Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/4ce2f042-ef86-3b67-aa8d-19c71fb2f2d0.roa
File:                     4ce2f042-ef86-3b67-aa8d-19c71fb2f2d0.roa (raw, json)
Hash identifier:          kycIZe1mJMxkR/dtbQV+UzLc4CUDfeftwi0HJ/vsbyA=
Subject key identifier:   B1:CC:72:ED:1F:36:C7:C8:5D:EE:F5:3D:54:22:3D:38:E1:EB:B3:BD
Certificate issuer:       /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
Certificate serial:       010D0C9F4328584F5FE87BCFD2BF8175AD7DD3A0
Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/4ce2f042-ef86-3b67-aa8d-19c71fb2f2d0.roa
Signing time:             Sat 03 Oct 2026 02:05:40 +0000
ROA not before:           Sat 03 Oct 2026 02:05:40 +0000
ROA not after:            Fri 01 Jan 2027 03:05:40 +0000
asID:                     14299
IP address blocks:        170.146.236.0/23 maxlen: 23
                          170.146.236.0/24 maxlen: 24
                          170.146.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:e8:7b:cf:d2:bf:81:75:ad:7d:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
        Validity
            Not Before: Oct  3 02:05:40 2026 GMT
            Not After : Jan  1 03:05:40 2027 GMT
        Subject: CN=f66a69b8-fa6a-4122-908e-401dfd90f722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:70:a4:33:31:e1:f4:10:cc:fc:af:39:8f:
                    45:17:c7:84:76:62:e7:8d:48:f3:35:3f:fa:97:e3:
                    a3:d3:38:a4:4b:02:58:2b:9f:f4:f6:b4:80:47:5b:
                    98:3a:7c:55:7a:a6:d8:0a:3a:49:9c:54:9a:bf:4a:
                    55:84:7c:1b:fb:77:c6:66:a5:d5:49:58:4d:52:f9:
                    d2:cf:b8:c9:ca:de:b8:09:2e:bc:a4:29:19:72:bc:
                    02:b5:53:ba:58:97:8e:86:e4:ee:51:8d:53:68:ce:
                    3c:cc:92:5c:f0:9d:61:35:6f:15:5a:60:09:0b:12:
                    2a:4e:3a:1a:84:75:2d:d5:80:74:ac:82:01:4b:f9:
                    c3:4b:58:73:f8:83:af:6c:4f:53:b6:41:11:4a:3f:
                    8a:4d:4c:fc:f8:e4:1d:e3:4b:07:89:d2:1e:d6:b4:
                    21:6b:d4:40:75:df:a3:50:79:7c:a6:29:bd:48:d2:
                    ed:f9:bb:cb:49:96:0b:28:f3:04:a4:d4:2f:11:c4:
                    ad:0c:3b:e4:00:71:e1:8a:30:d0:35:87:30:de:1c:
                    32:d7:ca:8e:39:52:fd:d9:f2:8a:5a:2a:30:ca:21:
                    fd:41:50:97:0e:92:ad:9e:7c:47:66:58:b8:69:b8:
                    c1:b8:90:57:ef:a5:eb:08:49:d5:53:33:74:b2:1a:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CC:72:ED:1F:36:C7:C8:5D:EE:F5:3D:54:22:3D:38:E1:EB:B3:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/4ce2f042-ef86-3b67-aa8d-19c71fb2f2d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl

            X509v3 Authority Key Identifier:
                keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.146.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:40:17:28:d2:d9:92:0c:53:2c:08:7d:14:50:2c:3f:90:87:
         4d:c6:00:90:67:e0:1f:06:7d:29:03:e6:c5:2a:fe:a6:2b:95:
         1a:c4:f5:3a:06:30:fd:2a:4d:79:25:c2:e9:87:42:52:21:66:
         ed:f1:3c:00:47:d9:2b:ee:3b:7d:4e:1c:00:de:89:84:20:9e:
         0e:26:e6:98:dc:c3:0b:21:e0:37:47:97:79:47:ae:84:b8:e3:
         98:7d:31:d3:f5:dd:a3:be:44:23:40:ac:93:95:4b:61:63:27:
         ad:7c:fc:f3:74:44:3f:ac:6a:17:2c:16:11:89:18:f8:6d:8d:
         7b:64:1c:5b:0a:0f:a7:c0:66:f2:dc:ed:a1:db:02:7f:5c:66:
         0b:82:db:7e:d3:e9:fc:0e:d5:7d:2f:88:32:94:85:8d:45:09:
         6c:a5:97:e1:55:b3:a2:35:5a:af:4c:4e:3e:62:15:b6:cc:6e:
         d2:e2:93:6e:e1:02:e7:48:af:b0:fc:26:71:ab:af:ea:d4:5e:
         3a:1b:f5:77:81:27:9f:00:a5:60:05:6c:a4:ed:fb:38:dc:33:
         5f:6c:c5:f7:c4:32:09:5a:0e:ef:48:f4:d5:c9:a6:3d:15:2b:
         ff:64:62:3f:ff:e8:27:31:0d:de:66:a9:24:49:33:13:0b:52:
         78:85:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:21:45 2026 by rpki-client