Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/31e8856d-4d91-3de1-ae52-4ad5328a6ec5.roa
File:                     31e8856d-4d91-3de1-ae52-4ad5328a6ec5.roa (raw, json)
Hash identifier:          G1N+aEDRfOfgfevHcbsUyg/sTO3WzR5OGdNv9r2fnik=
Subject key identifier:   E8:D7:89:AD:9F:B0:85:38:6E:03:25:78:69:39:23:43:72:DB:04:47
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584F4976AA6D108F60E9F421DE80
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/31e8856d-4d91-3de1-ae52-4ad5328a6ec5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     206216
IP address blocks:        170.205.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:aa:6d:10:8f:60:e9:f4:21:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a1e1b5aa-f551-4563-b214-aee6f149688d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:2e:0b:81:3a:df:d3:0c:b7:e8:94:5f:e4:
                    d1:a4:96:3a:f5:3e:aa:93:a3:40:c8:3e:a3:f0:20:
                    e5:31:3a:05:bf:ca:72:89:52:97:66:fc:35:cd:de:
                    55:21:7c:67:92:23:be:5a:26:20:cf:29:0d:2e:01:
                    f8:08:18:e9:1c:ee:37:4f:6b:9d:5a:08:b6:d7:7e:
                    13:64:02:e3:f4:2e:16:d6:3e:b5:c1:46:81:6d:16:
                    e4:26:11:25:e2:cb:8c:be:32:51:5c:2f:62:ef:f7:
                    66:47:67:20:88:6d:36:c2:9a:c7:5e:f7:9e:39:8e:
                    f0:40:7a:dd:98:a9:8d:c7:4a:b1:cc:dc:e6:c7:5e:
                    94:fa:9e:b2:e7:f9:e6:e9:df:fe:d9:60:48:e8:fc:
                    3a:fb:73:42:35:73:04:b6:41:41:05:e7:09:9d:9e:
                    b3:92:27:76:5b:0a:bc:7b:e0:d1:89:e9:93:37:33:
                    20:0b:b0:05:2b:46:8c:9b:f0:f4:f4:ed:eb:71:0f:
                    e5:e5:af:0e:55:d5:6b:66:29:00:d5:2b:b6:23:6f:
                    c6:6a:95:c2:1d:b9:4b:40:b4:60:fd:ac:ae:b4:c9:
                    3f:76:d7:79:9d:7c:bd:9b:d3:74:f7:4c:77:19:a1:
                    10:66:5a:63:7f:50:6e:e1:cf:50:15:7b:3c:80:42:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D7:89:AD:9F:B0:85:38:6E:03:25:78:69:39:23:43:72:DB:04:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/31e8856d-4d91-3de1-ae52-4ad5328a6ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4c:a5:04:0a:73:ac:39:46:0a:5f:21:e7:c3:1d:27:8e:3a:
         bd:ae:f5:c4:ee:e7:91:ab:b1:37:86:e7:e7:fe:2f:b0:ec:40:
         63:2b:e4:43:15:ff:26:82:4c:83:8f:6c:14:c3:95:99:06:6f:
         f1:80:75:73:0d:a0:9e:15:c4:22:8a:84:ca:b5:50:6f:df:ee:
         9e:fd:ee:d6:37:bd:52:c9:fd:37:d5:ba:47:7f:ce:ed:36:75:
         df:0b:16:fe:c8:3c:36:f0:b7:56:85:77:2a:2b:3e:64:29:ee:
         6f:09:5c:bd:24:a0:fb:65:44:69:80:b6:eb:07:61:58:7c:64:
         95:ef:76:95:3c:54:17:7c:7a:37:a7:32:b3:ee:28:19:46:e7:
         96:01:4b:ea:a4:e5:9e:7c:ce:d5:3d:ce:1e:11:d0:f3:ff:28:
         66:a4:ec:bc:0a:fe:a9:07:d5:fe:f6:c5:7c:b5:d7:54:6d:5d:
         a5:f4:e3:d4:cc:dc:24:9c:ac:34:53:e7:d9:8e:7b:14:c9:62:
         aa:f6:13:02:c6:a6:69:2a:8b:a7:57:77:8b:52:47:d0:a2:ec:
         66:ec:b5:fb:60:05:20:98:16:92:e2:b9:c6:ab:d6:30:2e:3d:
         66:b2:90:7b:8f:81:2d:64:cf:f4:85:ac:6f:e0:2e:d5:26:54:
         80:40:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:58:11 2026 by rpki-client