Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/81602dd3-9168-3f92-92f7-975e31f5c3b3.roa
File:                     81602dd3-9168-3f92-92f7-975e31f5c3b3.roa (raw, json)
Hash identifier:          e+XTLCBgOTCqN4j0vphnAPupuFNM8e6Rhd43uTBDRw4=
Subject key identifier:   B2:D1:9F:F8:26:D6:A2:43:63:1A:85:36:57:C5:D2:C7:FB:52:77:3D
Certificate issuer:       /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
Certificate serial:       010D0C9F4328584F5FF161F538BEC991EB084B80
Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/81602dd3-9168-3f92-92f7-975e31f5c3b3.roa
Signing time:             Sat 03 Oct 2026 02:23:36 +0000
ROA not before:           Sat 03 Oct 2026 02:23:36 +0000
ROA not after:            Fri 01 Jan 2027 02:44:03 +0000
asID:                     14299
IP address blocks:        170.146.136.0/21 maxlen: 21
                          170.146.136.0/24 maxlen: 24
                          170.146.137.0/24 maxlen: 24
                          170.146.138.0/24 maxlen: 24
                          170.146.139.0/24 maxlen: 24
                          170.146.140.0/24 maxlen: 24
                          170.146.141.0/24 maxlen: 24
                          170.146.142.0/24 maxlen: 24
                          170.146.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:f1:61:f5:38:be:c9:91:eb:08:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
        Validity
            Not Before: Oct  3 02:23:36 2026 GMT
            Not After : Jan  1 02:44:03 2027 GMT
        Subject: CN=009b1fe4-7ff3-4ec6-94cf-b4c6861060ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:f5:5c:5b:f4:3d:67:b7:9c:5c:e1:f0:92:
                    2b:c1:79:c5:c6:a5:dc:f5:a7:b4:17:52:db:c8:00:
                    98:3e:43:e0:6b:a7:8e:8a:7d:1d:83:19:bd:67:a7:
                    20:b4:e3:f4:46:31:ef:1b:7c:33:e4:8e:dc:88:7c:
                    46:0f:80:04:b8:9e:4c:26:74:63:3c:60:1c:e6:f2:
                    5f:a3:1a:0a:1e:38:16:5a:83:8f:37:f0:e1:2c:33:
                    c0:81:53:86:c5:3e:df:b2:25:b5:53:d6:a4:ee:28:
                    1a:b3:c8:d4:31:2a:91:db:d6:94:df:5f:51:42:bd:
                    8c:9b:3a:c0:4e:fe:d6:93:8f:7a:8f:5b:17:a8:b4:
                    be:32:76:c4:7a:b4:2a:29:8f:53:a7:03:6c:1d:d9:
                    a2:22:9b:a1:9b:53:9d:d4:8d:7c:b3:ca:ad:b8:0b:
                    45:39:6d:bc:a5:96:47:2b:2a:bd:48:ff:0e:73:40:
                    3f:87:be:4f:8f:9d:92:14:ec:77:e8:5e:a8:4d:13:
                    f3:6c:36:19:1e:58:b5:83:ea:cc:db:21:e7:92:ab:
                    00:f2:de:0c:9b:8d:96:43:24:bf:62:29:85:f5:dc:
                    00:2c:26:19:90:fe:04:28:07:c0:f1:b5:a6:2a:08:
                    78:e2:b0:fd:3e:4a:70:cb:8b:f5:3c:f0:a9:4f:01:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D1:9F:F8:26:D6:A2:43:63:1A:85:36:57:C5:D2:C7:FB:52:77:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/81602dd3-9168-3f92-92f7-975e31f5c3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl

            X509v3 Authority Key Identifier:
                keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.146.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:65:1e:07:b9:0b:51:d6:ff:3c:1b:82:a1:ef:b3:54:a4:
         67:8b:31:7d:2b:0d:4f:33:34:97:72:9b:0d:51:70:a6:0b:3e:
         47:3f:eb:69:cb:d2:de:a4:f0:f8:17:87:ba:f6:7e:83:ab:1a:
         78:e5:68:a8:56:a0:9a:20:30:c4:0e:13:93:fe:7e:0b:de:8e:
         42:3a:ae:e5:fa:58:90:55:6f:95:01:aa:99:30:d3:ef:e0:79:
         ea:fd:a6:e5:19:03:0c:58:2c:75:00:e9:5b:06:5b:e5:a3:b6:
         78:17:ec:be:08:8f:77:42:f9:2b:e6:12:ed:80:bc:1f:1c:39:
         b4:18:41:18:ee:6a:c9:18:e5:47:e9:c3:76:e7:a7:d4:e0:10:
         51:d0:0a:33:61:4c:33:c4:22:57:01:8e:d2:49:f9:87:83:0e:
         ed:1e:7f:5d:d8:c1:b4:ba:46:f9:e8:30:8d:3e:82:17:0a:0d:
         e3:30:09:0d:d2:a8:1e:8d:0a:fe:cb:0c:9b:68:4f:d5:5f:2d:
         4b:42:b5:24:5c:97:92:1f:2c:ad:59:80:6a:14:c1:35:89:32:
         6c:5b:5d:58:9c:81:16:73:8d:de:c3:5b:09:4f:a7:48:15:a4:
         a0:3d:70:ff:8f:8a:2b:c5:4e:5b:2a:bc:73:1e:3d:15:cc:54:
         df:ce:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:42 2026 by rpki-client