Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa
File:                     9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa (raw, json)
Hash identifier:          fgKPOLUredEAAvBcPKHKj7iJ9Yl5/xlBuxhlrg7Yd/g=
Subject key identifier:   70:F7:5C:82:B7:86:64:8C:72:04:70:26:95:B3:41:75:B4:9E:3B:05
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F71EDB04F43F1F1BDBF6051E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     36183
IP address blocks:        172.226.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:b0:4f:43:f1:f1:bd:bf:60:51:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=28e8f5be-7c07-4d7a-a92d-1d78ce0ba24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:98:2b:07:85:e6:f5:07:68:7f:80:74:d5:
                    b7:85:a0:34:95:f3:9d:b5:de:1e:37:5c:68:24:a9:
                    c0:cc:1a:9b:ab:11:9b:20:09:b9:08:7c:34:3a:39:
                    09:5a:4f:e9:85:f2:55:4b:5b:ee:15:bd:17:60:34:
                    1d:7e:6e:3c:14:9e:8b:70:99:5f:81:9c:23:d7:a2:
                    8b:8e:1e:e9:b1:d2:07:4c:4a:23:ed:61:c5:8c:ff:
                    b7:8f:db:3d:a6:a7:eb:90:ee:32:db:9a:28:36:ab:
                    bc:52:6c:b8:04:5e:d2:4e:4e:2b:3e:7b:88:dd:d7:
                    66:ef:88:62:9a:07:15:de:12:7e:8d:c2:59:2d:fe:
                    18:39:4d:51:c0:1f:74:e0:65:c0:e7:2f:16:23:18:
                    cb:a4:93:2a:38:72:c4:0d:3c:d1:38:9e:66:e2:68:
                    fa:b2:c8:31:69:81:53:43:88:7c:6a:73:90:97:08:
                    11:4e:82:40:2d:ab:b2:f4:f3:ab:78:0e:d5:04:25:
                    69:e9:cd:fc:57:3c:3a:6a:d0:15:9d:85:14:7a:a1:
                    df:6e:cb:ed:2e:a6:50:1e:0d:36:34:eb:b7:7a:21:
                    85:3f:66:c4:f5:1e:80:2e:d3:a4:d5:b1:f8:32:68:
                    dd:ec:1c:60:ad:e3:d6:dd:8f:ad:a2:f6:17:ac:80:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F7:5C:82:B7:86:64:8C:72:04:70:26:95:B3:41:75:B4:9E:3B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:cb:66:ba:97:4f:b2:c1:d9:95:82:5f:1f:1d:28:0b:3c:ff:
         ac:a0:62:ec:7b:0d:69:b8:2a:a1:74:77:6f:4d:98:a1:1f:5d:
         6a:f9:8e:76:b1:a8:98:74:aa:93:09:0e:20:57:a1:b3:40:ac:
         fc:6f:97:b3:70:51:10:2b:2c:5d:5c:74:25:b1:80:fb:d3:10:
         d1:57:17:c0:46:02:a7:42:2d:d8:c1:7f:f5:a5:8a:b9:34:6c:
         61:cf:b6:a5:f1:e4:69:5e:36:e3:f0:4f:2b:0d:99:a2:80:f9:
         8a:ef:05:5b:e5:36:7d:6b:25:b1:8f:30:72:0f:4c:bc:9b:46:
         22:f4:e7:07:72:0d:53:0d:2c:ef:be:e7:62:94:7b:e2:e8:1b:
         12:c8:04:42:cd:a1:60:d8:3a:71:19:78:e7:0a:f0:78:d7:64:
         62:fc:e1:89:a5:25:91:38:ef:92:db:93:ac:45:42:19:7b:2a:
         b7:aa:4c:e5:4f:93:90:94:39:16:c3:bf:5f:ae:6f:5e:95:18:
         8b:ab:8a:ff:82:1c:c2:34:cb:2f:5e:0a:b4:2b:96:e4:73:fc:
         5c:b8:73:ba:90:58:a3:c2:94:b9:52:32:d8:fe:e4:19:66:f3:
         6b:3a:38:e6:f6:47:af:16:11:a1:3a:85:33:65:ac:19:d7:8d:
         32:c3:75:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 09:54:38 2026 by rpki-client