Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5ca6065b-05d0-39e8-91fd-8b9b1ce8d187.roa
File:                     5ca6065b-05d0-39e8-91fd-8b9b1ce8d187.roa (raw, json)
Hash identifier:          xE1QZXPZssS90eQUly1lHeON4/EguK2tSeVusp02OnY=
Subject key identifier:   65:B3:C1:5B:58:33:AA:1A:49:B3:AF:74:E5:24:8C:0E:B2:6C:22:73
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E66DA16B1C835991D0D823C0C
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5ca6065b-05d0-39e8-91fd-8b9b1ce8d187.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     13576
IP address blocks:        208.53.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:16:b1:c8:35:99:1d:0d:82:3c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=576f7b88-5522-4107-abb9-7f98c065198f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:9e:c5:98:27:9f:49:d2:07:24:76:ec:90:
                    eb:65:8d:d7:51:7a:e8:a3:9e:64:c7:ac:23:06:c3:
                    9c:4c:5a:cf:45:37:3b:b6:2e:d2:c9:92:4d:cb:e8:
                    e9:b0:68:b6:cd:9f:c1:22:da:6e:88:89:c9:99:77:
                    23:e9:05:31:78:41:db:65:8a:26:a4:e6:77:25:e4:
                    eb:d0:18:cc:de:5f:af:44:c6:79:4b:8c:d1:94:26:
                    9d:1f:f6:60:54:94:a1:86:c4:94:94:37:12:2d:6c:
                    e9:93:84:ab:87:27:41:b2:68:15:33:9a:93:1d:e8:
                    22:f4:11:4c:8d:b5:91:43:29:75:18:60:2c:e2:07:
                    02:e0:66:f5:89:c8:10:c5:42:e8:8e:15:4d:54:12:
                    2f:8c:12:c6:de:cf:6c:43:8e:5a:23:b7:dc:a9:da:
                    da:b1:44:72:ee:0e:a4:b9:05:51:52:f4:9e:86:a5:
                    cb:46:28:be:1b:a2:cc:38:a7:3b:26:40:c1:74:d0:
                    6d:61:82:ba:d5:8b:c8:6d:37:e3:a9:47:b0:96:fe:
                    ed:94:46:12:39:67:c3:1e:bd:00:ea:f0:82:6e:79:
                    9e:29:b9:6a:62:18:8b:95:cb:47:72:7f:46:a2:2b:
                    4f:73:01:70:62:b1:0d:ca:f4:51:26:bb:e0:88:0a:
                    57:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B3:C1:5B:58:33:AA:1A:49:B3:AF:74:E5:24:8C:0E:B2:6C:22:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5ca6065b-05d0-39e8-91fd-8b9b1ce8d187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.53.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b3:56:b8:d1:df:31:28:d3:25:c3:66:37:87:c5:8c:1c:53:
         7d:00:6a:d2:f1:dc:d7:00:86:a4:8f:f9:1b:65:8e:d9:8a:5d:
         55:1a:9a:44:6f:e9:5f:c3:fb:6c:a3:63:e9:ba:20:79:ef:bf:
         f2:12:1f:32:c5:2b:7e:e5:06:b3:11:91:09:7c:2e:97:d8:60:
         b6:45:cd:b8:63:97:4b:13:87:01:e4:db:97:d3:86:8e:52:9e:
         b8:d6:bc:8d:c7:b4:e4:db:3a:a6:6e:55:7f:2f:dd:70:9e:eb:
         34:db:18:f0:0b:e2:a7:ad:50:7b:15:29:8f:b1:ec:f5:f3:da:
         87:ca:bc:89:8c:1c:ff:d6:bd:5c:1b:81:a5:93:29:9a:b0:1f:
         3a:17:b8:0d:be:97:32:2b:8c:08:82:27:69:94:cd:3b:46:23:
         2a:cd:13:31:bd:13:05:83:a5:99:d3:12:fb:81:d4:54:5c:07:
         78:5c:07:c6:43:31:38:69:c9:16:70:1c:4a:7e:fd:41:fa:7b:
         33:19:5f:41:62:db:14:5b:27:26:ee:5c:46:48:45:2b:8b:13:
         95:89:a1:59:6f:37:d1:07:5e:52:2f:ac:13:b0:77:b0:30:e1:
         a2:2e:01:84:3f:e3:b2:00:f5:4f:89:a0:73:da:9e:cc:8d:2a:
         43:94:b3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:12:13 2026 by rpki-client