Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa
File:                     e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa (raw, json)
Hash identifier:          3RR5WqMLYzUf5fOIzh5FVk9OsoIly0pZA8ZYqzDHWMM=
Subject key identifier:   C3:6C:93:4F:D7:11:E1:BC:47:61:D1:34:D0:38:64:24:49:A8:A8:59
Certificate issuer:       /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
Certificate serial:       010D0C9F4328584EC20C5F4DA532B69C2414BF00
Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     62827
IP address blocks:        158.51.232.0/22 maxlen: 22
                          198.17.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:5f:4d:a5:32:b6:9c:24:14:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=b215d88d-69be-4d5f-8122-4f612f640dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:75:b5:e8:2f:40:17:63:11:aa:51:71:da:b4:
                    75:b4:70:fd:0d:c0:8b:30:6e:d0:82:21:f3:29:b3:
                    ab:b7:65:73:b4:73:b1:4a:92:f9:5b:33:a7:3c:9d:
                    c7:9d:6d:98:2f:4b:fe:44:a7:96:c0:fd:1c:7b:e3:
                    96:26:e2:9b:75:ad:93:27:90:b3:34:7a:6f:3f:1d:
                    b7:e4:9a:18:f2:0e:0a:2a:7c:21:f9:0b:cc:8e:d7:
                    b1:91:fe:82:34:7a:16:69:be:3a:5e:6f:3a:68:33:
                    a3:ff:85:d1:ff:c6:81:2f:8e:09:07:75:59:6d:16:
                    e8:03:f5:b7:27:6a:71:cc:b7:5f:6e:c3:e2:d2:3d:
                    c4:1a:ff:cc:51:f2:50:a7:bf:69:c0:99:ad:5d:b3:
                    4e:a0:dc:c7:cc:13:b0:67:9f:be:cf:a5:09:0f:e9:
                    a8:31:b3:9b:3d:df:97:55:db:b7:ab:9f:db:2f:0d:
                    5a:ed:41:1e:28:ab:3b:b8:d7:7d:be:54:5e:bc:b3:
                    2c:d0:ab:92:5e:05:d7:14:82:d7:fd:7a:68:07:e5:
                    97:c3:24:6c:bc:ae:6d:f9:ee:fc:71:6c:0b:7b:50:
                    ce:94:7e:ec:02:b9:75:a3:4b:93:d2:7a:76:41:4d:
                    76:ea:e7:cd:2e:42:fd:1f:6a:38:91:6a:ff:1c:51:
                    e9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6C:93:4F:D7:11:E1:BC:47:61:D1:34:D0:38:64:24:49:A8:A8:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/e5698ab7-2a0f-3495-8fcb-b16cabedc28d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl

            X509v3 Authority Key Identifier:
                keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.232.0/22
                  198.17.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c5:5c:d3:2a:05:72:8e:9d:c7:62:a2:77:a4:3a:52:bc:29:
         cc:f0:a0:ce:5a:77:8c:92:cc:a1:7a:cc:7c:48:6c:c7:85:f5:
         ed:d3:a8:bb:e1:23:13:e1:57:b1:a6:c0:7f:0f:09:2a:7c:80:
         5b:18:49:b8:09:76:d8:95:0b:19:39:44:8b:52:f2:b1:32:00:
         38:5d:35:d2:2a:17:cf:4a:7a:f6:65:c7:51:25:4d:37:4e:a0:
         dd:b7:2c:22:be:e9:17:8d:11:49:23:c8:51:f3:cd:34:f3:01:
         20:ae:16:f1:1e:6f:f7:00:28:86:e7:57:69:53:c1:9e:81:20:
         c5:43:fe:33:39:c1:86:a4:43:b9:24:b5:1c:e9:a6:52:0c:b8:
         ca:50:a3:a1:11:35:86:f6:35:ac:95:0a:d8:ac:bc:6e:fb:5d:
         ba:79:79:57:71:b1:63:35:3d:71:65:5d:e0:a1:33:9d:81:fc:
         ca:09:c8:24:d5:f8:fd:79:69:4c:b0:c3:1f:08:b8:9e:e5:a1:
         03:40:aa:9b:af:af:73:c2:2a:5f:84:7f:29:cc:75:1a:81:d3:
         28:5e:7b:47:bc:48:a2:76:27:7c:d1:43:68:17:fb:24:b1:fd:
         13:8c:19:ff:a6:de:dc:1f:95:f3:29:b9:bc:33:8f:13:c7:5e:
         33:1d:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:02:04 2026 by rpki-client