Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/a3e5781b-c448-3328-afe8-ee297ead9140.roa
File:                     a3e5781b-c448-3328-afe8-ee297ead9140.roa (raw, json)
Hash identifier:          887PzReufxUFjbOlG7VKt0duD7/XTpuH9xCUeNYhiPM=
Subject key identifier:   A0:6E:0C:DF:FB:B3:E6:07:D3:14:FE:02:A4:99:B4:2C:9B:AD:1C:AD
Certificate issuer:       /CN=557a586a-7e35-45b6-bb87-b7631d4dda84
Certificate serial:       010D0C9F4328584EBB11CE7D38F8C33F95E04700
Authority key identifier: A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/a3e5781b-c448-3328-afe8-ee297ead9140.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        192.231.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ce:7d:38:f8:c3:3f:95:e0:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557a586a-7e35-45b6-bb87-b7631d4dda84
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=eaddc4a3-467a-48a6-ac3a-23116cf9d309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:d3:a5:ab:5f:ee:a4:f5:4c:4d:9e:92:cb:
                    63:ce:99:8a:f8:7b:d9:a7:d6:28:e1:38:0c:80:2e:
                    89:d1:3e:fa:41:d7:56:6f:09:24:c4:74:7d:07:d2:
                    2f:59:fd:05:d1:1f:74:f2:90:8a:49:9a:f1:02:8f:
                    55:d5:9b:79:60:57:12:61:99:ae:20:f9:86:ba:f3:
                    bc:22:a9:23:6a:ae:08:90:dc:ee:41:e4:4d:6c:e0:
                    e5:4f:16:56:48:c4:73:35:b0:d3:6f:6d:ea:2d:3f:
                    47:7c:46:a7:a9:c5:26:50:ad:81:13:06:42:e6:f2:
                    37:fa:0b:ff:2f:02:54:44:5b:60:62:2c:45:50:1b:
                    34:b6:40:da:94:35:ce:62:99:52:f6:97:ef:ad:67:
                    81:2b:ff:75:51:5c:ab:bd:80:7f:e8:63:e8:0f:b7:
                    1a:11:70:73:6d:66:2d:50:24:ca:ba:d5:e2:3e:d4:
                    b1:c8:7a:e5:41:e6:d3:df:1a:06:b0:c6:b3:68:3b:
                    2f:99:6c:f8:87:c7:e8:dd:b9:64:19:1f:75:6a:1b:
                    df:4c:7d:c7:b5:a5:4f:f7:f5:b0:6a:02:6c:48:87:
                    43:72:4c:4c:b4:56:d3:23:76:10:4a:31:1d:50:85:
                    8b:79:96:10:cf:03:70:db:c7:b1:92:35:ee:0e:3c:
                    4d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6E:0C:DF:FB:B3:E6:07:D3:14:FE:02:A4:99:B4:2C:9B:AD:1C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/a3e5781b-c448-3328-afe8-ee297ead9140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84/557a586a-7e35-45b6-bb87-b7631d4dda84.crl

            X509v3 Authority Key Identifier:
                keyid:A7:5D:FC:FE:7C:81:12:DF:CC:F4:87:0A:7C:4B:46:D5:48:44:45:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/557a586a-7e35-45b6-bb87-b7631d4dda84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:02:41:33:63:a2:7a:a1:b0:36:0a:b0:cd:f0:3d:f9:ad:73:
         4c:98:f2:b2:7d:c4:bb:1f:24:4a:3f:64:9a:df:25:11:07:df:
         80:4f:1f:36:bc:f9:f0:f9:f9:15:b3:52:3d:23:68:3f:1b:14:
         60:4f:0b:0e:22:b2:56:96:22:cc:2f:37:de:4d:44:e9:60:0a:
         5d:9b:2b:a7:64:ea:3c:21:64:f8:8f:8d:69:d9:51:7f:e5:3d:
         dc:ce:08:cd:22:8e:36:18:87:3e:69:13:3c:b3:a5:ea:fe:e2:
         9c:b0:b7:c2:e4:50:b3:7c:d1:b7:25:89:a4:65:3d:32:77:bd:
         01:75:33:1d:63:40:d0:5c:db:9b:a1:bd:10:aa:2d:e9:90:1f:
         a3:d0:2e:21:13:7c:d0:06:ad:c7:d9:f5:6c:d5:94:63:17:c0:
         06:6a:c2:b5:d9:0b:94:b5:83:f4:d7:c9:2b:10:13:8a:32:94:
         cf:80:6a:3c:41:f6:b7:e4:13:dd:d6:ab:2d:e8:9f:5a:6e:0c:
         94:3f:5e:6b:b6:f3:71:a1:80:c3:b4:8b:c1:82:5e:b2:87:f1:
         58:ad:d6:87:24:5b:8b:55:c3:75:f2:ad:c9:87:45:92:9c:e0:
         83:f5:7d:45:b3:32:af:70:70:bd:a5:95:fe:d4:61:83:b3:d6:
         07:34:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:54 2026 by rpki-client