Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa
File:                     f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa (raw, json)
Hash identifier:          W53EeJBHktJkXVJRwdyPj2iw+VxafLFqJG79wOb0HR0=
Subject key identifier:   90:3C:26:29:80:AF:1F:AA:B9:7E:30:1A:33:E9:06:15:33:12:9B:42
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F4328584EFF777C1CD6965A88170A3B40
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     5744
IP address blocks:        151.207.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7c:1c:d6:96:5a:88:17:0a:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=12cd7827-86f2-4566-bd69-82e04ad76676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8e:62:32:4a:96:b9:5c:52:47:c8:6c:e3:0e:
                    6e:54:c9:81:d3:58:a2:19:9b:71:3e:41:a3:c9:50:
                    c2:20:d7:15:a6:6a:d3:01:16:a3:df:f7:58:16:a2:
                    ce:91:31:40:d7:f8:95:87:4b:63:b9:f6:fb:a4:02:
                    da:ad:61:c5:61:d1:89:08:e9:a3:79:46:5b:20:44:
                    cc:d5:57:f0:2c:c6:8d:25:e5:4b:95:60:a4:81:de:
                    2c:0a:ab:9b:f8:3b:2f:8c:6d:ee:99:f4:59:47:25:
                    6d:0f:2c:13:77:e4:78:6e:fd:be:5c:57:b1:9b:25:
                    be:7a:dd:25:d4:e8:b9:3c:d0:8a:08:fc:be:cb:e7:
                    64:3b:73:66:0e:dc:66:4c:b3:ba:e2:df:1d:19:36:
                    79:14:e9:ee:f3:a7:58:9b:a1:49:b4:e6:8d:70:86:
                    2f:4b:86:73:fa:d9:f3:20:9d:7b:eb:e0:3c:33:d1:
                    2c:86:77:64:05:df:3a:9a:a2:83:35:c1:dd:3a:1a:
                    78:a2:fc:db:4b:a9:a6:15:69:da:17:06:05:11:58:
                    8b:78:3a:f3:90:1a:68:66:35:76:42:58:ea:86:0c:
                    29:ff:b0:6c:c1:b5:e3:bf:4f:f0:c8:c7:eb:c2:96:
                    b4:65:94:97:9b:d0:38:27:8e:07:9f:ea:8c:e8:3a:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3C:26:29:80:AF:1F:AA:B9:7E:30:1A:33:E9:06:15:33:12:9B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:95:c3:cf:f9:05:a9:d1:23:52:39:64:61:9b:1d:71:92:30:
         cb:42:0f:98:7a:53:39:20:dd:9b:dd:32:0e:1b:76:32:2b:71:
         e6:43:49:63:72:9d:b2:c3:f4:60:ff:b2:d6:19:ba:cf:6f:c7:
         41:8e:be:9a:d0:00:55:c9:2c:e0:e8:ee:68:e1:26:3c:a4:08:
         85:16:44:c4:bc:26:90:0f:05:69:07:b5:9f:aa:8d:e7:7f:7d:
         bb:cc:b1:cf:53:58:d9:ad:58:cd:e8:d2:92:a8:b3:e2:0d:94:
         01:8a:8f:9b:df:e0:dd:91:4f:1e:a0:e8:8e:ae:ed:87:1c:05:
         68:45:38:bb:3a:c6:07:bc:02:bb:f5:6f:e1:1b:e0:29:36:d7:
         90:e6:62:b4:0e:6b:ba:d7:08:16:40:b9:fb:4d:98:ea:80:3b:
         96:d4:33:58:60:08:1e:9f:40:23:d0:7c:80:ad:17:13:a0:17:
         e3:0d:32:b7:1a:7a:77:10:66:78:fd:54:c8:27:c8:12:13:5a:
         11:f4:a0:7a:21:82:09:83:b4:b0:a2:cd:6b:9a:b6:cc:45:a7:
         d4:cc:a2:80:55:50:8e:88:59:d2:ba:60:9d:1b:d6:52:40:40:
         ee:55:c6:b8:3c:ed:0b:e8:e2:85:e2:85:93:ef:71:39:b7:5a:
         f9:b8:0e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:39:15 2026 by rpki-client