Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/510d5549-a9f8-3043-82be-cf52d15d49bc.roa
File:                     510d5549-a9f8-3043-82be-cf52d15d49bc.roa (raw, json)
Hash identifier:          lzX+1QvQIGZXI9h8aUqojufYWAp4wKOP9I8geV9CQJA=
Subject key identifier:   12:4D:B0:03:AB:69:9C:A9:60:F5:2B:79:00:1D:6D:53:66:3A:F5:4D
Certificate issuer:       /CN=1a4498c7-70e2-4ca4-b18f-4a107d0a6313
Certificate serial:       010D0C9F4328584EC0A7129EFB4969539DCCAF00
Authority key identifier: 8A:F8:32:26:BB:C6:50:50:85:B1:33:17:D2:97:08:AA:77:A5:1E:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/510d5549-a9f8-3043-82be-cf52d15d49bc.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     40159
IP address blocks:        192.152.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:12:9e:fb:49:69:53:9d:cc:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4498c7-70e2-4ca4-b18f-4a107d0a6313
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=5a969d22-d420-4cc2-aeb1-eb773e7d81e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2f:81:b9:2f:9e:02:b1:33:81:b5:2f:e7:8f:
                    b6:e7:15:13:0d:f2:1b:d0:ce:00:77:3a:5c:6f:2d:
                    10:e8:18:97:b6:86:48:79:87:10:1d:26:54:a1:6b:
                    d4:37:07:40:26:17:79:72:0e:7e:0b:79:9c:d3:34:
                    32:2c:8c:0d:47:62:25:bf:37:cc:d9:1a:60:55:53:
                    22:15:74:17:58:42:df:37:df:0f:cf:b1:81:d9:1c:
                    ae:27:a4:fa:e2:4a:12:9f:0c:38:4f:2c:4f:bf:4e:
                    15:fa:a0:9b:df:de:18:6b:a0:f6:1c:9a:9d:52:0d:
                    55:eb:14:83:46:83:61:73:28:13:02:51:f8:e0:db:
                    52:e5:78:bd:a4:54:9b:3b:d5:07:c8:de:da:0f:f8:
                    76:7c:33:80:39:2e:7d:cf:45:f3:0d:cd:4d:75:05:
                    37:e5:c4:f7:91:03:4f:fb:7b:91:52:0c:6a:d1:76:
                    c9:b8:e2:b6:f0:7b:58:9b:de:e3:00:35:78:17:83:
                    e5:d5:9b:f2:08:e6:fa:65:55:0a:25:fe:9c:1b:cb:
                    9f:2b:6b:62:43:30:64:be:0a:8b:20:86:c0:d3:84:
                    7d:bd:2e:0a:be:c5:26:f7:b9:53:c8:5d:1b:e1:38:
                    c7:61:34:ea:cb:7b:b7:1a:5c:28:d8:8e:8e:f9:c9:
                    7f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4D:B0:03:AB:69:9C:A9:60:F5:2B:79:00:1D:6D:53:66:3A:F5:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/510d5549-a9f8-3043-82be-cf52d15d49bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.crl

            X509v3 Authority Key Identifier:
                keyid:8A:F8:32:26:BB:C6:50:50:85:B1:33:17:D2:97:08:AA:77:A5:1E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:d1:5a:6a:b1:91:4b:f8:8e:ea:40:78:41:3a:de:c5:ee:25:
         49:6f:d4:19:44:56:29:25:20:3a:d4:2b:dd:82:3d:db:ad:64:
         f6:fd:20:30:f1:24:05:8c:9c:98:19:8f:15:bf:31:f1:ec:fa:
         6b:9b:f4:9e:df:d7:fd:aa:07:15:01:84:cf:47:69:ec:3d:fd:
         12:7d:b1:58:20:de:66:eb:87:fa:7a:f2:f0:4c:6c:82:a7:a0:
         60:27:5e:f0:f4:41:1d:57:ae:93:5c:92:a9:62:e5:71:24:8d:
         1a:f6:37:78:de:a3:31:07:46:eb:30:0b:96:32:bc:4f:8f:20:
         07:c7:5d:81:2a:fb:6b:8d:c4:c0:ad:de:77:d8:eb:fd:e6:d5:
         6a:a2:c9:13:4c:0c:3a:19:30:77:c8:28:4f:63:c8:fb:99:aa:
         8b:84:c5:c5:61:e8:13:5f:a6:6c:cc:0f:2b:fa:1f:4f:ed:e7:
         f4:c8:00:01:76:71:48:99:0d:88:37:47:fb:c6:7b:af:81:0f:
         34:af:f3:e8:e8:40:ae:ad:a8:90:29:23:0e:ef:ba:f2:58:6e:
         eb:b9:91:82:8d:cc:68:b1:0e:b0:9e:a5:05:45:8f:31:8f:87:
         36:ad:d3:d3:c5:9e:9a:3d:12:1a:3c:b5:14:5d:c0:86:9b:cb:
         bf:ec:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:04:58 2026 by rpki-client