Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/2a05a681-1650-3576-bf73-853857f2eed4.roa
File:                     2a05a681-1650-3576-bf73-853857f2eed4.roa (raw, json)
Hash identifier:          7HYtL/hPMaxvtUhNDInzNXI3p0EWBpIRm5YswQCy3Jc=
Subject key identifier:   EA:6F:13:35:3F:86:F6:49:14:A2:E0:7A:7D:E4:50:44:44:6E:C4:9D
Certificate issuer:       /CN=67e403a1-9185-4f5a-9910-5089c51f9fc3
Certificate serial:       010D0C9F4328584EEA874607BE3F6669F6EC4F80
Authority key identifier: 1A:58:4E:A2:10:EC:DB:67:03:28:75:03:0B:C7:60:12:A3:83:80:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/2a05a681-1650-3576-bf73-853857f2eed4.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     81
IP address blocks:        185.83.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:46:07:be:3f:66:69:f6:ec:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e403a1-9185-4f5a-9910-5089c51f9fc3
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=f31ff8cd-3105-4efc-a3ce-9639b3870c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:98:93:49:28:ff:94:ff:e2:66:00:65:cd:
                    03:d5:16:af:64:30:15:3c:a0:89:4e:bd:66:dc:c7:
                    ec:6d:66:36:3f:3a:cb:ad:6e:1c:c4:0c:15:b9:77:
                    1f:d8:21:4b:e6:51:5f:f9:a2:3a:31:4d:7a:56:ae:
                    9d:e5:6f:d8:62:16:67:e8:8f:e1:08:a9:e2:6e:0d:
                    01:f6:4f:5c:fc:2b:7f:94:23:19:a5:b7:5d:5c:bf:
                    c3:c6:5f:40:12:0d:44:bd:a0:c0:d5:05:d2:3a:35:
                    e4:fd:a3:f0:20:31:4f:a1:c2:2a:0c:a1:2f:ef:85:
                    d7:30:95:eb:7d:58:80:85:34:77:f7:90:96:11:af:
                    09:10:85:16:ed:ec:82:38:90:91:76:73:58:be:00:
                    8a:e9:79:89:07:74:8d:5f:fa:5b:1d:70:f7:5a:bf:
                    ca:43:ca:af:c0:5f:5a:cc:92:a8:64:ad:9a:57:6b:
                    0b:9f:dd:9b:35:09:b9:14:d2:97:d7:16:05:1d:96:
                    05:cc:ae:d4:2b:73:2c:4e:f5:75:06:54:43:d0:77:
                    b5:7f:e8:cf:bd:df:05:8d:77:be:9e:a6:90:4d:82:
                    57:77:ec:14:ed:96:2f:56:62:61:30:2f:98:67:ff:
                    cb:1f:46:5e:e9:f9:62:80:27:94:cb:df:4b:52:a5:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6F:13:35:3F:86:F6:49:14:A2:E0:7A:7D:E4:50:44:44:6E:C4:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/2a05a681-1650-3576-bf73-853857f2eed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3/67e403a1-9185-4f5a-9910-5089c51f9fc3.crl

            X509v3 Authority Key Identifier:
                keyid:1A:58:4E:A2:10:EC:DB:67:03:28:75:03:0B:C7:60:12:A3:83:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/67e403a1-9185-4f5a-9910-5089c51f9fc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:13:5a:e3:d5:7d:fd:49:c4:a7:42:b8:93:d7:47:1b:53:d0:
         68:c0:18:d2:4c:23:43:30:57:02:36:67:f8:d7:bc:4f:63:f4:
         8a:0d:ab:e4:0e:96:1a:bd:1c:a2:cd:45:05:2f:de:93:08:2c:
         ef:f0:bf:b1:6c:56:b7:5c:30:74:e1:ee:0c:21:15:e3:2f:cb:
         fb:ca:e0:94:10:1e:18:0f:80:cb:51:ed:b8:2b:5e:3e:e2:60:
         b5:ed:b7:73:ce:7a:f2:31:86:46:fa:f2:93:74:85:3e:48:13:
         ad:f7:de:1e:8c:2a:9a:ec:71:c9:5d:86:19:b8:27:35:da:f5:
         6e:1c:a4:61:57:7b:21:6c:e6:94:ba:ce:02:b7:77:3a:30:02:
         56:09:db:97:f9:82:40:bd:71:75:42:12:24:c3:bb:75:ed:74:
         36:48:c0:6e:a0:26:ca:3d:13:d6:00:05:a2:bb:47:6e:08:36:
         48:74:88:fa:eb:78:1a:ad:92:cc:d3:ab:e9:9d:30:bc:55:d2:
         0e:7f:fa:1d:43:d6:70:4e:c5:0d:a2:4c:81:81:44:99:05:5b:
         24:9d:32:03:0e:99:6b:6d:aa:c6:05:5a:c3:f9:f8:35:48:be:
         90:5c:03:ad:7f:31:54:fd:85:da:52:d3:ce:64:d8:59:53:c1:
         53:64:9f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:30:30 2026 by rpki-client