Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1cea3e22-1c5b-3053-b380-822f7a74ce06.roa
File:                     1cea3e22-1c5b-3053-b380-822f7a74ce06.roa (raw, json)
Hash identifier:          7gL0aIlvi4P5L7gUZm+m/bZBxiPJoc3IByRTlV8s4Vc=
Subject key identifier:   BB:A5:C4:3E:BF:E3:51:02:2D:CD:90:DE:2F:65:A3:E0:FC:F2:E9:C3
Certificate issuer:       /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
Certificate serial:       010D0C9F4328584F5FE98F97DBCAF40B50E72300
Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1cea3e22-1c5b-3053-b380-822f7a74ce06.roa
Signing time:             Sat 03 Oct 2026 02:07:50 +0000
ROA not before:           Sat 03 Oct 2026 02:07:50 +0000
ROA not after:            Fri 01 Jan 2027 03:07:50 +0000
asID:                     14299
IP address blocks:        170.146.240.0/21 maxlen: 21
                          170.146.240.0/24 maxlen: 24
                          170.146.241.0/24 maxlen: 24
                          170.146.242.0/24 maxlen: 24
                          170.146.243.0/24 maxlen: 24
                          170.146.244.0/24 maxlen: 24
                          170.146.245.0/24 maxlen: 24
                          170.146.246.0/24 maxlen: 24
                          170.146.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:e9:8f:97:db:ca:f4:0b:50:e7:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
        Validity
            Not Before: Oct  3 02:07:50 2026 GMT
            Not After : Jan  1 03:07:50 2027 GMT
        Subject: CN=0210a83a-8d14-49f1-8507-6bbd21d5d012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ec:98:81:29:69:61:bb:5f:ff:1b:9d:78:a0:
                    c6:74:94:3c:70:a4:92:0b:b8:1f:5a:42:db:64:fd:
                    af:32:25:5f:33:9d:ba:91:7e:7a:4b:7c:ab:51:4d:
                    b3:37:36:37:58:fb:ab:33:74:86:72:00:ff:21:4e:
                    3a:a3:13:0b:e0:f8:95:30:5a:f7:e0:d7:5b:9c:a6:
                    3b:4d:49:d3:dc:1d:6f:af:fb:99:48:62:6e:a0:3c:
                    28:60:c1:82:0a:81:0e:e0:2e:f6:cc:a8:34:7d:1e:
                    5f:40:b0:8a:4d:2b:00:a7:54:22:35:31:31:62:69:
                    91:00:55:ba:e3:93:4e:82:bc:5f:d2:79:0e:14:96:
                    0e:15:c2:5d:21:8c:a9:7d:59:40:4b:2c:32:05:68:
                    e9:40:40:2a:2a:01:c9:6c:ef:f3:73:64:87:d3:18:
                    46:dd:96:01:f0:7c:58:3e:ad:5e:99:87:5b:d1:3a:
                    e3:51:5b:33:aa:ba:d8:2d:11:02:31:82:3e:20:6d:
                    75:e4:bb:a0:15:86:aa:f5:08:a9:a4:9c:92:87:ed:
                    a5:85:05:c3:81:d3:da:29:37:15:e6:82:62:87:bf:
                    8f:58:20:19:e0:6e:9e:6a:21:5c:fc:68:7f:0c:2b:
                    d5:dd:02:8e:b5:b7:34:6d:e7:41:5a:c5:bb:68:ff:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A5:C4:3E:BF:E3:51:02:2D:CD:90:DE:2F:65:A3:E0:FC:F2:E9:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1cea3e22-1c5b-3053-b380-822f7a74ce06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl

            X509v3 Authority Key Identifier:
                keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.146.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:a2:ad:13:a0:90:9d:cf:11:dd:ef:5d:1b:c5:9c:89:d6:
         c0:29:7d:31:70:58:fa:04:69:38:d7:fc:db:4d:22:bd:86:95:
         24:16:60:23:22:01:e4:88:0d:62:ac:fa:e1:74:64:96:f0:b5:
         e5:fb:5d:d1:53:1a:0c:de:b2:98:48:d7:d3:e9:6d:80:0f:07:
         10:13:7e:be:a4:f9:5c:ea:a4:8b:1f:5b:63:53:5e:a5:96:2b:
         b4:37:06:f9:a8:f8:7d:82:eb:d0:bc:12:bd:60:68:3c:d0:48:
         a3:da:47:dd:7d:19:ab:77:b5:95:be:ae:06:98:b3:06:fe:1c:
         63:0d:f2:f6:4d:c2:b1:c9:f3:85:c4:22:f1:7d:23:b8:ea:c7:
         00:90:b9:10:2e:27:13:fa:f3:9e:6a:c5:34:01:5d:51:d6:63:
         15:34:4c:f0:66:0e:9f:2c:c2:bc:5a:90:4e:48:e9:0e:02:d3:
         82:7d:f5:df:a6:9b:5a:75:d2:3a:f6:2a:d7:5c:34:35:2a:ef:
         5a:9b:28:60:76:73:a1:43:0a:6d:dc:26:8f:c6:85:dd:0b:0b:
         1a:b7:4e:be:37:e9:d7:7d:6b:fd:f6:bf:e2:11:3c:9c:34:b2:
         86:87:c2:6e:70:6c:96:dc:4d:4b:c7:3b:f4:83:26:4b:6d:e2:
         5d:3e:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:47 2026 by rpki-client