Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/1603a8ee-56f5-3fe6-96c4-462e249bf3e3.roa
File:                     1603a8ee-56f5-3fe6-96c4-462e249bf3e3.roa (raw, json)
Hash identifier:          Xrmu2RWbf+CDvSBVALS9QvGhR8gKMrBtVXTe9PLsdSg=
Subject key identifier:   F3:6E:C2:9F:F1:95:6A:D6:08:E3:36:8F:DE:A6:29:A4:D6:02:5B:69
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584EAE81A2C3AD3518829FBC8F00
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/1603a8ee-56f5-3fe6-96c4-462e249bf3e3.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     398986
IP address blocks:        155.254.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a2:c3:ad:35:18:82:9f:bc:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=ef6b0c91-a4f3-4bb3-b279-1724ea55a9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fd:44:cc:41:a2:20:36:b6:3f:38:a1:0b:80:
                    15:a2:45:3c:9a:8b:0f:dd:2e:d4:23:12:82:75:a8:
                    5d:db:46:c1:4b:05:af:73:91:55:7b:fc:02:e9:4f:
                    be:a9:55:da:f6:5b:73:b2:18:a8:25:0d:27:8e:3d:
                    00:6b:b7:5c:f3:23:28:ae:ac:24:b5:83:c5:62:cf:
                    86:15:9e:40:d6:7a:a3:c5:48:e8:70:a4:20:b4:97:
                    57:15:a1:35:2a:d3:4a:11:5e:7b:64:05:f8:3c:15:
                    9e:2f:35:1a:d4:31:a7:ce:c1:e2:50:f4:6c:23:1d:
                    3e:f5:2e:87:68:9a:76:b0:fb:cb:bd:0e:ec:cc:db:
                    cf:a9:e3:d0:e1:3f:62:4d:0d:f5:f0:fa:57:32:bd:
                    aa:84:d5:7f:2f:20:6f:8e:4c:4a:03:1e:fb:cb:da:
                    d1:f9:f3:29:dd:6a:75:31:9e:62:ac:f9:46:5e:ca:
                    58:4a:2a:44:89:a5:e5:dc:61:00:18:50:29:c8:8b:
                    4f:4e:2d:a3:70:77:ec:79:7b:c3:23:52:13:2f:41:
                    83:06:ec:8d:8f:fd:47:76:32:3d:93:41:c1:de:73:
                    7c:3f:26:4e:30:6f:33:62:2b:98:30:fc:ac:95:ab:
                    d0:1e:db:5e:83:bf:bc:4c:4c:d6:38:79:d6:9c:41:
                    dc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6E:C2:9F:F1:95:6A:D6:08:E3:36:8F:DE:A6:29:A4:D6:02:5B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/1603a8ee-56f5-3fe6-96c4-462e249bf3e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:3d:1f:00:f1:70:28:f0:a1:85:ee:22:9b:b1:60:0d:b5:
         cd:68:8d:db:32:d8:4a:bc:a6:59:bf:dc:0c:93:d6:c0:04:c6:
         52:64:41:01:88:d7:5b:f9:89:57:9f:7c:48:58:f4:4a:8b:cd:
         6a:c7:ef:8e:20:7c:8a:17:e4:53:a7:31:06:cc:4a:1c:a4:fe:
         0f:7a:92:61:b0:78:fd:2a:cd:83:67:cd:4c:d1:5f:25:e0:cf:
         65:64:6f:0c:6b:a2:e2:3f:45:12:2f:16:38:4b:f1:21:2f:09:
         58:8f:72:db:fd:ca:b8:cf:d6:94:00:ba:38:e7:cb:d1:fe:21:
         3f:47:d7:4b:0b:6e:74:b3:8f:b8:dd:f9:5f:c5:d9:a0:3a:5b:
         ee:e6:a0:57:90:ae:35:25:78:9b:ed:74:95:a9:66:71:10:b1:
         63:52:5f:4d:8e:ac:05:89:c7:bf:d7:a4:4b:90:2c:72:db:47:
         de:bd:04:25:a3:12:c7:74:1b:74:e8:95:1e:8f:ea:a8:f7:43:
         8d:dd:aa:e6:4f:4d:56:a2:a6:25:7e:6c:5b:93:d0:4d:4d:87:
         6a:af:32:b1:1c:a3:c4:9f:b7:ff:37:45:93:ff:28:c9:0a:26:
         9f:d3:cb:d9:fc:19:d7:c0:43:dc:fc:04:d8:cf:b6:fa:d1:9c:
         da:46:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:08:40 2026 by rpki-client