Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/94a7e776-300f-3bec-8db3-fbeb5c3ec2bd.roa
File:                     94a7e776-300f-3bec-8db3-fbeb5c3ec2bd.roa (raw, json)
Hash identifier:          QY/nS74UN2B+LGTw8BKKbJlUepLIWD0u5JF4uzbjyv4=
Subject key identifier:   B0:1C:3E:49:6C:B0:08:FC:BA:08:20:CD:A1:E9:CC:0C:50:58:24:2F
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F5697286705D335FEB0AA2E00
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/94a7e776-300f-3bec-8db3-fbeb5c3ec2bd.roa
Signing time:             Tue 29 Sep 2026 17:59:32 +0000
ROA not before:           Tue 29 Sep 2026 17:59:32 +0000
ROA not after:            Mon 28 Dec 2026 18:59:32 +0000
asID:                     16509
IP address blocks:        168.100.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:56:97:28:67:05:d3:35:fe:b0:aa:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Sep 29 17:59:32 2026 GMT
            Not After : Dec 28 18:59:32 2026 GMT
        Subject: CN=01c6e965-9333-4a0a-8492-d7ffe5610e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:30:d1:46:50:3e:88:ff:64:bd:17:c5:a2:fb:
                    54:cf:6d:0d:7e:08:dc:06:6f:26:0c:1d:a6:1c:cf:
                    f2:93:c8:6a:5a:f0:1d:de:48:c4:92:f6:80:f8:5e:
                    80:ef:c6:50:25:28:9e:21:af:a1:7a:44:67:c9:f1:
                    75:67:3b:27:94:3f:90:f6:eb:eb:50:a9:ce:7e:17:
                    28:dd:f6:f3:b6:2f:cf:77:a5:be:87:cc:ea:ae:59:
                    e1:f8:57:57:7b:f2:1a:51:b7:70:28:df:28:c7:fb:
                    6a:47:df:46:b7:b3:02:58:b1:b5:bd:02:4e:6d:42:
                    5b:11:6a:64:3f:18:92:21:ba:eb:2a:5f:03:7c:67:
                    a5:e7:0e:fc:13:9c:09:93:a0:73:43:51:a4:0d:7e:
                    d8:b4:d3:12:f4:f8:d0:3f:74:78:41:80:5a:6d:34:
                    09:b4:6c:00:56:1a:24:c1:93:3c:eb:be:a2:7c:f3:
                    52:85:60:07:a1:15:26:69:93:7a:24:23:83:59:09:
                    e8:ff:b9:68:5e:53:ea:e6:0d:6b:2b:35:8e:d5:ef:
                    2a:1c:ed:1c:5a:2b:e7:6a:dd:70:a1:ad:a8:38:b3:
                    35:63:d6:f6:dd:35:39:b9:39:f4:fc:12:84:34:eb:
                    d2:b0:09:82:72:2f:2e:2c:6a:66:a9:09:7c:0f:24:
                    0a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1C:3E:49:6C:B0:08:FC:BA:08:20:CD:A1:E9:CC:0C:50:58:24:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/94a7e776-300f-3bec-8db3-fbeb5c3ec2bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6d:35:0c:2f:22:35:51:68:3a:e9:b7:e8:45:a9:c3:c9:78:
         db:52:56:a7:d7:ff:c6:fa:6b:d1:9f:64:40:cd:f9:10:97:a3:
         fb:6e:3f:d4:90:5e:32:a8:7c:f0:99:1a:77:82:22:9a:db:83:
         41:de:c0:f0:f1:01:f5:54:09:82:da:c6:20:02:b8:ed:cb:96:
         18:f2:9b:c1:97:fe:aa:91:cd:2d:e4:ec:ab:0b:8c:7c:1f:5b:
         66:e7:e0:c0:a5:f0:c2:a7:f9:98:3a:83:80:d4:e3:96:63:f7:
         e9:af:65:74:cf:8e:ee:29:a8:87:c9:3b:d0:67:af:c3:ba:45:
         08:7e:34:8e:d3:84:86:32:19:7a:8e:31:b2:5e:b2:a1:56:6e:
         87:5d:68:0d:bf:e0:97:9b:fc:3d:8d:fa:63:0b:67:fc:e6:e4:
         0d:48:6c:82:5f:d1:4f:f6:9e:3c:b8:10:78:eb:82:36:10:2b:
         af:34:5c:9f:48:c9:a5:c9:00:18:e5:ff:8f:c0:bb:a6:55:47:
         31:23:3e:be:83:f7:c0:f7:98:89:35:3c:b9:8c:3f:cc:43:76:
         d9:e9:35:57:d0:15:17:81:51:96:46:e7:f6:8d:3c:37:d5:87:
         40:78:28:ad:d3:1a:85:6f:07:8a:b1:8c:23:e6:0f:07:a6:74:
         b0:7e:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:03:10 2026 by rpki-client