Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a21f6aee-865c-3d2a-88ce-9b1dacf30822.roa
File:                     a21f6aee-865c-3d2a-88ce-9b1dacf30822.roa (raw, json)
Hash identifier:          mGJngw9/RvHzTiv+XJmVtfwL0RyhhD1k56CSW1rzu1A=
Subject key identifier:   C2:2E:9C:18:A1:D8:C4:01:91:5C:AE:4D:B9:8F:46:11:08:11:55:43
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584ED50DFD81E40C5B028788F100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a21f6aee-865c-3d2a-88ce-9b1dacf30822.roa
Signing time:             Fri 14 Aug 2026 08:23:53 +0000
ROA not before:           Fri 14 Aug 2026 08:23:53 +0000
ROA not after:            Thu 12 Nov 2026 09:23:53 +0000
asID:                     21859
IP address blocks:        155.229.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d5:0d:fd:81:e4:0c:5b:02:87:88:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 14 08:23:53 2026 GMT
            Not After : Nov 12 09:23:53 2026 GMT
        Subject: CN=e11c78fa-bd33-45d8-b0ac-61cad6145474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:30:e1:6e:f7:7a:42:a1:70:9b:d6:df:fd:a5:
                    99:01:d2:97:0e:b2:8c:23:86:20:0d:02:13:89:3a:
                    47:e3:6d:04:93:78:1e:e0:dc:67:c3:e7:01:f9:19:
                    e2:1c:8c:a1:ca:73:bd:a4:26:e3:da:36:9a:f0:49:
                    aa:60:3a:24:d6:4f:31:8e:5a:c5:3d:e6:b8:36:b9:
                    02:a8:79:b9:0d:ab:d5:13:e5:50:51:cc:8f:14:dd:
                    07:61:15:49:c9:6a:15:29:ef:cb:6d:ab:93:45:32:
                    10:7a:1d:e6:4a:fc:ce:22:80:66:98:fb:a8:8b:69:
                    fa:6a:bd:69:75:3e:e1:58:ea:31:be:63:8b:25:6c:
                    dc:2c:bc:49:6e:83:80:a6:f7:f8:4b:83:1f:2a:83:
                    41:93:72:96:62:6f:04:63:b7:a2:04:85:bf:c7:24:
                    c7:f5:5b:3b:ff:69:5b:e8:76:3e:57:e4:2f:89:34:
                    f2:59:0b:91:a0:25:59:37:d3:fa:16:dd:ae:aa:33:
                    62:5b:fe:b6:cd:0e:25:5b:d5:ca:67:d3:ae:39:98:
                    81:b9:e4:13:af:21:a7:57:5f:e6:df:f4:37:05:77:
                    5a:97:e1:bb:df:b2:a1:98:12:7e:1a:46:83:be:59:
                    87:93:27:c7:f2:a3:a2:29:41:32:a2:f5:c2:0b:0a:
                    e7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2E:9C:18:A1:D8:C4:01:91:5C:AE:4D:B9:8F:46:11:08:11:55:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a21f6aee-865c-3d2a-88ce-9b1dacf30822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.229.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e8:7a:26:61:02:6e:0e:d9:6b:14:b5:63:2a:5a:96:27:b0:
         3c:b1:30:53:94:81:ac:18:60:99:c5:e1:2b:a6:3d:e2:09:76:
         68:d6:6b:39:40:8f:69:ca:bf:e5:2a:ea:fb:b7:49:17:76:2b:
         3b:59:45:7c:4c:bc:11:8a:4f:d2:7e:a1:67:32:ad:ac:50:c8:
         5d:af:70:af:a2:c2:9f:68:a6:7d:dc:4a:d1:42:b0:1b:23:f7:
         a7:cb:dc:b3:e0:d5:90:8e:1d:78:53:fe:a2:42:de:c3:d3:78:
         2b:dc:d3:61:1c:5c:a4:b6:db:4f:da:79:1d:4a:dd:2e:5e:87:
         1e:94:5c:33:1f:c9:33:34:29:fd:8b:25:3e:ee:6c:19:5c:c2:
         12:9a:bf:26:fe:95:08:33:20:0c:6a:c5:21:fc:e1:e2:99:ca:
         8c:a1:98:c4:1a:53:2a:74:48:91:26:74:c1:23:80:96:05:84:
         a5:a7:75:19:a5:3d:95:62:53:65:f7:97:82:94:00:a9:5a:12:
         2b:75:cd:71:db:10:3f:14:8d:6d:da:c8:70:2f:9d:33:db:3a:
         41:61:87:9f:dc:92:15:90:73:07:4c:c8:67:74:0a:7e:35:34:
         7f:dc:cc:8d:99:36:1c:58:88:41:a0:4b:4b:e9:83:5e:9c:0f:
         81:a7:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 00:17:34 2026 by rpki-client