Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa
File:                     867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa (raw, json)
Hash identifier:          PpyiSufytWJP4Pl6ZnB5XSLCg1X7DDMhgnk7lzCQMt4=
Subject key identifier:   8E:83:36:D3:8A:CB:FB:C5:4D:20:63:64:CA:71:76:86:20:71:5A:E5
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584EA8EC3F68A0675D4C01FCD440
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     14618
IP address blocks:        170.114.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:3f:68:a0:67:5d:4c:01:fc:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=74fa7a6d-6f1b-4fbb-9111-12bd05f55723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:95:44:7f:ba:85:fb:b6:4f:01:bd:6c:83:
                    d4:e1:50:4e:ea:40:27:3c:96:41:ec:f8:e1:13:f5:
                    5e:9a:cb:4d:8f:ea:aa:78:06:3a:b5:d7:40:63:19:
                    b6:6f:bb:84:83:4b:ab:76:d1:75:19:55:61:59:55:
                    f1:3b:f7:2b:6f:e7:59:01:60:72:5c:7c:5f:9e:67:
                    22:c5:cb:ed:f6:42:05:f0:21:74:3e:99:81:3c:43:
                    f5:33:49:c7:a2:70:f2:8e:67:5f:85:be:b5:ca:34:
                    ac:48:78:24:4a:9c:18:e6:b9:52:90:ab:06:16:70:
                    a1:20:40:6e:62:1e:8a:7b:ba:3c:00:e2:86:24:fc:
                    44:d5:7e:42:1b:57:e6:65:6a:11:9f:f4:a7:b2:03:
                    59:78:40:61:28:ae:09:4a:22:fc:41:2d:ed:80:13:
                    91:e7:9a:39:38:66:18:e3:0c:8e:0e:9e:69:f1:d8:
                    a0:22:42:7f:79:f9:44:47:7c:7a:a6:de:d8:7a:40:
                    3e:54:02:23:cd:33:42:e5:40:50:a0:15:5b:fd:e1:
                    fe:bb:44:85:0c:f9:f1:46:a8:54:1f:b5:01:a4:2b:
                    df:b8:c3:e7:67:2e:10:5f:ff:39:1c:c0:e3:f2:80:
                    e6:58:08:90:f7:65:7a:17:1a:2d:fc:86:ca:41:54:
                    ae:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:83:36:D3:8A:CB:FB:C5:4D:20:63:64:CA:71:76:86:20:71:5A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:fe:bd:5e:2a:df:28:97:fb:59:9e:89:73:c6:df:d4:b6:26:
         d5:33:50:7c:0e:a4:ff:8b:f8:ef:1d:cf:46:d5:06:2f:75:0c:
         b7:8d:a7:37:20:6f:89:87:25:c1:cb:78:5c:10:6e:65:7c:40:
         be:5b:b9:a3:ba:80:35:f9:21:43:33:75:1c:0b:e3:d6:5b:d0:
         20:8a:fb:fe:02:7e:b8:d5:89:5d:a7:36:1c:85:c9:5b:18:ba:
         96:5d:ab:ff:ae:6c:bf:4e:82:6d:de:8f:57:59:d0:54:1d:51:
         79:35:59:0b:b5:07:42:f3:25:4c:4b:55:2f:1f:97:bf:8b:b3:
         c8:f2:70:36:59:bd:6c:6d:e1:8e:07:b4:2c:2d:66:6d:70:6b:
         c3:1f:b5:e8:54:0c:a9:83:06:9e:f6:a5:bf:95:c1:d9:d1:0c:
         4a:9d:08:7f:99:08:3b:6e:01:0f:e2:d0:39:b9:d2:8d:e4:c2:
         f4:d6:44:5f:b9:62:79:7c:52:a8:00:0c:84:82:aa:8d:31:20:
         03:13:ae:f2:33:92:55:e1:d4:82:26:0e:1d:62:d6:46:5b:26:
         bb:44:e7:f5:1e:a9:2d:0c:47:8a:2d:8f:31:d7:73:57:6b:94:
         0c:96:0c:59:d6:52:d1:26:54:8f:13:f8:5f:89:b0:59:7b:eb:
         9a:ad:20:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:21:58 2026 by rpki-client