Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/e170ee04-516a-39c1-b7fe-64448521940d.roa
File:                     e170ee04-516a-39c1-b7fe-64448521940d.roa (raw, json)
Hash identifier:          7vpkZLg4JIySfqP6amkdzgoDNYw3fWNIGbHDKWYjSk4=
Subject key identifier:   5F:30:34:A8:D8:3C:33:43:86:6F:08:FA:AA:38:35:7D:A3:A9:3F:D0
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F2CBFF99AC63DD61D23C4BEC0
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/e170ee04-516a-39c1-b7fe-64448521940d.roa
Signing time:             Mon 14 Sep 2026 18:17:49 +0000
ROA not before:           Mon 14 Sep 2026 18:17:49 +0000
ROA not after:            Sun 13 Dec 2026 19:17:49 +0000
asID:                     22611
IP address blocks:        205.134.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:bf:f9:9a:c6:3d:d6:1d:23:c4:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep 14 18:17:49 2026 GMT
            Not After : Dec 13 19:17:49 2026 GMT
        Subject: CN=ce7cd8b8-10e8-44e5-a29c-c4148be27f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:e7:67:11:42:70:29:d8:43:31:b1:c2:96:
                    75:a8:64:28:68:d9:8c:b7:84:3a:0e:53:f2:b6:c2:
                    55:52:4d:70:ae:72:f3:d5:6a:38:58:a9:0c:c5:e4:
                    88:ba:43:2e:aa:9f:eb:3b:14:1a:5c:5f:ce:59:19:
                    de:a7:af:b9:90:96:59:60:98:51:83:16:25:b0:00:
                    22:fc:6c:14:51:aa:97:1d:4d:ad:ba:43:d4:39:61:
                    7c:42:5b:5b:9b:e8:61:fb:a0:cc:4c:00:38:51:bf:
                    c1:f7:e2:77:f6:07:6f:2f:62:bf:8e:a5:e6:94:da:
                    0b:41:3f:8f:51:3e:bd:0d:a6:d1:85:5f:f8:f7:e3:
                    7c:f4:95:78:3d:3d:e7:df:7e:fb:19:03:7c:5f:12:
                    7e:9a:9b:0e:32:0a:3a:11:eb:6e:8e:35:07:4a:61:
                    6c:5b:d4:62:fc:03:9f:07:62:44:70:07:bc:68:b5:
                    dc:92:d8:95:2f:f6:04:c0:26:63:e6:40:d7:b8:65:
                    8f:10:b3:61:d2:69:1c:89:76:04:37:0d:e2:1e:b4:
                    6c:bb:d3:2e:d6:b2:fa:6b:21:eb:fe:ca:e4:1e:48:
                    93:70:60:6f:06:71:42:bc:9b:ff:ee:2e:e8:b2:a4:
                    f7:b3:41:77:1f:57:0c:70:b1:0e:78:ba:9e:c9:2a:
                    c6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:30:34:A8:D8:3C:33:43:86:6F:08:FA:AA:38:35:7D:A3:A9:3F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/e170ee04-516a-39c1-b7fe-64448521940d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:36:65:cd:de:5d:5d:0d:44:16:9e:67:16:1e:50:ae:48:62:
         d5:e3:fa:16:08:de:e0:37:05:32:42:7f:04:00:64:be:36:72:
         7c:9d:06:ac:82:1e:9b:1b:e0:14:e4:1c:c9:69:46:5e:ad:b4:
         ec:1c:a3:31:38:66:c4:e3:94:89:3c:5f:37:4a:05:57:74:9c:
         8e:10:1a:a6:0d:b0:02:a4:e7:a0:03:00:e6:6c:c5:71:4d:67:
         dc:a2:aa:56:62:50:81:c6:71:92:6d:ca:b3:5c:16:b9:f8:08:
         50:c3:b6:81:17:e6:e8:af:c2:7c:dd:c7:43:1b:39:45:0a:30:
         5c:f0:9a:a9:4c:fc:11:a0:21:f9:a0:3a:51:47:4f:3f:67:a4:
         3d:ba:87:41:1c:c2:be:69:db:d6:9b:2b:ff:42:be:1e:66:49:
         39:7b:49:72:a4:41:13:57:88:8e:cf:f7:27:3a:e7:e5:55:e3:
         b0:23:8e:5e:fb:3d:d3:77:a8:a4:32:a6:20:08:8a:8d:dc:07:
         e7:2f:47:41:a7:17:a5:80:c5:e3:90:b9:5d:76:3f:b2:0c:4b:
         f4:d3:03:bf:a9:a4:8a:63:de:9d:7d:40:98:2a:f2:6e:dd:69:
         27:1d:43:1d:b9:78:69:8b:1d:6e:3e:f5:c9:13:17:8f:4b:58:
         90:58:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 00:16:45 2026 by rpki-client