Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/8179b9d3-7a5c-3fe5-985e-0e0ea0b41db8.roa
File:                     8179b9d3-7a5c-3fe5-985e-0e0ea0b41db8.roa (raw, json)
Hash identifier:          L21Moo05oxFR9YZKFWFGQxEAD4/Rp27orGoj52GU8HE=
Subject key identifier:   67:5B:E3:20:EC:9F:40:3C:66:17:EA:43:39:C2:FA:06:22:3A:D4:85
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584F093D18A176CAD53F81E43080
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/8179b9d3-7a5c-3fe5-985e-0e0ea0b41db8.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        170.114.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:18:a1:76:ca:d5:3f:81:e4:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=772b9f2e-3ad9-41c6-a8d8-9ebcdb54c829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:9b:f3:7d:ba:b7:b7:22:2f:a4:b2:3c:62:
                    c8:90:13:9c:84:7f:89:3d:eb:f1:be:4c:ea:d0:d7:
                    93:a1:65:68:b8:17:cc:8c:d5:a0:0a:e8:38:85:f7:
                    69:4b:33:8b:ce:ea:c5:09:ac:f9:21:55:e4:b4:80:
                    55:dd:6f:2d:b4:16:db:a6:e7:15:d2:fa:14:18:23:
                    27:fa:c2:80:fb:8c:58:42:89:72:d2:3b:01:a6:d0:
                    71:6e:2f:4b:4e:32:f1:9a:39:55:54:0d:08:b6:67:
                    2c:41:17:34:a4:f4:50:14:52:11:9f:5d:f0:1b:5c:
                    43:e0:18:24:ae:69:1f:77:86:af:ce:99:b3:59:3f:
                    9a:9f:6a:c4:7f:81:16:37:40:56:35:41:9a:1c:e0:
                    4b:bd:ae:71:35:4f:01:f8:99:7d:64:5a:16:fb:2a:
                    f7:67:42:e9:64:5f:e7:1e:b8:1b:39:14:a2:f3:e5:
                    8a:3b:ec:09:1f:b6:75:ed:55:a2:4b:0c:f4:e9:73:
                    d6:e1:eb:85:83:14:55:42:56:9b:0b:d5:5e:49:07:
                    06:54:cd:0c:78:a2:26:d8:21:4c:d4:26:1f:7e:ba:
                    09:ac:6c:5c:13:db:9f:dc:22:f4:dc:44:22:8e:65:
                    bf:43:95:48:6d:62:a3:15:40:06:fa:28:d0:4d:6e:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5B:E3:20:EC:9F:40:3C:66:17:EA:43:39:C2:FA:06:22:3A:D4:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/8179b9d3-7a5c-3fe5-985e-0e0ea0b41db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ac:17:0d:81:f6:aa:ea:81:10:93:10:80:e3:09:3d:eb:67:
         65:57:9d:15:ca:ae:4f:58:12:6c:37:d4:41:3e:73:9c:ef:bd:
         9c:59:6f:9f:b4:4c:a0:75:67:77:c8:98:71:46:2e:ef:0a:d5:
         d5:34:1a:f5:69:27:9c:8a:a8:a4:fd:ab:49:2c:3f:93:0c:62:
         b3:0a:66:0e:6a:ac:db:a4:e2:e8:cd:86:d9:cc:62:09:52:54:
         de:a5:14:c0:07:33:26:31:10:71:1d:dd:fd:0b:62:96:f2:bf:
         d5:92:c6:b1:e4:0f:26:d4:ba:33:6e:2b:9b:0a:46:65:62:2c:
         8a:09:00:7b:57:bf:fd:ed:53:12:c1:12:33:31:01:b0:7c:6f:
         e8:1b:d0:0f:2f:ed:c6:a2:c7:31:3a:1f:10:86:94:f5:b6:f1:
         47:1c:bf:fd:55:55:b2:01:06:e2:1f:cf:d6:c5:b3:dd:16:7c:
         b4:3e:e5:43:d4:d6:1c:25:37:51:f2:84:78:52:87:0f:97:80:
         96:da:e5:de:97:25:fd:7b:5a:de:eb:b1:f0:46:e0:93:d7:d8:
         6e:1a:ec:2e:9a:b5:65:3f:98:a0:f3:f1:38:ba:f3:22:cb:5f:
         7f:b4:9b:07:a0:7f:af:60:86:99:3a:91:0a:56:13:e5:f0:79:
         87:63:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:01:04 2026 by rpki-client