Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/b4859cdb-6e3d-3b19-a9a6-fbc2ba167767.roa
File:                     b4859cdb-6e3d-3b19-a9a6-fbc2ba167767.roa (raw, json)
Hash identifier:          NTzUqDj4UjGtbYSZmoPLxf6+w/nbzszcvIWKEVARy3Y=
Subject key identifier:   71:51:4E:67:C8:3A:7C:94:1C:3F:38:3E:60:EA:E0:CA:0A:2C:3D:AA
Certificate issuer:       /CN=fdd167e1-80d8-4633-a835-6e5d62d964bc
Certificate serial:       010D0C9F4328584ED001E66A3AA1FE90484C4200
Authority key identifier: 80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/b4859cdb-6e3d-3b19-a9a6-fbc2ba167767.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     53597
IP address blocks:        141.193.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e6:6a:3a:a1:fe:90:48:4c:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd167e1-80d8-4633-a835-6e5d62d964bc
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=b0af1c97-3676-4c75-8a9b-459833b491bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:1c:66:15:6f:0b:9f:ed:80:31:43:59:2d:
                    81:aa:cf:7e:c1:4f:6f:e4:5c:ee:11:c3:d1:74:35:
                    2c:09:10:48:15:23:61:9f:3a:be:67:6b:03:a8:98:
                    60:fa:52:4b:ee:96:cf:b9:f9:01:14:14:89:ae:9f:
                    3b:f9:43:a4:28:f4:24:78:c4:fa:58:9f:fa:72:5c:
                    16:8a:8f:dc:1a:f3:29:21:0a:23:e7:75:77:cc:35:
                    8f:35:7c:8f:fc:52:27:a0:1d:75:bb:96:bc:87:bc:
                    c5:bf:f8:8a:9b:69:e8:38:75:c4:05:94:f1:17:f1:
                    78:82:3a:97:6e:44:f4:7c:1a:6d:9f:77:85:05:3d:
                    0c:75:1c:96:6f:bf:0c:58:42:71:1a:29:7e:8a:9a:
                    18:69:a7:33:f8:a8:e6:c5:ab:47:ee:6d:61:fa:9e:
                    ff:ea:6e:60:cf:60:15:c9:40:ef:46:47:85:39:e8:
                    2f:66:e6:5d:f6:75:e8:38:42:f1:66:fb:8c:05:71:
                    7a:55:c9:7f:46:92:ba:27:6e:55:59:ef:93:d5:3e:
                    ea:a2:f6:9d:84:93:16:b4:21:df:a6:a9:04:fd:c6:
                    cf:47:23:fc:07:22:04:56:ac:72:24:2c:2f:58:36:
                    31:ee:fa:01:f7:37:02:bd:92:59:e0:c0:d3:aa:a2:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:4E:67:C8:3A:7C:94:1C:3F:38:3E:60:EA:E0:CA:0A:2C:3D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/b4859cdb-6e3d-3b19-a9a6-fbc2ba167767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl

            X509v3 Authority Key Identifier:
                keyid:80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:72:2e:5b:1f:0a:45:0f:91:50:4e:a5:f3:1c:5e:d9:f5:5e:
         7f:4c:bf:f1:f5:f9:28:a3:28:a5:8e:6c:81:60:c9:8b:59:98:
         20:ae:49:e3:f8:42:49:77:72:be:98:a1:97:f4:0f:76:55:29:
         4a:48:b8:96:49:c6:24:8e:9a:b7:67:b4:0a:39:9a:4a:e6:d5:
         47:1b:41:ab:fc:1d:f6:47:d6:98:3b:bd:f5:72:d9:8b:ce:8d:
         66:de:1e:05:d4:6d:11:55:60:8f:8a:1d:e5:78:00:0b:dd:df:
         39:b0:98:af:85:e7:2e:2a:8a:6d:4f:71:6f:80:37:1c:dc:7b:
         cd:1a:b1:e2:ea:a2:17:82:a2:a1:4a:e7:b8:77:f7:9c:76:3c:
         55:e4:64:52:53:cc:61:05:ee:19:15:9d:0f:f4:88:7a:2c:ae:
         4b:50:9c:2f:94:4e:ab:8a:3a:3e:3e:fa:e2:78:51:3d:0e:7b:
         b5:d6:e9:16:48:59:7b:2a:a1:c1:99:d4:57:07:68:b6:ca:08:
         1e:d5:91:49:be:aa:86:9d:64:ae:69:ae:75:8c:ad:84:d6:13:
         b4:40:b6:94:0d:ad:ba:a2:87:61:e2:b1:62:6e:eb:60:2a:8f:
         3a:da:bc:8c:93:a0:27:af:00:2a:e0:3f:76:7a:66:d8:bb:01:
         90:0f:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:25:19 2026 by rpki-client