Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9/296a5f46-9e56-3f45-81de-724395ae42ac.roa
File:                     296a5f46-9e56-3f45-81de-724395ae42ac.roa (raw, json)
Hash identifier:          9sPH/+V41zbIy8nesZZ5Cx707bJJ3B652+c+sXrnVXQ=
Subject key identifier:   55:63:29:B5:26:4B:A8:1F:A1:33:07:6C:13:B3:DE:D8:A0:2B:D9:6F
Certificate issuer:       /CN=2d4a2529-c564-4a61-b1f0-5790a3d00ef9
Certificate serial:       010D0C9F4328584EA78FB1974D66C5FB7574C4A0
Authority key identifier: AE:C3:3D:E1:E0:EB:5C:38:EE:5B:EA:63:26:87:A8:C4:DD:93:0A:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9/296a5f46-9e56-3f45-81de-724395ae42ac.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15830
IP address blocks:        199.71.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9/2d4a2529-c564-4a61-b1f0-5790a3d00ef9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9/2d4a2529-c564-4a61-b1f0-5790a3d00ef9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:b1:97:4d:66:c5:fb:75:74:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4a2529-c564-4a61-b1f0-5790a3d00ef9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=36498f3f-b05c-4728-8b8b-c70f5b588a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:23:ce:71:dd:2b:c9:ee:bb:5b:21:d2:67:32:
                    f7:71:3f:6a:16:72:1d:b0:56:ba:ca:0e:d2:38:ce:
                    c6:16:dc:71:d8:87:5e:de:e2:2f:7a:3f:3f:a5:ac:
                    66:e7:d6:9c:96:30:33:0b:93:c3:56:44:89:3a:12:
                    a5:63:d1:6c:69:58:71:25:27:12:29:88:dd:46:b4:
                    7c:e8:b6:1e:04:00:0a:27:a4:09:c2:b8:b3:41:9d:
                    ab:4b:1a:b6:05:72:2e:65:b5:bc:ee:88:ba:9b:ce:
                    db:b5:77:d8:1c:74:e5:e6:0d:f9:77:dd:fe:85:bf:
                    d1:88:9d:de:7b:74:d9:49:72:63:66:de:60:72:19:
                    ad:e5:6e:b8:eb:c8:4a:95:05:37:9f:71:73:8f:74:
                    19:16:21:f4:8e:dd:57:5d:6c:be:df:08:f5:5f:bf:
                    3b:08:d5:2c:ec:5a:70:f3:82:a7:7e:26:61:f2:e8:
                    d1:15:cc:c2:83:81:7c:ec:6d:b0:38:ed:4a:f6:2e:
                    09:d6:56:0e:c2:b3:db:c3:0b:a4:32:04:2e:90:15:
                    a9:be:7b:63:67:15:8e:ea:cb:b0:98:43:e9:44:f6:
                    d9:c9:0d:e3:17:6c:dc:44:39:41:4c:5e:73:d0:56:
                    69:91:91:a4:0a:6f:f9:f3:58:c6:4a:64:38:cf:67:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:63:29:B5:26:4B:A8:1F:A1:33:07:6C:13:B3:DE:D8:A0:2B:D9:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9/296a5f46-9e56-3f45-81de-724395ae42ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9/2d4a2529-c564-4a61-b1f0-5790a3d00ef9.crl

            X509v3 Authority Key Identifier:
                keyid:AE:C3:3D:E1:E0:EB:5C:38:EE:5B:EA:63:26:87:A8:C4:DD:93:0A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2d4a2529-c564-4a61-b1f0-5790a3d00ef9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:36:51:69:d7:13:04:d5:37:63:4b:ca:f5:26:2c:e9:82:
         d0:cd:5e:50:9d:e5:df:4a:de:3c:4d:5c:31:32:dd:2d:8e:c6:
         c5:c3:83:0b:99:e3:82:82:88:ae:d4:65:e1:a8:a1:70:86:4f:
         b0:1a:09:9c:0f:cd:b3:88:d7:ac:2f:02:93:a4:b8:b8:0b:d4:
         cb:95:fb:40:15:94:5e:47:1d:b0:d5:c3:26:89:5a:f4:c5:48:
         b2:a2:69:cd:07:49:3f:f8:02:7f:19:c6:86:81:25:84:62:a5:
         86:78:1d:09:c4:42:e5:61:6d:63:1b:42:17:aa:89:ad:81:b3:
         a8:99:af:9e:55:03:78:ef:a2:ca:a8:4d:bc:33:50:55:4a:6d:
         5b:00:f5:1f:a5:33:62:f1:85:c8:2a:d1:c6:ef:3a:8e:4f:16:
         b9:ca:c7:a3:1b:13:f5:a8:b0:af:1e:cf:c5:70:a6:83:47:23:
         16:ad:f6:8b:f2:ce:82:1b:ad:d2:8a:1e:f9:61:02:52:ba:75:
         ee:e0:a9:e3:8f:d9:ca:23:d8:b9:0b:56:1e:f5:e9:68:01:05:
         d0:05:90:d8:0d:49:94:f2:4b:1f:74:fb:35:e8:39:3e:a9:3d:
         4c:d7:b6:b0:a4:02:7b:8c:61:dd:1a:1e:94:b2:c8:16:bb:1e:
         92:d6:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:18:03 2026 by rpki-client