Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/681d1eea-5cd7-31f8-8387-cc45cfb604d8.roa
File:                     681d1eea-5cd7-31f8-8387-cc45cfb604d8.roa (raw, json)
Hash identifier:          ljMmlvsVZc/j6RPG74e46vp2fAZa9t3kdAjXXPEpJlY=
Subject key identifier:   56:D3:E2:AC:D0:E4:8E:14:45:BD:98:32:81:BA:AF:B5:B7:A5:86:C4
Certificate issuer:       /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc
Certificate serial:       010D0C9F4328584ECD590B0E622CDDDB8135E000
Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/681d1eea-5cd7-31f8-8387-cc45cfb604d8.roa
Signing time:             Tue 11 Aug 2026 14:08:38 +0000
ROA not before:           Tue 11 Aug 2026 14:08:38 +0000
ROA not after:            Mon 09 Nov 2026 15:08:38 +0000
asID:                     13335
IP address blocks:        159.53.1.0/24 maxlen: 24
                          159.53.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:59:0b:0e:62:2c:dd:db:81:35:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc
        Validity
            Not Before: Aug 11 14:08:38 2026 GMT
            Not After : Nov  9 15:08:38 2026 GMT
        Subject: CN=1ba203c9-c36e-4d7e-96b5-469e27868871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:d1:c9:36:69:b8:8b:45:d5:d9:3a:16:66:
                    4f:f3:9c:4b:39:fb:de:eb:e0:85:d7:40:cb:70:32:
                    98:ca:5d:25:28:74:34:db:fd:7e:3c:d6:16:50:20:
                    bb:71:e2:8f:b5:db:de:14:52:f8:42:0e:e0:7c:f0:
                    e2:3c:80:21:07:95:6f:01:35:c1:6b:c9:4e:b6:e4:
                    47:d9:82:08:8d:29:8e:16:64:cc:40:5d:72:e3:01:
                    d0:36:c9:05:2a:c2:2e:61:67:0a:c4:16:b9:69:9c:
                    cb:97:2c:81:87:92:8f:d3:75:e8:4a:b4:ac:d7:73:
                    77:de:19:67:b5:13:c7:de:ea:29:d4:12:51:d2:f5:
                    92:82:66:f2:d4:35:90:a7:d7:8c:f9:10:73:bb:91:
                    80:7a:7c:12:a2:42:69:13:54:c9:96:85:5e:c5:04:
                    b9:74:75:f7:87:34:5c:2e:e7:db:9a:e3:89:cd:ba:
                    ea:ab:54:73:66:47:62:c6:f0:f4:1f:ff:a9:52:ed:
                    4d:d4:9e:1f:fe:2d:04:cf:19:8f:a4:05:27:3e:a2:
                    43:97:d8:10:09:d6:26:f5:df:dc:bb:56:15:3a:3a:
                    70:f7:de:00:27:5f:44:e3:e8:a9:6b:12:2e:02:b1:
                    06:b9:91:ae:57:7c:34:b9:ff:1c:bd:5b:2c:d3:f9:
                    3f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D3:E2:AC:D0:E4:8E:14:45:BD:98:32:81:BA:AF:B5:B7:A5:86:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/681d1eea-5cd7-31f8-8387-cc45cfb604d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl

            X509v3 Authority Key Identifier:
                keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.53.1.0-159.53.2.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b7:79:fc:20:90:d6:9d:80:55:d0:8b:30:d8:f9:ce:6a:f1:
         6e:b9:31:33:ba:78:b4:27:87:c7:f5:cc:d0:b4:42:85:fd:c3:
         87:8f:29:3e:26:69:6c:f7:a3:8e:c9:ca:4a:6d:d1:b7:f1:5a:
         db:9e:73:f0:7c:36:a6:04:f4:9c:b0:6a:a1:71:7f:aa:9e:97:
         07:07:e7:40:dc:d2:50:f2:2f:2d:97:7b:29:d9:a3:42:53:51:
         3c:93:f9:90:db:67:6f:7c:4a:7f:ea:cf:e8:50:32:5e:9f:d7:
         0e:3e:ea:72:e8:6f:aa:f6:b9:87:1b:fa:cf:21:38:de:f5:e1:
         74:f0:e9:1b:d3:07:e1:aa:de:83:97:fb:6b:30:fb:dd:84:f3:
         4e:0b:e2:aa:a7:98:33:e4:70:96:a1:57:c3:a0:b4:22:6a:60:
         f0:5e:3a:6d:4e:7a:c2:d9:34:7c:cd:ea:24:c7:ab:23:3b:61:
         e4:6e:5b:30:87:21:ff:2d:8c:56:cd:4f:22:75:49:2b:34:1b:
         ca:d9:05:4b:cf:1f:02:96:a0:c8:57:82:32:41:88:0e:7c:11:
         0e:9c:d0:60:0d:01:e9:2f:74:1c:3b:11:18:af:62:aa:55:e0:
         a3:87:3e:0e:14:1b:9a:0a:b9:18:e7:99:ca:4c:f9:3f:78:3a:
         29:24:2e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:22:49 2026 by rpki-client