Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8a6094d0-35a8-3ca9-bfce-39b2d08378e7.roa
File:                     8a6094d0-35a8-3ca9-bfce-39b2d08378e7.roa (raw, json)
Hash identifier:          NrlS7Qq1u7zFsL3LKkC0t/HlzYJyz6sKZwDP0OrnG9U=
Subject key identifier:   59:79:96:25:D6:A1:37:1B:BD:7C:D2:DC:34:B1:A0:CD:9D:78:CC:D6
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F374D4B9BBAD831061C14EB80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8a6094d0-35a8-3ca9-bfce-39b2d08378e7.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        151.101.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:4b:9b:ba:d8:31:06:1c:14:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=0101fd96-165e-42bb-a17c-81d8f4d78478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f7:25:62:f0:e2:d6:67:08:6e:0d:06:a1:d5:
                    c1:79:9b:bd:b3:22:04:5e:60:4a:71:e6:fb:ef:cd:
                    05:e1:d4:57:d6:de:65:e3:34:db:d4:e0:5d:eb:9f:
                    60:fd:4e:c9:e3:41:7c:bc:d5:75:97:ed:e2:10:9d:
                    f4:46:dd:1c:18:a4:03:c3:6d:ef:96:49:23:f4:1e:
                    a8:b9:85:d3:89:fc:23:ba:4d:0b:fc:62:52:2d:32:
                    84:97:ea:3c:46:dd:19:dd:6b:9d:68:ff:19:84:37:
                    b2:e4:a2:06:af:14:45:de:7a:b9:b2:15:69:dd:fa:
                    3d:0f:4f:7a:40:12:70:7d:b2:71:e8:42:06:ea:44:
                    9f:73:7c:b6:6c:34:52:30:19:67:6b:33:ea:26:e2:
                    7b:b0:04:12:a5:53:a0:b4:2c:7a:ec:0f:d5:2b:a0:
                    57:db:96:1c:0e:a3:9d:7a:dd:64:0b:99:d3:2e:87:
                    95:b8:09:49:0e:49:0a:3f:8c:51:47:de:03:cf:c1:
                    7e:1e:4b:e1:29:d6:46:12:2b:5d:5b:ce:ca:d5:cb:
                    13:a2:e7:04:b4:ae:41:26:2c:0d:f5:f6:cc:67:2b:
                    7a:3d:89:99:4a:37:c0:12:99:c5:8f:99:8c:f4:db:
                    ed:9d:7e:dc:8d:2e:31:70:e5:b1:52:bb:f2:f3:63:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:79:96:25:D6:A1:37:1B:BD:7C:D2:DC:34:B1:A0:CD:9D:78:CC:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8a6094d0-35a8-3ca9-bfce-39b2d08378e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:13:48:db:d6:93:bd:9c:b3:ea:7f:ce:9d:6b:81:17:e8:5a:
         5e:a5:ad:38:e8:75:c8:59:6e:4b:65:48:ca:2f:2f:53:b3:65:
         e5:ee:c5:b1:c1:cc:96:27:3b:12:de:bc:24:c2:9c:38:15:11:
         35:1a:2c:f7:12:77:43:aa:ba:63:e3:9a:1a:e8:e2:e3:ef:8e:
         06:1f:ed:bb:2f:ee:b4:fb:72:ef:3a:46:fd:64:a0:f4:36:7e:
         98:f8:03:98:fc:22:68:ca:db:d8:f9:0a:77:7a:ee:94:4d:0e:
         4f:75:69:e7:d3:88:16:22:09:05:13:10:7e:92:e0:0c:41:20:
         9d:d6:3e:26:9c:70:77:dd:fd:84:8f:c0:6d:ac:78:a3:65:41:
         80:0f:7e:c3:b9:ad:1f:bd:48:68:81:f4:96:55:d2:89:56:52:
         72:5c:9d:6e:cb:8e:39:79:43:46:7f:90:d5:c5:7e:61:b3:39:
         fc:e3:3f:26:f4:41:de:bd:2c:59:e1:b0:3f:be:7d:a0:70:dd:
         28:67:aa:62:07:22:e6:1a:3e:0c:62:95:4d:e2:ce:09:e2:cb:
         b5:db:bb:51:15:2c:1e:22:d7:aa:02:2d:6c:2c:c1:6d:0b:b5:
         40:f8:9a:f5:bc:49:53:d2:d3:17:b5:3d:9b:f1:f6:b9:ad:5f:
         c1:4a:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:21:16 2026 by rpki-client