Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/3faf8435-6868-34f1-a373-4beeedfdf7a9.roa
File:                     3faf8435-6868-34f1-a373-4beeedfdf7a9.roa (raw, json)
Hash identifier:          156UshYZTDzBnpTWG1gdVYENj2G8MK2YxVlFVlJtwcY=
Subject key identifier:   DA:E3:4B:4E:2A:4F:13:27:71:19:2F:1E:2C:70:E4:64:D7:F0:78:38
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584EE65743CA1CEC6C7D133E0140
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/3faf8435-6868-34f1-a373-4beeedfdf7a9.roa
Signing time:             Thu 20 Aug 2026 13:00:12 +0000
ROA not before:           Thu 20 Aug 2026 13:00:12 +0000
ROA not after:            Wed 18 Nov 2026 14:00:12 +0000
asID:                     153371
IP address blocks:        207.174.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:57:43:ca:1c:ec:6c:7d:13:3e:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Aug 20 13:00:12 2026 GMT
            Not After : Nov 18 14:00:12 2026 GMT
        Subject: CN=2943bd0c-b398-4afb-9188-fc740eaf792e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:3d:99:8c:3b:34:d3:0f:98:f2:2f:af:85:
                    5c:e8:39:25:ef:7f:47:68:6b:cf:5e:23:93:ad:03:
                    bb:03:da:c2:cf:4d:a3:88:7a:20:1c:9a:8b:e4:be:
                    03:27:fb:61:80:d2:c5:03:0e:0b:88:a1:e2:2a:24:
                    22:56:62:df:ca:d0:bb:07:35:35:05:2d:81:98:52:
                    1b:fe:19:cd:40:7e:3b:8b:ce:1f:a5:38:e2:e6:ad:
                    af:32:57:97:19:48:d4:11:41:cd:1a:45:6b:6c:5b:
                    fc:e2:02:d9:63:e2:b7:05:bf:60:aa:20:5b:01:38:
                    01:b6:4a:d6:82:01:0c:f5:61:ab:df:48:88:18:66:
                    a6:b9:66:f3:40:a2:f6:2e:2d:f2:39:4d:f2:d2:87:
                    a4:44:dd:10:ef:70:c9:02:0d:c8:7b:54:a7:27:6f:
                    1d:0f:90:b3:d7:26:0e:a2:41:86:53:48:1b:0d:62:
                    d8:c0:80:96:c4:5f:48:b5:3c:49:cb:96:1d:3b:6b:
                    63:56:d7:96:b4:bf:8e:86:f7:15:da:c6:3b:08:f9:
                    5c:90:83:6c:07:0d:14:76:ba:68:4a:95:42:f9:bf:
                    e9:9b:a5:cd:bb:eb:5b:7c:c6:df:aa:e9:7e:6e:49:
                    1b:5d:1c:cc:0b:5d:3f:3c:a3:3a:ef:ab:c1:60:ce:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E3:4B:4E:2A:4F:13:27:71:19:2F:1E:2C:70:E4:64:D7:F0:78:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/3faf8435-6868-34f1-a373-4beeedfdf7a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8d:ae:93:88:20:28:fb:64:a3:60:79:07:ef:42:b2:0c:1f:
         8e:48:58:3e:7e:9e:5b:80:58:5b:53:56:f4:5f:3b:42:70:ef:
         79:6d:79:36:d3:b1:ba:4f:ea:2f:24:30:45:1f:59:f6:ad:99:
         1f:db:bc:de:3a:9b:9c:be:cb:39:e9:8b:6f:d7:7b:c9:28:0d:
         d8:dc:25:10:25:11:9a:b8:a1:d2:c7:f5:48:6b:09:ba:16:14:
         57:5c:e3:05:ad:ea:61:52:0a:41:35:a9:31:dc:b9:9a:b2:83:
         c3:c1:4e:3d:f4:ca:f0:15:94:40:3e:5b:8f:7e:8d:0d:37:2a:
         00:8e:0e:8d:f5:85:a0:52:be:8d:8b:d0:64:dc:47:06:89:87:
         a2:37:64:43:e1:e5:e4:fc:53:a9:4f:af:db:70:b5:33:6c:86:
         62:5a:7e:7a:08:d7:4c:91:47:84:b4:dd:4b:1c:6c:98:12:9b:
         8a:83:79:2f:1e:12:98:42:18:7f:15:92:c6:d7:47:08:ac:60:
         4b:b3:f1:82:e2:40:a0:d9:91:48:e0:e9:df:1d:ae:6c:24:3d:
         1b:49:11:bf:32:f5:e9:4c:a8:98:8d:a4:ae:01:78:62:3f:c4:
         98:45:31:a6:67:97:00:92:48:3a:ae:33:7d:08:01:9d:89:79:
         9b:87:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:53:11 2026 by rpki-client