Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/6746124a-3683-3f18-9ae8-9683b043b0c6.roa
File:                     6746124a-3683-3f18-9ae8-9683b043b0c6.roa (raw, json)
Hash identifier:          YClAaPs5EoPMkOavwASDjm6gB2JzPZYWPFCgho2NENU=
Subject key identifier:   06:40:EC:8D:6C:AE:F1:7D:63:A8:6B:A0:84:82:70:6A:43:4D:8F:7D
Certificate issuer:       /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial:       010D0C9F4328584F6612DA2BB264F97ECC963600
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/6746124a-3683-3f18-9ae8-9683b043b0c6.roa
Signing time:             Mon 05 Oct 2026 07:05:53 +0000
ROA not before:           Mon 05 Oct 2026 07:05:53 +0000
ROA not after:            Sun 03 Jan 2027 08:05:53 +0000
asID:                     213683
IP address blocks:        199.244.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:12:da:2b:b2:64:f9:7e:cc:96:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
        Validity
            Not Before: Oct  5 07:05:53 2026 GMT
            Not After : Jan  3 08:05:53 2027 GMT
        Subject: CN=15776998-62ea-4a44-bb82-1669be2211a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:0c:aa:c2:b8:6f:f3:4e:98:f1:34:60:17:
                    3a:e2:3b:80:39:d8:54:1e:f3:17:50:03:15:c4:a3:
                    25:2e:a6:f7:3e:6c:99:f4:a7:e0:cd:34:3b:2d:ba:
                    f7:0d:ce:36:ba:4c:41:b5:5f:32:c7:64:09:00:02:
                    a1:a6:f8:1a:8a:3e:12:4f:a8:42:9b:d1:67:7f:ef:
                    73:ad:8c:26:e5:52:34:1c:f6:b0:1b:64:b8:3e:9e:
                    2c:e4:df:02:23:4a:94:0e:6f:90:bf:5b:33:c4:7a:
                    5d:31:7a:69:9b:ba:9c:df:3e:4c:85:ad:84:e0:fd:
                    e8:87:a6:f3:5f:aa:02:d9:13:88:b3:c6:90:64:73:
                    62:91:55:1d:a0:ba:5d:96:e7:6a:b5:1b:1f:54:11:
                    52:67:e9:6c:37:f7:ec:3d:2f:cb:ac:0b:3b:ff:21:
                    a9:b1:14:d5:ed:8c:dd:ee:46:f5:35:cc:08:fc:cb:
                    8f:f5:c3:79:76:d9:83:1f:db:3c:3f:39:e0:1e:22:
                    76:9f:15:22:b9:b2:48:d8:d2:2a:2e:0e:f6:26:d9:
                    a7:5b:22:cb:ff:95:be:69:b9:41:09:a8:ca:61:65:
                    46:d2:b5:7c:5c:63:3e:55:ba:0c:fb:d6:70:6e:7e:
                    16:87:cf:08:f3:c4:04:86:f6:dc:a3:f3:bd:57:e8:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:EC:8D:6C:AE:F1:7D:63:A8:6B:A0:84:82:70:6A:43:4D:8F:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/6746124a-3683-3f18-9ae8-9683b043b0c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl

            X509v3 Authority Key Identifier:
                keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:86:44:c6:2c:e6:25:86:20:16:86:8b:12:85:65:d7:11:5f:
         a1:dd:0a:72:06:27:a1:fd:99:84:76:18:f1:89:4e:c8:e3:59:
         1f:08:ea:cd:16:fc:78:e3:bd:ae:69:c4:f7:0c:97:73:35:a5:
         24:d2:63:97:9e:4d:29:81:c0:0e:d5:65:9c:d2:ce:02:32:2f:
         bc:85:ef:0e:4b:84:98:c8:09:ea:83:51:b7:63:2a:d2:ac:12:
         e7:5d:18:61:a5:cd:c5:43:a7:d4:08:bf:ee:a2:40:7e:cd:ef:
         23:df:a2:7e:92:d9:aa:8d:8e:3a:2f:33:64:4c:bd:59:5c:ad:
         15:e6:ca:d8:56:02:10:de:69:78:84:5a:90:98:94:d8:e7:8c:
         d6:d5:0a:3a:98:f9:57:fc:ed:00:13:02:0d:a8:5c:db:08:25:
         30:9f:27:73:09:29:0f:ad:94:22:83:0d:b4:fe:c1:d8:0e:1f:
         3f:ae:db:4e:64:a3:51:63:2f:99:a5:5a:0a:17:9f:7f:e6:b2:
         a6:53:52:70:08:e9:fa:22:84:e4:78:5f:08:2f:93:70:a6:29:
         a4:c3:e6:ea:65:5b:fa:3c:25:81:84:6f:c8:ee:25:8d:7e:84:
         ff:11:5b:00:1e:66:c3:e2:38:c0:81:c8:14:0e:29:b4:de:ea:
         f3:a5:c1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:22:01 2026 by rpki-client