Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/b1ab1fdc-04fd-30f7-b168-3129170cdc1e.roa
File:                     b1ab1fdc-04fd-30f7-b168-3129170cdc1e.roa (raw, json)
Hash identifier:          vOEclPAW86AdYhvgNzfm8YEhdTwWC2ssepxXcwcZzlw=
Subject key identifier:   32:83:1A:5D:DD:AB:D3:2C:A1:6F:37:8D:B5:C4:AF:36:A2:C1:8F:BD
Certificate issuer:       /CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
Certificate serial:       010D0C9F4328584F5FDE0069540322A3D57081C0
Authority key identifier: FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/b1ab1fdc-04fd-30f7-b168-3129170cdc1e.roa
Signing time:             Sat 03 Oct 2026 01:44:33 +0000
ROA not before:           Sat 03 Oct 2026 01:44:33 +0000
ROA not after:            Fri 01 Jan 2027 02:44:33 +0000
asID:                     14299
IP address blocks:        170.146.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:de:00:69:54:03:22:a3:d5:70:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5
        Validity
            Not Before: Oct  3 01:44:33 2026 GMT
            Not After : Jan  1 02:44:33 2027 GMT
        Subject: CN=be2ca0f4-d371-4e2d-a8e4-297c2c3247c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:e5:b7:e2:5a:a5:4f:59:ec:e2:f3:00:7b:
                    3d:8b:ab:97:36:c3:ab:a3:ff:37:a5:c1:18:e2:d6:
                    a0:a2:b4:c5:cf:18:39:68:db:13:d5:f1:c0:ad:09:
                    99:0d:72:47:05:2f:8c:dd:6e:36:d5:66:10:62:50:
                    e6:9d:31:0e:98:05:ee:fe:35:b9:e2:df:77:64:5b:
                    88:1f:1d:59:9a:45:e3:b3:eb:2a:42:88:42:3c:19:
                    bc:3d:89:9b:55:14:8b:45:a3:81:4d:74:95:8a:71:
                    91:8f:9d:f3:2d:30:4e:73:64:cd:fe:2d:1f:1f:7a:
                    59:93:d7:bf:41:90:1a:6e:93:ad:1f:e0:f5:6b:05:
                    43:e3:37:ca:72:9e:aa:ea:17:8c:0c:f8:0a:2c:20:
                    f9:0e:0c:c3:bd:38:1f:79:8b:8a:f4:71:a3:71:95:
                    f6:f1:a6:00:60:1b:13:c9:a0:be:92:10:71:e6:7a:
                    d6:7f:8a:c6:b5:d5:a9:ef:a6:f5:35:8a:34:33:02:
                    19:52:ee:38:3a:bd:ff:c1:6d:a5:19:e8:1d:29:d7:
                    13:0d:d1:ba:2c:68:5d:ee:bb:b1:5d:be:98:3b:02:
                    c7:d4:07:c1:19:ec:f2:6e:b2:d2:24:22:88:dc:fb:
                    43:85:c8:7d:9d:4c:06:51:e6:c5:ff:19:3e:d7:ce:
                    9e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:83:1A:5D:DD:AB:D3:2C:A1:6F:37:8D:B5:C4:AF:36:A2:C1:8F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/b1ab1fdc-04fd-30f7-b168-3129170cdc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.crl

            X509v3 Authority Key Identifier:
                keyid:FD:1A:FA:71:5D:03:6D:80:2D:27:0C:15:6D:C3:4E:5B:BB:8F:96:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1c4b2061-d2c7-48f0-8ee9-5ff0c4e359b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.146.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:b0:60:8c:71:e0:d5:0c:8f:8c:93:50:92:8f:83:00:27:93:
         06:83:46:e9:06:e2:bf:83:01:fd:44:67:19:2f:ed:a4:28:38:
         e7:06:61:99:9c:ad:9d:f6:3d:44:41:f0:0f:67:f8:45:ec:f0:
         74:08:68:db:73:ff:37:d8:b5:53:01:2d:bc:bd:73:a7:b0:a2:
         aa:22:0d:38:2c:da:ce:e9:e1:e3:88:c5:33:d9:0e:3b:2e:dc:
         99:ae:90:28:34:e5:25:eb:fe:43:19:c9:c5:39:85:b1:46:ae:
         f9:25:e2:03:5a:b4:56:53:1f:d2:68:c8:69:00:ff:27:1d:1e:
         2e:81:2d:25:cb:f8:83:bc:e1:e8:99:18:0c:3d:ff:e7:3b:76:
         6e:b6:7d:75:3a:70:4c:ec:fc:2e:ef:d5:01:ee:ae:7c:ae:40:
         07:7e:33:53:ed:12:42:a8:71:77:7d:bd:04:a1:fa:5a:2d:1a:
         61:1d:0d:19:04:71:ff:85:39:5b:29:7d:e9:26:27:bf:ab:36:
         7c:b3:11:57:bc:0c:04:0a:6e:ed:ce:74:c1:b5:2e:b8:a4:81:
         20:8d:76:15:af:44:48:be:df:fe:9d:5a:19:d0:9d:32:03:c7:
         04:24:75:ab:96:b9:ee:4d:36:d1:cf:aa:f2:b4:06:4a:cc:65:
         cd:50:a9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:06:33 2026 by rpki-client