Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa
File:                     2054c310-0e3b-3368-b12e-ea712380783a.roa (raw, json)
Hash identifier:          p+cEtSJgp6FzvlNE65TkyLrvgnlgjQy1HYCigBlPDDw=
Subject key identifier:   9E:56:08:23:DB:20:AB:CF:6F:4A:CD:B6:7C:0A:3B:D2:62:C7:8A:F4
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F506D555B746003C67FC461C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     9009
IP address blocks:        162.246.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:55:5b:74:60:03:c6:7f:c4:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=2ad5828a-6866-4536-818c-6b9ab09e943a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a8:32:9d:0b:b3:fe:5a:6b:f4:fe:09:57:10:
                    33:86:d4:c5:f7:d3:66:3a:45:a0:f8:94:db:0f:a7:
                    37:5c:65:5f:69:84:91:20:38:3f:7f:60:a8:4b:ed:
                    22:46:da:9f:cc:eb:61:7f:46:a8:bf:54:26:a9:79:
                    a4:13:29:63:a9:b8:23:9d:41:55:20:1a:72:8f:e5:
                    49:a7:cb:6c:1b:da:5b:46:fe:7b:df:4b:96:4b:2a:
                    f0:9c:97:98:6c:84:a5:0d:f6:21:ff:45:12:c1:4a:
                    c4:fc:65:8a:e6:84:fa:57:f7:e2:5f:5b:5c:28:6f:
                    0f:57:9b:57:30:0a:77:7c:14:8a:c8:31:8a:87:7a:
                    e2:1e:cb:e4:c1:dd:37:c3:f2:b7:55:69:54:5b:62:
                    ae:f0:21:99:c9:33:c8:53:e7:f8:e6:48:75:75:34:
                    4c:42:06:ec:d7:bf:85:52:87:fc:f8:b9:61:12:a4:
                    3a:fe:3e:2f:20:0c:54:5f:88:7f:8f:ab:1e:dc:d2:
                    a2:2b:98:c8:9c:33:12:74:af:2d:e7:12:42:ec:c0:
                    cf:11:09:62:b1:a1:e0:b1:0e:19:78:fb:10:54:d2:
                    42:1a:2d:52:67:26:dd:11:3f:8c:4c:4e:08:38:46:
                    42:be:45:d9:b4:57:bc:a5:e7:83:93:42:12:7e:8e:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:56:08:23:DB:20:AB:CF:6F:4A:CD:B6:7C:0A:3B:D2:62:C7:8A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ee:e2:9b:c2:c7:c1:c6:30:b6:b2:c7:9e:6e:1a:85:fe:ca:
         0b:da:8c:30:37:35:17:1b:3f:2e:2f:7a:ba:df:b4:df:30:62:
         c5:94:19:2b:d6:e4:2f:bd:0c:23:91:a7:53:22:53:47:bd:50:
         55:d0:4d:2e:9e:00:16:0b:24:22:27:55:b6:e3:1e:88:cd:6a:
         96:bc:7d:79:90:9c:55:67:d2:8e:9a:fd:99:75:e5:df:53:ff:
         c4:e7:02:af:c8:32:f2:2e:7e:14:d5:30:c1:ef:d6:f1:d9:91:
         80:a2:28:87:36:f1:54:98:db:78:23:54:57:cb:11:55:fa:eb:
         19:9a:d8:57:65:33:6f:57:ed:06:b7:c5:99:1d:da:84:a8:32:
         b0:b7:72:8c:f8:36:0c:ce:70:34:c7:d7:90:02:c6:3b:5b:56:
         45:26:27:98:70:be:09:f3:15:73:21:3b:4f:ec:18:e4:a3:91:
         6f:40:d0:46:f9:40:76:56:b8:a0:f6:c2:8c:9d:a6:3d:41:1d:
         8e:72:72:09:cc:68:87:9f:69:f4:60:9b:59:bd:4d:21:59:ba:
         0a:fe:14:31:31:26:c4:07:ae:fa:78:c4:fb:66:f8:50:ea:09:
         fe:dd:cc:aa:c4:aa:c0:c8:f9:14:ff:00:26:10:7f:ec:0f:91:
         12:18:d2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:17:12 2026 by rpki-client