Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/71d7967c-5e1b-383b-b9d3-6b5db7715057.roa
File:                     71d7967c-5e1b-383b-b9d3-6b5db7715057.roa (raw, json)
Hash identifier:          T5cGCpo3lhl09stXgp/+LWsHNysJJzVpmQx2LU7Ief4=
Subject key identifier:   36:CC:36:B2:FC:F0:DD:52:19:C6:DF:1A:13:08:D6:B9:40:5C:C9:B2
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F374D4D98357E14F20F05C140
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/71d7967c-5e1b-383b-b9d3-6b5db7715057.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        151.101.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:4d:98:35:7e:14:f2:0f:05:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=e64c9d92-e9a4-4997-bcd9-5a0f485124cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:df:55:55:4b:ca:09:b7:c7:2b:fa:62:76:
                    e4:09:d3:68:29:00:7b:f6:14:2c:f3:2b:5e:d6:46:
                    fb:97:67:e4:f9:7f:a1:dc:55:a8:ac:52:fd:b8:47:
                    07:42:b0:40:26:e9:4e:89:f5:05:c7:3d:77:2a:7f:
                    6b:12:80:be:96:60:02:98:2b:4c:c7:84:b3:9f:c7:
                    63:ec:d3:6c:0b:8f:24:e0:96:7b:74:b6:93:2f:bb:
                    1f:63:cc:79:34:4f:e7:1b:0c:0c:f8:ad:02:0d:dd:
                    80:ee:45:23:91:d0:1a:d0:01:ea:aa:6b:7a:3a:1e:
                    d2:12:21:81:67:9a:ed:93:31:59:d4:5d:b9:32:ea:
                    db:4f:77:b8:f0:32:bb:28:c4:aa:45:0c:72:15:2c:
                    a1:72:90:8b:26:7b:01:e1:6a:04:13:14:47:08:e3:
                    e4:5e:86:f6:e7:81:37:c5:6e:78:82:63:a2:7a:98:
                    b3:98:99:19:f3:c2:9c:8b:11:f0:da:58:ea:2f:20:
                    4c:11:f4:d8:3b:18:17:42:26:e1:b7:17:ec:59:91:
                    27:b7:9e:94:28:75:a5:ba:00:c3:ce:56:63:71:ee:
                    9a:01:6c:ed:31:48:55:63:d2:04:52:ca:8b:65:03:
                    bc:03:f9:0b:bd:31:6b:f2:1a:c2:b2:30:f6:29:c0:
                    d9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CC:36:B2:FC:F0:DD:52:19:C6:DF:1A:13:08:D6:B9:40:5C:C9:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/71d7967c-5e1b-383b-b9d3-6b5db7715057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5a:1e:e9:69:bb:f7:83:68:ec:01:52:0c:e3:a1:a7:33:f3:
         eb:d6:42:bb:94:06:cb:cf:e2:a7:2f:da:62:d6:20:ab:dc:55:
         86:08:ff:9f:d6:13:1b:b7:39:4a:5d:4d:ca:47:8b:b9:87:f9:
         da:fa:30:ee:11:da:ac:e6:e7:b1:a9:83:6a:86:a9:7a:3c:97:
         55:aa:91:88:3b:34:6a:ee:56:64:57:39:fb:1e:46:85:f1:68:
         eb:5d:33:b9:0d:4f:14:d7:f6:12:2a:cf:c9:fc:1f:3b:fc:39:
         d3:61:51:9b:6d:16:cb:93:6b:e1:e3:90:f0:b7:bd:5f:40:c8:
         e2:05:c5:f2:79:0c:31:72:7a:2a:51:f7:0d:6d:cd:e8:23:af:
         d8:98:4d:ea:50:ec:a1:dc:13:e3:9a:7a:01:23:18:4f:87:61:
         82:fa:c7:07:3c:ba:16:5e:26:ec:5e:bb:ca:5e:72:f9:45:a6:
         02:70:69:1b:a2:1d:9a:cc:a3:c0:25:d3:b6:2e:6e:6c:24:0d:
         41:04:de:42:59:4a:73:ff:f5:89:73:7c:6b:94:fa:8f:a1:48:
         92:3e:c0:6c:da:4c:48:14:4c:a5:e9:1f:6a:f1:46:09:e9:a4:
         e1:1f:54:4a:82:7d:da:b2:2b:37:42:22:85:ac:a6:2f:07:06:
         ac:25:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:00:23 2026 by rpki-client