Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ab74b855-05a7-38a0-abdd-eb5284021c0a.roa
File:                     ab74b855-05a7-38a0-abdd-eb5284021c0a.roa (raw, json)
Hash identifier:          mKdrWe0s/Y9G0S+hmcK2gxmt4UIpDla+/Ow00DaI3js=
Subject key identifier:   F9:D2:EE:F4:3A:6B:B3:13:EC:B3:E5:5A:3E:47:13:12:50:0A:B5:5C
Certificate issuer:       /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial:       010D0C9F4328584EA787DAD7CE2EFFC9C5D13700
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ab74b855-05a7-38a0-abdd-eb5284021c0a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1766
IP address blocks:        158.26.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:da:d7:ce:2e:ff:c9:c5:d1:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4f95afaf-db2f-4611-9d79-97bfcefb2e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:b1:1a:70:68:8f:55:77:7b:a6:d3:b5:4e:
                    90:7c:af:86:d5:fb:71:30:49:56:47:5f:1f:84:96:
                    17:3e:73:6c:87:55:98:47:5d:31:28:a7:55:4a:68:
                    8c:71:91:71:2c:38:b3:72:2f:d5:c8:e0:f8:21:ac:
                    61:91:fa:16:af:a0:d4:4c:e5:1f:21:67:46:71:78:
                    83:c9:99:55:25:04:1c:86:5b:a4:39:71:14:5d:e9:
                    b5:ed:52:67:61:23:7f:4d:77:4f:ea:4d:78:f1:24:
                    79:f8:e5:f8:56:b0:04:dd:fe:df:79:f9:16:e8:9f:
                    0c:d9:8d:08:e2:47:5c:5f:35:3b:99:f8:f5:a7:3b:
                    23:09:01:cc:19:2b:bc:19:eb:2b:8c:a6:f8:7c:09:
                    7c:f4:ed:a6:fa:7f:d3:37:0a:9e:06:50:1c:b7:bf:
                    e1:3c:26:6d:94:a0:25:5c:5b:c4:b6:91:f3:29:77:
                    5d:50:ea:60:a4:6e:eb:b2:bd:21:7c:54:56:c8:43:
                    13:ea:41:76:1b:4d:a6:02:6b:a7:ba:09:e4:d3:bc:
                    8d:e2:8b:fd:fa:e1:26:d7:7e:b7:a9:05:2f:73:c9:
                    74:52:4b:5d:93:9d:26:e7:ec:a9:2f:66:38:18:90:
                    37:8a:27:c7:c4:db:eb:f5:2f:69:0d:68:5d:6a:20:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D2:EE:F4:3A:6B:B3:13:EC:B3:E5:5A:3E:47:13:12:50:0A:B5:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/ab74b855-05a7-38a0-abdd-eb5284021c0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl

            X509v3 Authority Key Identifier:
                keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.26.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:10:1a:41:b2:92:2b:61:65:cc:e1:69:28:3e:e8:15:a3:db:
         91:eb:94:13:d2:1b:ab:e4:d8:f6:20:d5:43:a5:1f:a5:27:f6:
         39:eb:c8:55:97:0b:3a:8f:3c:65:b3:26:f3:17:72:21:1f:9b:
         8f:cc:75:09:5c:4b:04:cf:03:41:8a:01:8f:27:1f:bb:3b:b4:
         f5:89:33:0e:b3:1d:40:41:a3:24:9a:af:a6:ec:32:9a:81:05:
         cb:10:ec:6c:8f:55:b0:68:f7:5e:cf:fe:d7:8c:af:7d:af:d3:
         d2:49:e3:f1:45:ac:23:77:b2:e1:c6:30:49:53:74:f7:c7:68:
         19:8d:c4:81:93:0a:71:32:b2:58:6e:e5:91:f4:9f:e8:e9:43:
         10:56:30:a5:00:17:b4:fa:a1:e8:db:47:70:78:cd:2b:7a:36:
         e2:83:bf:e9:f3:a4:37:c4:41:e1:d7:64:32:36:22:8b:e0:56:
         38:df:50:e4:57:90:56:44:73:c4:44:23:d5:10:d4:a5:5c:a0:
         75:41:76:29:ff:9b:97:35:4e:2c:e9:92:0f:40:0f:73:43:03:
         f3:90:54:2d:00:61:c1:ca:01:ae:52:00:37:22:29:07:f1:5f:
         cf:de:af:cd:5b:50:cc:98:36:9d:a7:46:86:2c:70:b2:82:73:
         f6:d6:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:40:37 2026 by rpki-client