Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/293c24be-5877-3a18-8d22-1b2ad2d976b3.roa
File:                     293c24be-5877-3a18-8d22-1b2ad2d976b3.roa (raw, json)
Hash identifier:          kyhBP//8gQPXFOM0ADqqg3oO67LOoiRa9o2408SuNSo=
Subject key identifier:   3B:2D:29:A2:3A:D6:DD:FD:B6:6A:E4:4C:70:54:6D:49:70:5E:10:CE
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F4328584E428F265168AA110266E782E0
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/293c24be-5877-3a18-8d22-1b2ad2d976b3.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     22612
IP address blocks:        159.198.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:26:51:68:aa:11:02:66:e7:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=bd59ebd4-98d1-42c2-a4d3-e3bccfe0e93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:54:09:6b:cc:21:e2:df:3e:d7:eb:97:60:
                    35:70:4a:3b:f6:5f:3c:ac:67:92:a1:d4:0a:9d:49:
                    c2:97:4f:4f:64:e2:2d:f9:c3:fd:15:99:24:b5:17:
                    81:25:1a:d3:cf:64:81:2a:f9:1a:2f:7b:e5:d2:b1:
                    6d:10:e5:4e:40:e2:22:93:9a:ac:be:79:d5:38:40:
                    29:1d:f1:35:55:b6:1c:dd:d3:62:01:f7:9e:6e:91:
                    12:32:12:ac:65:da:29:b2:df:28:62:ee:91:56:24:
                    ce:c4:ea:10:42:42:c9:c4:e0:f6:5b:0c:76:77:d8:
                    45:c2:26:5d:c3:50:c5:e7:84:ea:50:25:a8:5f:c6:
                    cf:d0:34:39:5a:23:30:8b:b5:31:fd:85:a2:92:5f:
                    31:d3:bc:e8:ae:67:aa:50:4e:73:55:17:53:69:23:
                    4c:e5:29:6e:96:de:7b:b0:ad:6c:a8:6a:50:bf:17:
                    2d:5a:86:2b:65:2c:d9:ba:fd:49:4b:40:32:f5:1f:
                    b8:df:eb:cd:db:61:e7:1c:15:5f:29:b0:5e:68:61:
                    a9:4a:3e:fd:dd:40:56:2f:dd:15:11:1a:7c:69:84:
                    8b:4a:72:64:6b:6c:88:d7:77:cd:c1:5d:29:0d:ed:
                    1d:86:1c:6f:4f:b4:3d:5d:36:9b:d3:d3:72:d9:fb:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2D:29:A2:3A:D6:DD:FD:B6:6A:E4:4C:70:54:6D:49:70:5E:10:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/293c24be-5877-3a18-8d22-1b2ad2d976b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.198.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ea:14:22:be:74:cf:43:8c:a2:3c:87:d9:77:39:28:f1:d5:
         d5:90:ae:87:db:c1:91:95:51:0b:d6:a2:64:84:36:c6:5b:36:
         b5:7b:7f:c4:6e:f1:56:36:1f:0e:c3:40:98:ff:48:29:40:b1:
         d3:e6:6f:2a:68:15:d7:5d:eb:57:30:aa:ad:9d:6c:0e:f9:b4:
         22:d2:0a:b3:2d:e5:09:ae:b5:8d:05:40:94:2f:a1:24:e7:4f:
         c7:60:a4:57:76:a0:7f:c6:ce:80:67:c3:ee:15:04:16:82:f1:
         a0:aa:79:9d:db:fe:55:f7:b3:93:ac:91:cc:81:d1:97:f1:2c:
         e6:4e:15:0d:3e:cd:b9:0a:b7:f8:0b:c6:3d:31:cb:87:a4:d6:
         1d:96:19:84:16:49:9b:b7:72:48:66:22:02:2f:51:62:5c:8d:
         6d:60:3b:0d:78:0c:f4:52:b1:88:7c:ec:5a:d8:e5:4e:3d:6d:
         0e:07:23:5d:df:35:d5:c0:23:91:89:ce:fb:a0:3f:91:1c:fe:
         7b:64:3b:69:21:e0:61:c1:03:2c:5b:39:b3:35:3c:f6:65:98:
         21:f1:6b:1b:2a:3e:aa:ee:3f:a8:13:dc:3b:8e:3b:d5:6e:06:
         ce:ec:1d:97:f5:2d:5e:d1:97:33:e2:41:ca:64:ff:72:48:f8:
         24:39:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 21:48:48 2026 by rpki-client