Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/4b4424ec-bb36-364a-a380-21f06af3ce9d.roa
File:                     4b4424ec-bb36-364a-a380-21f06af3ce9d.roa (raw, json)
Hash identifier:          VfkIHn47GDI0ze7sgDSO0tsJJLEMvlpAe/fTGWL7v+c=
Subject key identifier:   E7:9D:BC:CA:BB:CD:70:CB:20:68:F9:51:FD:C1:8E:30:DC:6E:D6:4C
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F4328584F1072AFDDE938183E5C3D03C0
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/4b4424ec-bb36-364a-a380-21f06af3ce9d.roa
Signing time:             Fri 04 Sep 2026 14:59:28 +0000
ROA not before:           Fri 04 Sep 2026 14:59:28 +0000
ROA not after:            Thu 03 Dec 2026 15:56:29 +0000
asID:                     53813
IP address blocks:        153.81.120.0/24 maxlen: 24
                          153.81.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:72:af:dd:e9:38:18:3e:5c:3d:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Sep  4 14:59:28 2026 GMT
            Not After : Dec  3 15:56:29 2026 GMT
        Subject: CN=c23ecdb3-e293-4d63-a9b2-f7f5de73451b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:c4:e9:75:12:b6:b8:42:60:2d:81:48:81:
                    6a:f4:37:a2:fc:91:4f:e9:df:48:b5:07:47:50:16:
                    12:01:56:cd:95:67:e1:5f:16:ec:82:9d:df:3e:63:
                    1c:bf:b9:b4:0c:9c:60:08:9f:ca:a8:c2:75:d5:ec:
                    d9:7a:eb:f0:2f:f2:e1:19:8a:1c:fe:3a:d7:62:29:
                    6b:fb:a8:ea:ea:79:fb:b2:85:f0:21:ea:dc:b5:c3:
                    cb:0f:d1:90:5b:b3:a3:11:34:d7:c8:61:6a:c1:47:
                    59:08:d0:e3:8a:e1:42:f2:d9:bd:d9:f2:33:ce:9f:
                    df:cd:5f:08:9e:1b:62:8c:1f:40:1b:31:f3:34:10:
                    a8:2e:c2:99:af:dc:e6:b7:93:e6:5d:2d:88:0d:cb:
                    6a:8e:45:55:38:cd:b9:7c:34:fb:e4:12:57:9f:15:
                    aa:8d:1c:25:cc:a4:00:72:f7:74:64:69:23:ac:32:
                    03:58:26:37:a6:11:08:46:50:39:ef:9c:f8:9f:39:
                    6f:e7:ba:cb:4b:2d:26:c3:2d:12:c8:29:a5:88:e0:
                    c7:43:b8:06:e3:99:95:a0:0d:c1:c0:d9:11:98:2d:
                    34:05:1a:67:77:cc:bf:c5:19:66:37:50:ca:e4:74:
                    5b:e4:37:df:7a:6d:04:a5:5e:67:8b:67:3b:10:82:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9D:BC:CA:BB:CD:70:CB:20:68:F9:51:FD:C1:8E:30:DC:6E:D6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/4b4424ec-bb36-364a-a380-21f06af3ce9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.81.120.0/24
                  153.81.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:29:cf:66:91:42:30:9f:18:36:e0:99:44:83:7e:7b:fd:a2:
         bf:a7:aa:3e:97:92:68:3d:b3:5c:eb:1d:a2:75:f6:f3:fa:1e:
         38:e8:b1:89:3e:a3:8b:4b:9e:72:1d:ed:a7:a7:f0:8d:f6:5b:
         f6:b9:f7:d0:72:09:35:39:3b:b8:fc:48:97:64:e6:83:b2:bf:
         b2:06:27:e0:7a:c4:e2:1d:94:a9:c4:bc:da:f7:f4:cc:00:8c:
         e1:8c:b5:25:56:c6:4f:5e:4f:20:55:78:6b:a2:0c:2c:93:07:
         d7:bf:ee:8f:f3:d8:75:8c:f2:82:ff:6d:be:ed:bc:c7:89:7c:
         c9:28:b3:f5:99:90:c8:c9:9f:cb:15:fe:a7:3d:ee:16:fe:a6:
         f0:68:5a:47:26:09:d3:ba:7c:3c:1d:09:c3:29:8c:9e:64:0b:
         24:7d:c3:4c:82:46:c8:cb:d2:50:44:ee:06:11:67:3c:d8:1d:
         01:8d:b0:00:6a:c0:2c:47:4d:64:a8:09:56:8d:d9:00:c4:10:
         9a:66:67:6e:b4:56:31:92:12:d4:f8:bc:c9:3e:da:45:a4:7b:
         fc:9a:ad:91:89:24:ce:56:ae:cf:dc:5c:0a:f8:e0:2b:b3:40:
         76:06:7c:ec:d2:0b:d4:95:24:5f:17:fe:07:5d:5b:f3:7f:cc:
         07:21:ec:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 14:06:42 2026 by rpki-client