identifier:          lKDgvkYi8776lLtATlOIN4hnMFMhjV6+JULg7X33bV8=
Subject key identifier:   F7:F2:18:CE:A8:15:59:76:C2:F7:BB:85:5E:3F:2A:63:F0:44:3F:55
Certificate issuer:       /CN=53ff129b-845f-449d-8e32-2b24ecbefea4
Certificate serial:       010D0C9F4328584EDC92124221505C82BDA40780
Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/0e536322-fcad-3263-a4f7-bfab2dd5c1b3.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     35923
IP address blocks:        199.65.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:12:42:21:50:5c:82:bd:a4:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=8d69a70f-9fdc-4173-a7d2-1b52e3423783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:2e:58:42:da:dd:8f:29:77:e4:34:80:50:
                    fe:f6:ef:06:2d:f5:43:61:2e:c5:be:5b:5d:4e:3b:
                    3b:50:50:22:20:ef:9e:73:49:e7:af:29:c2:9b:0e:
                    03:8f:b1:7b:8e:d7:46:04:c9:89:b2:54:87:cc:72:
                    da:1d:82:c0:d3:f8:47:9f:42:c6:ec:b3:81:f6:d6:
                    e9:bf:10:26:93:11:59:37:34:81:0b:01:0c:64:d2:
                    07:5b:fc:cc:5e:4c:9b:b3:a0:34:df:72:c0:99:3f:
                    de:05:93:c2:7e:ea:3e:77:8d:0d:c7:18:88:0b:38:
                    59:52:6a:11:43:57:f0:e3:c7:5e:c5:fb:ee:59:3c:
                    b2:1e:40:0e:43:a1:cb:49:27:da:76:49:9b:91:c5:
                    0d:4e:a4:0f:46:aa:0a:4c:38:e2:d5:33:eb:1b:22:
                    e9:6b:d6:c1:d0:be:71:ca:c4:94:09:67:4e:98:d0:
                    74:d1:64:5b:f8:ee:7f:a3:75:2d:b9:da:ce:9d:05:
                    dd:ec:9d:a4:27:af:2d:30:7e:46:40:af:b3:0e:4b:
                    af:29:09:14:32:f3:12:b0:99:e6:e7:52:21:8d:bb:
                    05:ed:34:86:d4:89:4c:0b:d4:52:7d:f5:7a:b2:a3:
                    87:42:30:cb:dd:84:25:e6:be:15:a9:64:f0:f3:59:
                    18:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F2:18:CE:A8:15:59:76:C2:F7:BB:85:5E:3F:2A:63:F0:44:3F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/0e536322-fcad-3263-a4f7-bfab2dd5c1b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:55:d7:47:a3:05:55:9c:7e:a3:02:e4:7f:dd:0a:d1:05:37:
         78:55:18:30:28:2d:28:f9:61:0e:53:fd:67:62:ed:c8:cd:97:
         6b:40:30:08:ae:89:b5:7e:70:34:1a:ed:a0:a6:73:ec:36:df:
         f7:20:cf:15:c5:27:4a:8e:e5:6a:a2:39:69:b3:1b:c3:85:6a:
         59:06:38:ac:9a:d3:f1:50:87:dd:01:fd:99:e6:aa:e0:94:5b:
         8e:1c:8c:84:e9:91:fb:cf:93:eb:b8:53:79:52:3d:be:09:70:
         ed:ac:a1:cc:3a:e6:d0:eb:7a:46:7e:c1:7d:14:65:6b:59:7a:
         c2:70:e2:ba:ec:7b:23:80:82:bc:fc:25:ce:43:9f:c0:af:e3:
         5a:07:b1:27:c1:ee:c1:a5:55:e6:16:89:2f:71:c7:42:62:80:
         ce:57:89:18:e6:79:ca:99:85:22:87:2f:e1:8c:89:16:78:f1:
         b2:b3:a6:1e:e2:9e:8d:97:b0:2e:52:e0:0e:a3:b8:84:8d:7a:
         4d:f8:38:19:8e:61:24:9a:b0:28:dc:44:73:ad:ec:51:35:63:
         4e:a8:f4:d8:9c:b2:b5:ca:3a:68:10:8a:91:95:e2:c9:63:1f:
         62:7a:64:71:29:26:0b:4d:02:41:b4:0e:f9:95:44:64:d4:fa:
         39:aa:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:54:38 2026 by rpki-client