Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0db49399-0eda-38cf-87cd-06dcd4c1ba1b.roa
File:                     0db49399-0eda-38cf-87cd-06dcd4c1ba1b.roa (raw, json)
Hash identifier:          MAadANFgWMvPRXrZHflYzGVnCxESusxlFo3pVDRi5fw=
Subject key identifier:   78:73:59:0B:DD:74:F3:3C:1F:BA:89:AE:64:1F:8C:FC:E6:CC:79:A2
Certificate issuer:       /CN=d57d789e-7c0e-4086-93e5-04d300453dae
Certificate serial:       010D0C9F4328584EA7965DCC536DD5CCE3D3D640
Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0db49399-0eda-38cf-87cd-06dcd4c1ba1b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        192.131.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:5d:cc:53:6d:d5:cc:e3:d3:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eb711310-f0f5-4c95-9c72-83fcb962a875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:0b:a3:6f:59:e8:11:a2:89:31:49:b5:14:
                    0c:f7:46:94:00:8b:23:bb:2b:bc:a1:a5:11:75:84:
                    7f:79:28:38:31:55:8e:d6:b4:71:41:97:d8:b1:b6:
                    bd:cc:2f:57:ef:7e:d0:de:99:76:40:68:aa:05:33:
                    f7:e8:29:34:99:cc:b9:e9:f2:a1:3b:3b:1e:70:c3:
                    13:fb:34:5a:bc:35:c8:69:46:50:7c:b0:95:a6:13:
                    ed:ef:34:e5:f6:88:3e:19:1b:a2:2e:39:3a:db:c4:
                    2a:8b:97:f3:8b:c2:8e:54:0f:bb:2e:cb:b9:1d:8b:
                    c1:73:69:ba:66:7d:33:42:53:1d:48:09:82:11:30:
                    bf:32:f9:93:fa:8b:4b:cc:ed:37:f7:77:60:13:1a:
                    6f:87:c2:00:01:39:be:88:eb:08:6d:d6:87:78:50:
                    20:e3:60:a4:27:1b:87:22:df:d5:fc:62:e7:c4:ca:
                    f5:f6:93:a8:97:58:26:18:d5:87:79:00:a3:fa:a0:
                    94:4e:d2:21:21:0e:0a:00:4a:77:ad:51:e6:5d:3e:
                    d8:2d:36:c7:ea:59:83:b7:f2:b9:c0:a1:25:d6:45:
                    7d:71:06:95:de:29:67:f9:04:9c:15:93:93:e5:cc:
                    53:02:75:a3:b9:05:8f:67:4b:1a:3f:6b:d4:00:0a:
                    b0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:73:59:0B:DD:74:F3:3C:1F:BA:89:AE:64:1F:8C:FC:E6:CC:79:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/0db49399-0eda-38cf-87cd-06dcd4c1ba1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl

            X509v3 Authority Key Identifier:
                keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:51:da:8f:60:8d:8d:b5:48:b3:c0:4f:79:87:12:25:56:db:
         8c:b3:1b:10:1f:a8:ad:45:35:5a:bd:fc:4e:51:79:22:7e:ce:
         21:80:43:4d:6b:cc:72:fb:52:ba:6e:4c:64:d4:73:a5:97:6a:
         b5:15:02:8e:fa:d1:ad:76:0f:aa:75:0f:01:72:02:03:26:b6:
         51:5e:ad:7a:ac:50:2b:b3:a4:37:f6:be:4e:2f:b4:ee:37:2c:
         8e:91:5c:71:07:eb:22:9e:07:7d:df:03:20:c6:94:66:e4:90:
         11:b5:8c:cd:1a:e3:a9:23:1b:bb:d6:42:ec:d5:07:b2:47:f8:
         cd:38:aa:bc:2f:1e:0f:cb:19:dd:d3:68:7b:d7:85:75:53:68:
         4f:a8:e9:d3:9b:90:9a:fb:b0:33:f1:de:ae:38:dd:5f:a8:11:
         a7:d6:78:f4:16:1d:77:97:25:11:40:40:c6:74:f5:bf:63:e8:
         b8:4f:55:0b:d6:0e:8a:d0:3f:10:48:e6:74:81:bd:13:54:28:
         bf:dc:d6:0b:eb:b8:05:ef:19:27:33:62:01:d1:13:59:46:64:
         50:18:6a:b9:a5:ec:ff:d4:bc:a9:f7:24:88:af:fa:0e:d1:f8:
         33:5c:d0:fc:97:9a:f3:f8:92:2f:7a:93:99:0b:a6:7c:ea:8f:
         b2:e3:9f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:37:07 2026 by rpki-client