Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/e0a2a1bf-8241-36ab-b664-dfa54545c0d3.roa
File:                     e0a2a1bf-8241-36ab-b664-dfa54545c0d3.roa (raw, json)
Hash identifier:          8YDvI1Th38xQXFGN2Z27b5Ww3IxrjXngJvOpmh6Za1k=
Subject key identifier:   01:0A:F0:1F:25:FD:9D:DE:50:88:90:67:F9:72:7B:18:6F:7D:62:72
Certificate issuer:       /CN=c8ce2cc6-982f-4737-a54f-fef1295ff0ad
Certificate serial:       010D0C9F4328584EE0C2228C036A0AD75A09BCE0
Authority key identifier: ED:F5:0B:85:84:2E:59:EA:DD:03:8B:D4:C8:28:A8:20:A5:1B:3D:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/e0a2a1bf-8241-36ab-b664-dfa54545c0d3.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        67.158.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:22:8c:03:6a:0a:d7:5a:09:bc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8ce2cc6-982f-4737-a54f-fef1295ff0ad
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=45c75606-833a-4b07-a738-ab53d4bd3739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:9b:f6:7b:47:da:c6:a0:19:a0:d8:95:b7:
                    cd:ae:0a:91:fc:48:85:a2:f9:66:fb:98:52:58:f1:
                    37:cb:ad:d9:70:1f:7f:7b:f0:d5:da:18:fd:8e:09:
                    e7:db:98:58:8a:30:8e:0e:75:c5:87:6d:bd:bb:ef:
                    d1:f1:b2:fe:96:60:7d:8b:83:39:5a:3e:b7:18:4c:
                    01:d9:5b:a7:0a:9c:59:91:dc:ee:11:d4:d9:3a:65:
                    b8:94:19:48:5f:9f:56:81:7f:86:81:b9:55:28:ff:
                    36:ab:b4:06:9f:8c:90:2d:51:8a:26:e8:08:2c:b5:
                    f1:4e:96:81:3e:f7:d6:55:26:99:fe:b0:3e:03:bd:
                    81:af:9e:24:20:fa:ab:84:fb:cd:53:78:0d:56:5c:
                    d5:f1:3b:e0:29:0c:d0:cb:ab:2d:c8:d7:57:a0:48:
                    c7:3c:64:29:4a:08:2b:6e:60:07:58:c6:18:4a:e9:
                    b1:6c:81:1a:91:be:28:d2:8f:08:05:17:07:46:45:
                    e6:4b:a5:ff:21:4a:a3:53:78:25:33:95:7a:40:1e:
                    95:70:92:6d:56:f3:1a:aa:59:5a:01:e7:72:88:15:
                    02:10:16:f8:57:6b:eb:4d:ea:63:d5:9d:45:7f:61:
                    1e:3a:08:0c:a1:0b:18:46:d1:67:de:b1:f5:75:60:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0A:F0:1F:25:FD:9D:DE:50:88:90:67:F9:72:7B:18:6F:7D:62:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/e0a2a1bf-8241-36ab-b664-dfa54545c0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.crl

            X509v3 Authority Key Identifier:
                keyid:ED:F5:0B:85:84:2E:59:EA:DD:03:8B:D4:C8:28:A8:20:A5:1B:3D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:73:b5:79:83:2e:a5:f8:63:97:a7:9f:2f:32:eb:0a:a0:01:
         21:73:ba:c6:35:73:40:3a:98:4b:6d:ee:6d:2a:7d:a7:cd:74:
         0b:1e:c3:79:57:ba:71:46:39:eb:f5:cd:27:5b:38:2f:90:10:
         10:a8:55:a8:09:8f:4f:eb:f4:c5:28:80:53:68:cc:19:ef:c9:
         a8:7c:56:49:84:dc:cd:6c:27:73:d2:1a:b8:b4:88:84:ba:58:
         8a:db:b2:ea:ad:76:ba:47:42:ac:c4:dd:81:82:3d:cd:20:40:
         e2:6c:51:f9:a8:37:8b:a4:57:87:66:73:c3:be:ec:51:18:39:
         31:69:20:75:1b:67:81:1e:ca:dd:67:b4:56:ee:76:e9:a7:e2:
         62:6f:21:eb:f7:f6:4e:54:4a:cb:2e:a9:b9:c9:ac:43:07:21:
         53:43:b2:c9:59:97:f4:c8:82:49:d1:3a:49:4a:e2:96:d6:3f:
         cb:ed:4d:f0:a9:8a:73:65:99:5a:31:b5:e2:03:df:6e:1f:0f:
         64:2f:f3:0a:4d:35:71:4f:d7:3b:64:29:8d:d5:cd:50:40:1e:
         10:34:69:3a:42:79:f1:eb:e7:81:b9:5e:07:01:91:39:7f:ef:
         de:0b:6e:8d:b2:51:2c:3a:4d:31:74:8e:de:e8:38:74:c1:cd:
         96:17:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:21 2026 by rpki-client