Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8943ba76-2440-3676-bc94-655519f6b1ba.roa
File:                     8943ba76-2440-3676-bc94-655519f6b1ba.roa (raw, json)
Hash identifier:          viOfx6g0cfSkYd/4+EFRWDT0+7cMvXdGSAs/RJc8EI0=
Subject key identifier:   45:5C:4A:9C:16:1E:5F:69:8B:2D:0B:BC:36:7D:24:23:B9:3D:BE:00
Certificate issuer:       /CN=03b51393-7784-45a0-9621-168719782436
Certificate serial:       010D0C9F4328584EA79BE2744EFB54330FF6ED80
Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8943ba76-2440-3676-bc94-655519f6b1ba.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10384
IP address blocks:        152.85.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:e2:74:4e:fb:54:33:0f:f6:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b51393-7784-45a0-9621-168719782436
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ac47329f-e31b-40b0-bfaa-f38d14c70664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:bf:13:a2:3a:c8:71:d6:67:c9:4d:78:77:
                    c0:88:3b:58:a1:e5:28:24:ab:64:de:8c:89:e4:ee:
                    72:d5:bc:32:d9:35:ce:5c:c0:c5:1c:90:82:62:e7:
                    e8:fd:41:98:2c:b1:7d:40:fc:c8:3a:0a:2f:ff:5b:
                    39:30:2e:47:48:d7:4e:84:29:dc:bc:85:46:e3:84:
                    95:c0:e9:45:5f:e1:76:60:9e:4b:86:f5:b3:b9:71:
                    51:0f:ca:4f:7c:cc:9a:2e:0e:b5:da:5f:2e:68:4d:
                    9c:39:cd:42:96:74:26:b7:4d:66:77:ff:e9:9f:c8:
                    17:c3:d1:57:72:c3:3b:72:5f:9d:85:bb:61:46:a4:
                    02:ef:9f:d9:8f:67:ce:2d:11:2e:14:42:15:81:9e:
                    6b:7e:e4:dd:cb:6c:b2:73:6d:45:46:ae:f4:b8:b2:
                    7e:be:d9:c6:90:f8:3d:cb:29:e4:ec:70:66:71:ad:
                    52:c3:63:db:75:a0:a6:2d:15:38:95:2e:be:47:2a:
                    3b:fa:f5:99:23:55:c2:dc:00:64:23:e0:fb:34:6b:
                    f9:80:97:6d:96:53:2b:bc:04:e9:bb:b9:0d:d8:50:
                    cb:a5:2b:a4:7c:82:40:f4:37:55:07:69:7e:76:20:
                    dc:b5:78:71:0a:cc:01:b9:89:8b:c6:75:04:b6:bd:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5C:4A:9C:16:1E:5F:69:8B:2D:0B:BC:36:7D:24:23:B9:3D:BE:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8943ba76-2440-3676-bc94-655519f6b1ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl

            X509v3 Authority Key Identifier:
                keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.85.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a8:74:83:b7:c2:ae:1d:fe:3a:7d:07:ff:c0:07:27:10:7d:
         40:0f:37:71:7f:b2:7e:c3:7a:cb:0c:86:f6:aa:6e:6b:77:15:
         bd:5f:9a:d2:4a:e0:bc:a8:59:30:7f:6a:5d:39:e2:7a:49:23:
         9c:12:a6:d7:9a:16:8e:4f:16:71:19:81:52:ec:4f:51:41:b9:
         33:23:d6:3c:2d:06:8c:bb:73:f0:10:3f:ac:88:7b:0b:0e:fa:
         9e:0c:09:69:6d:c7:78:dc:67:47:bc:67:a6:cf:45:7d:f7:aa:
         88:17:b4:62:3b:19:1d:a8:90:15:fc:46:c3:2f:df:8a:34:0e:
         ff:34:fd:fb:a1:30:b6:ea:4e:e8:dc:8d:72:3b:15:0b:a7:11:
         d8:67:b8:22:15:a5:f5:b8:0d:6a:bf:e2:fd:21:26:5a:d0:67:
         01:d8:67:5a:dd:a2:9d:ea:9f:53:5e:50:15:21:c1:2b:42:b7:
         55:00:15:7b:61:aa:67:f4:54:88:7a:a5:2f:42:15:34:db:44:
         3e:5a:6c:89:ce:ed:1a:5a:48:05:26:e3:04:d3:50:dd:5a:17:
         af:90:52:14:d2:80:1c:ea:12:a4:0d:34:41:5f:97:75:98:0b:
         7a:cf:a3:24:5e:d7:6e:34:a8:cd:b9:36:4d:5b:ec:11:8e:e6:
         61:7c:80:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:27:23 2026 by rpki-client