Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9f6f53d-5076-4761-9477-d66e7c622f5e/d7d4eeb4-03d0-3155-a3f2-32a4193dd020.roa
File:                     d7d4eeb4-03d0-3155-a3f2-32a4193dd020.roa (raw, json)
Hash identifier:          hLtO0Ct6ZhbimByV6VdNuvhaRinOd/OojjGw9MuP6rY=
Subject key identifier:   A9:75:80:AA:4E:BB:EC:83:FD:AC:3C:D7:98:82:E8:83:89:4D:7A:25
Certificate issuer:       /CN=c9f6f53d-5076-4761-9477-d66e7c622f5e
Certificate serial:       010D0C9F4328584F6F0C304376A6911C2A454F80
Authority key identifier: 22:4F:72:B2:E2:3A:C6:30:B0:10:46:DE:20:47:3E:59:B2:71:DC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9f6f53d-5076-4761-9477-d66e7c622f5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9f6f53d-5076-4761-9477-d66e7c622f5e/d7d4eeb4-03d0-3155-a3f2-32a4193dd020.roa
Signing time:             Thu 08 Oct 2026 12:14:44 +0000
ROA not before:           Thu 08 Oct 2026 12:14:44 +0000
ROA not after:            Wed 06 Jan 2027 13:14:44 +0000
asID:                     26357
IP address blocks:        199.101.164.0/22 maxlen: 22
                          205.149.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9f6f53d-5076-4761-9477-d66e7c622f5e/c9f6f53d-5076-4761-9477-d66e7c622f5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9f6f53d-5076-4761-9477-d66e7c622f5e/c9f6f53d-5076-4761-9477-d66e7c622f5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9f6f53d-5076-4761-9477-d66e7c622f5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:0c:30:43:76:a6:91:1c:2a:45:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9f6f53d-5076-4761-9477-d66e7c622f5e
        Validity
            Not Before: Oct  8 12:14:44 2026 GMT
            Not After : Jan  6 13:14:44 2027 GMT
        Subject: CN=e9189223-94ff-4c78-998f-15114b454388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:32:2e:5c:ca:f3:b2:ff:b3:29:ec:54:05:12:
                    fa:d0:1f:d9:8f:12:01:fa:11:ac:d1:e5:59:92:bd:
                    ae:11:3a:ab:e1:1d:b3:25:04:c5:cb:4d:00:cc:1e:
                    fe:ae:b5:8d:51:90:54:dd:46:27:d2:bf:64:56:39:
                    02:1e:25:11:c7:2d:d3:5c:19:7a:ae:44:f5:71:04:
                    75:44:67:cc:95:26:80:71:74:cb:c2:17:71:a3:9c:
                    5e:57:e5:3e:85:b8:94:d8:ae:db:71:13:f3:5d:ec:
                    61:21:79:d0:51:51:f4:90:48:1e:f4:62:22:08:7c:
                    a8:ff:43:18:f0:db:12:b5:80:42:43:62:cc:07:60:
                    d2:58:7a:b2:0c:f7:00:75:88:2a:85:f9:6d:00:21:
                    13:b3:eb:61:23:68:44:a1:87:21:78:64:f3:5e:28:
                    ee:bd:71:d5:7f:f2:1b:20:4b:52:41:28:8b:1f:1f:
                    45:10:c2:2c:8e:82:4c:a9:aa:09:63:b2:57:72:a5:
                    f0:72:61:32:06:5d:8a:18:ea:ae:0a:0b:ec:ec:3b:
                    ce:44:40:dd:3a:b8:40:ef:96:10:1e:16:4e:fd:06:
                    82:29:23:cf:fc:b3:e8:1f:ca:a8:0e:84:a5:29:46:
                    58:b9:1f:ba:98:84:96:6a:36:df:27:78:27:b3:c3:
                    12:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:75:80:AA:4E:BB:EC:83:FD:AC:3C:D7:98:82:E8:83:89:4D:7A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9f6f53d-5076-4761-9477-d66e7c622f5e/d7d4eeb4-03d0-3155-a3f2-32a4193dd020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9f6f53d-5076-4761-9477-d66e7c622f5e/c9f6f53d-5076-4761-9477-d66e7c622f5e.crl

            X509v3 Authority Key Identifier:
                keyid:22:4F:72:B2:E2:3A:C6:30:B0:10:46:DE:20:47:3E:59:B2:71:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9f6f53d-5076-4761-9477-d66e7c622f5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.164.0/22
                  205.149.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:62:50:3b:af:5a:3a:56:85:20:c7:41:20:0e:b2:b1:ec:8d:
         36:df:37:60:2a:38:1d:3e:c6:d0:2a:65:2d:b2:2f:4c:4e:9a:
         39:b8:f1:e0:ec:af:a5:1a:07:5d:58:7d:98:fe:41:36:50:45:
         9c:d9:1d:db:24:d7:9a:6a:70:65:f5:c5:d7:63:36:00:a6:62:
         5a:3b:ff:6f:15:7d:c3:a3:75:56:e5:30:7e:62:96:cf:67:da:
         d8:95:84:d0:04:99:8c:5a:2c:0a:03:9e:ed:82:60:1b:03:e1:
         80:a4:cc:95:8f:9d:11:86:38:38:03:28:20:63:dd:c4:e2:1b:
         43:55:e8:0e:9b:a6:c8:7d:1b:35:e9:ef:34:55:37:32:23:13:
         91:84:6e:8e:92:f9:ff:e5:6c:98:0e:a8:f9:c3:7e:3e:20:98:
         38:db:69:92:0a:85:23:ad:8d:76:c0:3e:ea:90:ca:75:46:54:
         e1:42:e5:49:0a:0d:f6:e1:fa:02:8c:5a:2c:46:7c:90:ef:cc:
         17:e7:d6:fe:c0:3d:72:fd:f1:1a:30:f0:90:f1:61:b1:cb:01:
         01:43:3e:7b:dd:0f:11:dd:45:0e:ff:ca:e2:e0:c0:87:6c:f2:
         97:df:6f:da:ab:d1:65:c8:d1:fc:f0:2f:83:00:16:ef:ee:2f:
         b7:fd:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:32:11 2026 by rpki-client