Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/65a98dcf-1f24-3a8e-9f4a-c69d32edb868.roa
File:                     65a98dcf-1f24-3a8e-9f4a-c69d32edb868.roa (raw, json)
Hash identifier:          uLLcKl1qbVglPUvnzDp8ppkmVwgasLhXSIfSQ7juKTY=
Subject key identifier:   C4:20:33:38:84:34:65:78:28:B3:B1:C2:2B:25:9B:53:92:4D:0B:17
Certificate issuer:       /CN=557a586a-7e35-45b6-bb87-b7631d4dda84
Certificate serial:       010D0C9F4328584F5E62B3D1489FE9EF3AA3F69C
Authority key identifier: A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/65a98dcf-1f24-3a8e-9f4a-c69d32edb868.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     14618
IP address blocks:        192.231.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b3:d1:48:9f:e9:ef:3a:a3:f6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557a586a-7e35-45b6-bb87-b7631d4dda84
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=0215e445-6243-4358-8fb6-fa233bbcff69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:63:b4:60:19:0f:5f:14:ae:0d:de:a4:8e:1d:
                    35:96:71:70:40:f3:74:df:26:a6:74:49:f1:85:f4:
                    5b:7e:ef:cb:69:3c:82:8e:9c:98:31:73:92:3f:82:
                    55:06:b3:33:b4:b9:a3:e1:b3:11:25:45:ab:33:70:
                    a4:71:4a:90:53:64:a5:42:ce:96:0d:ab:32:b1:73:
                    7e:74:8c:80:89:57:f2:56:08:58:05:85:db:27:de:
                    05:3f:9d:d3:2b:ac:83:3f:9c:b2:ec:0e:20:11:45:
                    1b:36:b3:42:2b:ea:11:ab:26:02:06:43:a0:af:63:
                    bb:58:f3:91:0d:e5:7e:53:bc:7e:e2:5e:40:82:32:
                    e6:f1:88:09:3e:ae:bc:f9:a6:78:d2:ff:7f:fb:79:
                    b1:8b:37:25:65:45:37:15:e2:61:81:ab:c1:d3:3b:
                    10:70:4d:b2:b0:6b:32:5a:76:38:18:e0:f1:e2:a0:
                    58:a7:2f:82:b1:e5:30:d6:05:70:ec:2b:26:dc:11:
                    4a:8b:54:73:b5:09:bf:65:a5:b3:5f:53:ab:fd:d4:
                    b8:f0:30:38:a0:94:e6:e1:f4:db:67:4b:d2:32:8c:
                    a9:f7:ab:68:e1:0a:34:a3:1e:87:83:77:53:20:66:
                    b2:85:87:81:16:a9:59:4b:e1:4f:33:1e:99:b3:a1:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:33:38:84:34:65:78:28:B3:B1:C2:2B:25:9B:53:92:4D:0B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/65a98dcf-1f24-3a8e-9f4a-c69d32edb868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl

            X509v3 Authority Key Identifier:
                keyid:A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e9:e2:2a:91:f1:3f:f1:9e:92:0a:8e:51:a7:26:4b:ec:d8:
         cc:cf:c1:bd:09:66:51:67:d2:57:d5:b5:d0:cb:f0:6e:ec:ba:
         f4:6f:e1:bf:42:37:75:03:33:d7:d2:c4:30:5e:46:3a:5d:89:
         b0:7e:5e:9f:37:d8:a9:e8:56:a5:72:64:38:2c:89:39:10:a3:
         ef:71:b5:a4:53:f0:67:d9:cf:9b:ad:0f:45:c8:6a:0c:da:c4:
         09:64:6f:0c:c8:8a:69:83:38:3a:7d:db:bb:7e:62:ba:e8:f1:
         60:6f:4e:71:ec:50:a6:e1:26:b6:35:bf:4d:b9:c7:4e:08:2f:
         b6:1b:a2:c3:f9:97:cd:84:25:51:94:a2:f3:1d:06:6e:86:d2:
         3c:a1:18:a8:ce:93:e2:2d:8f:79:47:36:9c:97:33:f5:af:99:
         6c:1a:7d:94:75:74:3b:d4:bc:38:9e:73:69:99:44:9e:23:0f:
         2e:0d:db:d3:98:50:91:b8:c5:52:a8:69:9e:50:2d:8b:9f:50:
         80:2a:bc:ff:89:e0:6a:35:51:7b:b4:ee:72:0b:4c:55:60:a2:
         54:22:d6:56:f2:9b:49:53:51:3d:06:3c:00:1e:38:e1:63:d9:
         67:b7:da:24:7e:69:67:ed:46:bd:2f:b8:e1:dd:71:1e:3b:5e:
         18:9f:48:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 19:00:52 2026 by rpki-client