Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c726776b-2349-36af-bfe5-8f8145fc0129.roa
File:                     c726776b-2349-36af-bfe5-8f8145fc0129.roa (raw, json)
Hash identifier:          Qwr0X3F1QxNmzTJ5lGyqay/sfGRYbbDMrcQ6UZCeOfI=
Subject key identifier:   95:69:60:34:18:CB:A0:6A:5B:4E:7B:0C:11:83:90:F6:34:AD:DC:E6
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584F03A793BC93B6592A77B296E0
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c726776b-2349-36af-bfe5-8f8145fc0129.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     6334
IP address blocks:        151.193.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:93:bc:93:b6:59:2a:77:b2:96:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=b7973f60-080b-4232-8195-dd058e4cac3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:8d:ee:d9:85:ed:b1:cf:d8:2f:e4:a2:d1:
                    23:8c:cd:39:da:98:c9:11:d4:26:04:e2:5e:94:01:
                    d2:77:74:80:2a:a7:37:48:8c:0c:6f:cc:b8:78:75:
                    23:00:32:20:77:f3:4c:00:2d:2d:fe:ff:14:b3:2a:
                    95:9c:20:72:e9:79:a2:ea:f9:54:fb:b4:c8:d5:60:
                    98:4c:0d:aa:00:7b:6e:e5:75:2d:db:20:9b:ea:e1:
                    5d:97:b6:72:bc:9e:41:b6:02:f5:37:d3:01:34:d6:
                    a0:17:5a:da:6e:1b:3b:73:e5:ba:f3:25:f6:f6:cb:
                    f7:24:60:6a:64:d9:43:03:dd:36:98:75:d2:8e:e9:
                    00:b9:5b:f9:58:88:81:66:92:3e:47:73:6b:06:08:
                    82:31:0f:5d:e3:b3:bc:a5:d3:47:2d:65:22:40:54:
                    31:29:4f:19:90:1e:0c:44:b0:a2:ce:20:ee:34:6b:
                    c2:40:8a:6a:b1:43:6d:2b:34:1b:e4:82:6e:af:ba:
                    78:c5:cc:4b:a6:87:da:f0:ee:1a:31:c1:ab:ab:3a:
                    64:7a:89:ec:e5:1a:30:f1:68:d3:cf:a1:26:49:72:
                    66:60:1c:8b:26:df:36:ea:c5:34:4e:57:3e:42:c0:
                    1e:82:40:a3:c8:47:19:52:99:13:0a:12:63:74:0f:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:69:60:34:18:CB:A0:6A:5B:4E:7B:0C:11:83:90:F6:34:AD:DC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/c726776b-2349-36af-bfe5-8f8145fc0129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:00:d5:dd:85:38:23:d3:74:f5:7f:09:de:c6:21:96:b9:9e:
         93:69:1b:3b:80:8d:2f:3a:5a:86:18:47:30:e6:68:fa:85:f4:
         d7:b7:e9:f6:f9:73:6f:36:02:be:9c:18:87:e8:0c:b5:a4:bf:
         a4:65:fc:76:5e:ad:64:e3:7e:2d:19:9b:aa:8a:a5:23:dc:f4:
         9f:ac:a3:40:36:bd:48:00:13:51:9f:fb:d7:06:a8:ea:16:14:
         6c:33:d9:20:4a:ed:72:b4:6b:21:f2:23:3e:24:0b:5c:d1:b9:
         3d:be:07:66:eb:ac:6b:f1:9d:a1:78:22:8b:ca:93:5d:fe:e3:
         64:9f:b0:bc:8c:e1:ab:56:b3:a1:4d:4c:3d:c0:7f:89:af:81:
         e8:4e:7f:32:36:4d:3e:04:7e:c4:51:71:ff:22:1e:28:dd:0a:
         0b:94:53:02:a7:02:dd:42:7c:6b:d8:3c:50:cc:de:9a:cb:72:
         cb:06:b4:03:a2:c1:01:f2:fe:9c:84:ea:f9:df:94:d6:6b:02:
         6b:9e:ae:e2:8b:84:a0:79:46:9c:71:06:2c:9a:7d:9c:0d:e3:
         46:9d:cd:0c:11:de:ba:47:66:cb:aa:9f:b7:84:d5:a0:a3:2f:
         fb:9f:73:22:30:74:21:4c:a4:57:15:26:55:45:1a:3a:7d:53:
         fe:05:ac:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:10:43 2026 by rpki-client