Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33/ee2ab095-ee72-3b54-a30f-261e3cf510a8.roa
File:                     ee2ab095-ee72-3b54-a30f-261e3cf510a8.roa (raw, json)
Hash identifier:          p9N+QANx9juyhGD52cmBwM3+D8WQMfkiA+APdv+cJT0=
Subject key identifier:   C2:3D:A1:41:FA:46:B2:60:D9:60:CC:30:EC:71:C5:C6:E9:B5:98:8D
Certificate issuer:       /CN=b9301a9a-3a95-4fc1-a558-009c22466c33
Certificate serial:       010D0C9F4328584ECD45C0B99034C57EA28544C0
Authority key identifier: 9C:79:F0:C8:B9:BB:DC:C3:6F:67:A8:D8:2E:B6:7E:0E:B1:FE:D7:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33/ee2ab095-ee72-3b54-a30f-261e3cf510a8.roa
Signing time:             Tue 11 Aug 2026 13:29:46 +0000
ROA not before:           Tue 11 Aug 2026 13:29:46 +0000
ROA not after:            Mon 09 Nov 2026 14:29:46 +0000
asID:                     399138
IP address blocks:        155.103.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33/b9301a9a-3a95-4fc1-a558-009c22466c33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33/b9301a9a-3a95-4fc1-a558-009c22466c33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:45:c0:b9:90:34:c5:7e:a2:85:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9301a9a-3a95-4fc1-a558-009c22466c33
        Validity
            Not Before: Aug 11 13:29:46 2026 GMT
            Not After : Nov  9 14:29:46 2026 GMT
        Subject: CN=3a17f85a-40ef-4a4e-9faa-fe73a1b06715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7b:36:2f:8c:17:aa:44:5b:c1:cf:5c:b4:c3:
                    c5:ee:b1:76:43:12:b8:d1:f9:97:ec:97:a1:e6:57:
                    77:66:e3:8f:71:af:95:45:c6:7c:87:0f:d7:42:4c:
                    14:4e:21:ea:82:c0:f7:d1:35:80:54:52:65:72:00:
                    06:f2:96:e1:44:e3:0d:a6:e4:88:16:6b:ed:0f:8d:
                    47:08:a1:4a:64:07:11:60:23:3d:67:ac:37:45:f4:
                    15:90:27:a3:35:34:5c:74:08:76:f8:56:68:a7:c8:
                    8c:1e:30:81:21:4b:9a:30:0f:3c:08:79:90:8e:ba:
                    e3:f1:83:d7:93:23:02:cb:7c:43:4c:2d:77:ef:b3:
                    70:48:31:fe:84:e1:38:82:17:14:61:ae:30:ac:10:
                    03:c1:01:fe:54:96:f8:55:4b:65:b3:38:76:b5:d5:
                    77:7b:b9:cf:2b:54:bf:1b:ec:26:8c:86:fd:59:0e:
                    3c:63:b8:41:ff:12:06:0b:7a:97:d8:7d:50:6a:d9:
                    45:a1:15:03:ee:69:d1:f5:03:24:e7:05:1e:dd:b4:
                    18:f2:41:92:fc:a7:e1:14:7a:ec:b9:af:99:32:58:
                    fe:c7:3d:f1:18:2b:9f:5f:1d:32:45:9b:21:c0:c7:
                    fd:b9:79:e9:dd:1c:8e:bb:94:1b:c9:6e:a5:81:b5:
                    3f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3D:A1:41:FA:46:B2:60:D9:60:CC:30:EC:71:C5:C6:E9:B5:98:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33/ee2ab095-ee72-3b54-a30f-261e3cf510a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33/b9301a9a-3a95-4fc1-a558-009c22466c33.crl

            X509v3 Authority Key Identifier:
                keyid:9C:79:F0:C8:B9:BB:DC:C3:6F:67:A8:D8:2E:B6:7E:0E:B1:FE:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b6:eb:54:dc:c5:14:26:52:01:17:eb:f9:88:23:c8:9e:94:
         24:4d:01:2a:5e:2b:c7:0e:ee:e4:f2:ab:6b:15:cf:28:b6:1f:
         f8:3d:61:67:32:d0:39:31:7b:f5:0c:70:84:f8:e3:9d:2f:b4:
         47:8a:4b:fb:d1:b8:88:9a:47:9c:0e:0c:0a:01:a2:2e:e7:7f:
         6b:60:ff:cb:d7:ff:91:fa:7e:2a:7b:c4:5e:ec:3c:39:b9:77:
         2e:05:57:7f:40:9f:92:b0:9e:aa:1e:50:de:65:c9:03:69:d9:
         a6:30:64:b0:aa:68:e6:13:80:31:a3:2a:ce:36:70:bb:c3:3f:
         47:71:44:6f:c2:2e:75:6f:02:47:dd:81:0e:2c:16:43:2f:81:
         d4:30:bb:bf:95:b3:90:42:44:7b:48:37:c5:fd:1c:35:e2:a3:
         d9:fe:f7:bb:6d:74:59:7b:eb:3b:01:b8:d7:51:9e:5b:00:36:
         02:88:f6:8c:79:f5:a8:70:c0:f9:98:ab:26:38:15:f2:61:09:
         f0:c0:b8:db:48:70:ee:34:d7:cc:f3:6d:9e:55:93:9e:e0:03:
         d7:c3:65:ad:cd:cd:ca:9b:81:0c:bc:56:fc:05:f3:8a:7c:a4:
         b0:63:23:4e:23:ba:60:1d:10:a3:e7:e4:9b:c2:6a:ae:27:25:
         3b:4a:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 03:40:43 2026 by rpki-client