Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/a656dad3-6549-3bf2-b3e8-9a8673b60cf1.roa
File:                     a656dad3-6549-3bf2-b3e8-9a8673b60cf1.roa (raw, json)
Hash identifier:          lLNKzJw8hGJTR/Ywo9OQKN5r+G+Y4OzCULb3eTByvoY=
Subject key identifier:   E1:70:3A:70:D6:E5:96:F7:EE:33:11:AB:28:0D:79:1A:81:4E:1E:FB
Certificate issuer:       /CN=5dbc0e41-c852-43ba-9c18-262c63aec1a9
Certificate serial:       010D0C9F4328584F82ADAC4B3607EEB36642B8A0
Authority key identifier: C1:5F:30:1E:29:71:B4:5D:0C:80:DA:BF:13:2B:FC:CE:71:BE:DB:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/a656dad3-6549-3bf2-b3e8-9a8673b60cf1.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     20001
IP address blocks:        162.253.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:ac:4b:36:07:ee:b3:66:42:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dbc0e41-c852-43ba-9c18-262c63aec1a9
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=888d624a-bdc1-4a40-b21e-839beb2174dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:45:0b:f1:00:74:ea:79:92:e2:30:01:43:
                    a4:3b:57:b0:2b:20:1e:ae:19:29:af:a8:e6:49:e4:
                    b5:7e:64:e5:b2:f9:9d:1c:dd:b6:25:cc:3f:42:d2:
                    1b:a2:63:62:3e:6b:c6:60:8c:a3:6e:fd:b7:69:53:
                    bc:fd:c9:e2:0c:9e:e6:73:d2:d5:ea:d3:cd:36:6a:
                    9e:c9:0c:03:2b:19:b6:42:c0:f1:20:f9:22:49:0e:
                    35:77:14:40:9b:c6:bc:92:34:65:04:70:77:4d:4a:
                    90:b6:1f:ef:de:c0:93:1e:ab:08:7f:96:bb:73:70:
                    8c:54:c1:7d:2a:d7:4d:21:7b:9a:b8:87:3f:47:36:
                    de:04:33:05:aa:65:d5:a3:12:77:52:d8:12:17:4e:
                    d5:2c:09:d9:82:10:cf:82:4d:4a:84:5c:2b:aa:fe:
                    59:01:1d:58:5e:bc:9f:0f:69:f9:61:f9:11:0a:ef:
                    1e:e9:d5:19:b5:89:a4:07:6f:ff:37:71:6e:21:37:
                    37:ce:e7:09:bd:87:72:5e:8f:66:00:f1:c6:1c:ef:
                    27:40:31:ed:a4:0f:34:4b:58:f3:1b:54:15:a2:e9:
                    7a:e3:af:8d:d7:31:ec:1b:c3:41:f5:83:4d:1a:f1:
                    75:c8:47:31:9c:0c:0f:5b:4e:94:42:eb:8c:4b:f0:
                    e7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:70:3A:70:D6:E5:96:F7:EE:33:11:AB:28:0D:79:1A:81:4E:1E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/a656dad3-6549-3bf2-b3e8-9a8673b60cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.crl

            X509v3 Authority Key Identifier:
                keyid:C1:5F:30:1E:29:71:B4:5D:0C:80:DA:BF:13:2B:FC:CE:71:BE:DB:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:5e:72:b3:bb:df:9a:75:95:78:a1:e3:71:8d:11:81:f9:
         ee:bb:55:fd:86:63:7b:44:6f:46:71:56:1b:bd:03:77:52:e7:
         a8:fe:1c:ab:fb:c0:31:86:83:53:ca:96:f9:90:29:14:1e:13:
         4c:85:96:d5:c3:c3:bb:21:20:d5:ba:8d:6e:63:5e:45:92:5f:
         23:2b:23:5c:1f:fe:8b:ba:4c:cd:08:ca:d1:ec:08:c0:f4:d0:
         9d:6e:4f:ea:61:25:e4:ac:21:3a:48:02:3c:af:84:d8:a5:ed:
         fe:28:d3:77:77:2d:1c:43:74:2e:d0:77:de:11:d2:c6:86:ee:
         6b:28:04:fb:5e:6d:f3:5b:c2:10:fd:dc:85:3b:f5:f8:5b:85:
         8d:e0:9e:f1:20:8a:55:9c:65:ce:74:98:07:80:de:dd:2d:0c:
         e6:95:3a:d9:56:b6:0c:c9:56:82:fb:9a:70:8d:c3:52:af:c6:
         80:9a:8c:3b:c4:9e:14:e8:43:94:22:22:6b:46:b0:c9:4b:42:
         76:aa:34:9f:a9:48:ed:a2:23:0a:73:93:c7:3c:a8:4b:34:d6:
         63:f7:39:4c:3c:32:13:b3:a3:52:72:51:26:bc:c9:15:8c:2d:
         a6:f3:8a:8d:ff:bb:58:fa:b3:c2:6b:37:fd:61:f8:9d:3c:94:
         44:ce:22:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:48:25 2026 by rpki-client