Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f82e7b00-2e7c-3adf-a91a-b2eda2d834b6.roa
File:                     f82e7b00-2e7c-3adf-a91a-b2eda2d834b6.roa (raw, json)
Hash identifier:          QfMMkW7lxX1oSaUib7FVFE61yZTl3M+ruXBRtat0ztM=
Subject key identifier:   C5:57:CB:9B:BA:64:4C:00:6A:0E:37:B7:A1:B8:23:98:E3:4B:24:76
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584B3D179CC7222D4D700D10F880
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f82e7b00-2e7c-3adf-a91a-b2eda2d834b6.roa
Signing time:             Thu 18 Sep 2025 19:39:35 +0000
ROA not before:           Thu 18 Sep 2025 19:39:35 +0000
ROA not after:            Wed 17 Dec 2025 20:39:35 +0000
asID:                     11377
IP address blocks:        159.26.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:17:9c:c7:22:2d:4d:70:0d:10:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Sep 18 19:39:35 2025 GMT
            Not After : Dec 17 20:39:35 2025 GMT
        Subject: CN=7b94a05c-5ad4-4e17-86f7-fe6f6ab5bae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f0:e0:f9:2d:47:5e:1e:34:54:a2:c8:11:82:
                    63:7d:99:39:9a:20:8e:57:82:9d:ef:9a:59:0e:88:
                    6c:cd:38:08:13:3c:d4:5a:b0:05:60:13:a5:99:c3:
                    e7:67:ff:31:c3:69:17:2f:07:76:56:e4:a0:a0:b2:
                    44:9e:be:cb:37:d6:5d:37:a2:9f:f1:3d:fe:1d:25:
                    8d:e5:c5:6a:3c:ce:dd:2d:1e:81:ad:44:52:46:15:
                    34:35:08:b8:f4:31:fc:5f:d5:c5:2b:43:73:97:bc:
                    e7:42:2f:e0:98:ef:03:11:72:09:42:fe:44:54:1a:
                    46:b5:8a:75:96:ab:e6:67:79:d7:8c:b9:65:9d:33:
                    27:d4:ee:e8:97:ca:aa:fe:23:d6:67:ae:72:6e:ed:
                    6b:67:39:81:37:e3:9d:94:c0:31:ea:c9:94:d3:38:
                    01:38:26:24:58:fc:67:c5:5a:4b:0f:87:7e:93:aa:
                    9b:9d:bf:9a:76:a7:bd:ba:fc:9a:6c:c5:78:38:05:
                    19:d5:d5:b5:fa:fb:e1:c8:0a:1d:67:03:3b:7b:c8:
                    eb:89:da:76:66:ed:f7:2e:b1:09:ed:97:48:3b:33:
                    7f:81:f2:44:28:1f:9e:18:17:b0:7b:5f:be:57:f2:
                    26:88:90:f9:96:9a:6a:38:18:b2:b2:8f:28:f5:4f:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:57:CB:9B:BA:64:4C:00:6A:0E:37:B7:A1:B8:23:98:E3:4B:24:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/f82e7b00-2e7c-3adf-a91a-b2eda2d834b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.26.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:46:40:a6:e7:47:6c:79:a5:4c:08:e3:94:d6:c6:de:ee:5a:
         e9:9d:a0:41:35:be:3e:34:e0:52:fd:7e:71:5c:b1:54:42:d7:
         58:6e:d5:c4:44:71:de:89:06:02:31:bd:36:83:c6:6c:f5:29:
         a7:62:9d:ed:29:0e:23:04:5b:07:5a:2e:12:30:de:51:4c:46:
         f0:26:2c:a3:b0:9a:4d:5a:9f:3b:83:2c:56:a9:30:88:8e:3f:
         08:30:23:40:7f:de:00:65:fc:98:77:a6:24:4b:d3:ee:1e:b2:
         bb:dc:6a:43:c4:ca:62:15:4c:df:6c:b8:88:e2:ce:be:c1:d9:
         4a:4a:f8:ee:02:8b:5a:33:a1:94:c9:34:f5:69:a8:40:4d:c1:
         12:2e:b6:a5:06:8b:93:e6:31:cb:6b:d0:3a:eb:84:0b:8e:8b:
         42:49:20:e3:fa:9d:b4:3c:c8:f9:fd:f3:fa:99:67:b2:55:91:
         b7:76:f0:d5:82:de:c6:35:ff:0d:01:e4:e7:da:fa:fe:3d:90:
         92:2d:d2:2d:cc:63:d0:f5:20:39:6a:93:78:62:26:99:73:44:
         dc:92:41:5c:c3:f1:b1:ba:ee:29:84:e9:ec:3c:ad:b9:6a:d4:
         40:7d:e5:7e:5d:8d:0e:6c:98:fd:21:04:58:d5:05:fb:0f:48:
         55:30:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:38:47 2025 by rpki-client