Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/91580a50-bf6d-3148-98d5-84c302ded745.roa
File:                     91580a50-bf6d-3148-98d5-84c302ded745.roa (raw, json)
Hash identifier:          9Zxg/DVz7tsFdV3h5y/ZdruauITEOxxcew0caMbU9cw=
Subject key identifier:   EE:52:E5:58:7B:74:A3:01:A6:88:D1:97:A3:87:D3:0C:AD:CB:4C:35
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584EE38CAA40DBC803901D4B0E80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/91580a50-bf6d-3148-98d5-84c302ded745.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     399439
IP address blocks:        208.53.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:aa:40:db:c8:03:90:1d:4b:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=a613c589-bb96-4784-a96d-09c64ee0c388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:0f:23:be:77:9e:df:0c:ab:ea:33:ac:11:
                    e2:27:88:2e:86:ae:56:6f:20:ad:b5:f8:ce:c6:b5:
                    d6:a5:d4:a7:f3:77:81:3a:5a:22:e9:70:af:e4:e3:
                    c1:e8:e4:5c:fa:8e:4b:59:14:b3:54:d7:8a:6a:e8:
                    a4:4f:25:f9:24:00:a9:96:31:ab:8a:22:13:94:42:
                    bd:37:65:8b:af:a6:ce:58:35:1f:a4:dd:26:d6:b6:
                    ee:fb:11:fe:3b:0b:77:24:6b:53:ad:d5:91:45:84:
                    b4:9b:2b:60:fb:b4:0d:40:a9:78:5e:2f:c9:d4:50:
                    1b:1b:29:f2:8d:be:d7:58:26:0b:d9:b9:60:14:52:
                    d6:c6:b5:87:0e:6c:aa:0a:73:52:35:f7:c5:84:42:
                    7f:0c:86:ec:b2:76:3a:36:2b:34:6b:f9:c2:95:cc:
                    aa:a4:da:4b:a9:62:f3:79:4d:bc:ef:4c:66:16:fe:
                    6e:91:5a:1a:61:69:e8:8b:9a:5a:3d:da:f5:34:52:
                    ae:21:80:4e:44:83:6b:e1:63:47:3f:bf:64:e0:be:
                    2e:db:c4:f8:d6:8b:d6:72:5e:03:5c:66:2f:53:aa:
                    d8:38:e5:31:3f:56:20:56:d3:d9:b6:70:a7:a6:a7:
                    ee:6c:5f:fa:15:48:a3:92:5f:06:88:32:a7:0f:43:
                    8a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:52:E5:58:7B:74:A3:01:A6:88:D1:97:A3:87:D3:0C:AD:CB:4C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/91580a50-bf6d-3148-98d5-84c302ded745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.53.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0b:f8:09:b2:6a:fc:53:4f:af:cb:75:c3:e7:0f:b8:aa:0c:
         c3:cd:ac:d3:52:32:de:68:77:2d:6e:02:65:00:88:63:39:c0:
         60:c2:61:ad:3e:24:ca:93:26:33:20:8f:d3:4c:dc:ad:16:6f:
         2c:23:9f:ec:0d:f3:2b:b8:c9:e1:63:45:7c:e6:0f:dd:69:0f:
         c3:11:bb:52:21:61:bf:e4:06:78:98:46:40:52:6e:f7:f0:8e:
         9e:5a:3b:4f:06:e5:ef:30:d0:a3:a9:da:cc:12:74:83:cc:39:
         df:c7:18:c3:84:68:cc:8e:81:a7:60:36:b6:00:f0:bc:05:9c:
         13:4a:86:f0:c3:6d:4a:17:c3:7c:64:54:83:1f:df:57:36:8c:
         3a:0b:f2:83:6a:2b:f7:02:7d:51:f3:3d:16:99:c6:30:8e:fd:
         1d:1b:04:35:9a:12:0d:2c:58:15:dd:1d:ed:80:9b:60:75:a2:
         5a:39:44:c0:c9:c4:6b:59:35:53:51:20:2a:72:60:e5:0f:5d:
         04:bb:8b:a3:ea:66:1c:10:21:a4:b2:70:eb:e9:06:b9:20:29:
         42:59:8d:4e:a5:b7:7f:be:fb:3a:c0:9f:12:37:5e:42:45:e2:
         23:aa:d1:91:fa:b6:fb:ad:ba:d6:71:ab:2e:21:d1:87:b9:1f:
         a5:97:ba:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:48:32 2026 by rpki-client