Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0886750a-93bb-37bd-b0c9-7a1861848533.roa
File:                     0886750a-93bb-37bd-b0c9-7a1861848533.roa (raw, json)
Hash identifier:          IX9Nw2Zl6rOn4D68jqj9CzACvxfMkVkraxnkJ9bJ47I=
Subject key identifier:   9C:3E:35:21:E4:01:51:22:E8:18:05:8C:23:C0:4D:F5:CC:F0:55:A3
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2EC53DA85C1C657F14350
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0886750a-93bb-37bd-b0c9-7a1861848533.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     22616
IP address blocks:        170.85.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:ec:53:da:85:c1:c6:57:f1:43:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=9093c875-a7cf-45f2-b772-9b69ecb06d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:4a:22:fb:72:c4:1b:20:f5:91:46:65:1c:
                    07:40:f1:a8:33:59:ed:54:4b:e5:00:6c:79:c6:42:
                    ff:2c:57:e6:86:a5:3d:56:a4:4f:35:81:26:2a:02:
                    e4:0d:dc:d5:ea:ae:e3:cb:7e:54:1c:6d:9d:9a:ad:
                    22:ae:17:88:de:fb:c9:14:43:51:c9:ce:90:13:79:
                    cc:82:80:94:51:d6:c9:f1:96:46:62:a6:13:e6:f8:
                    8e:84:01:f3:c4:71:a1:4f:79:f2:cd:ba:4a:08:37:
                    a5:b6:e7:09:69:17:b0:b5:f8:d5:73:d1:fd:09:21:
                    c2:3d:e0:ab:67:6f:d2:12:6e:e5:01:ac:8b:66:cd:
                    38:ef:a2:d3:21:85:1f:fd:61:bf:35:ae:ed:3d:50:
                    68:f3:7d:9d:17:28:b0:62:02:d0:9e:8e:25:b5:a3:
                    a6:4d:a8:a8:4c:f8:95:11:3b:30:0e:b5:05:04:63:
                    f2:9d:74:0b:a4:36:13:0c:be:ba:e7:0e:0f:45:6f:
                    56:45:76:3b:c0:85:cc:3a:8d:d5:c4:57:b1:ad:a7:
                    d2:d2:6a:ef:eb:89:d0:2a:af:28:bd:ea:02:0e:8d:
                    5b:c5:0d:f9:cf:0b:69:44:6b:ca:58:9e:1b:8b:05:
                    63:e1:ac:ca:1a:d5:47:31:bf:63:6d:cf:24:1f:68:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3E:35:21:E4:01:51:22:E8:18:05:8C:23:C0:4D:F5:CC:F0:55:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0886750a-93bb-37bd-b0c9-7a1861848533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d6:ad:43:de:e7:53:26:56:95:97:f6:61:49:f3:ea:71:3f:
         fa:a9:9a:d9:bf:2a:89:b3:98:36:33:28:11:37:d3:b1:b1:c2:
         d8:fd:2d:81:90:03:3b:16:d9:9e:b2:06:32:e3:25:21:7c:11:
         7c:d3:1d:40:8f:ee:19:9f:33:3f:74:c9:03:c1:c5:30:a7:53:
         02:0c:51:1a:f1:25:53:c7:fc:aa:b0:be:19:34:59:86:ac:f0:
         6d:39:ee:5b:e9:7d:c2:28:3b:af:6b:ed:bb:59:0e:88:e3:8c:
         28:a3:c6:61:4e:36:3d:0b:82:ff:69:84:94:40:b9:06:d7:b2:
         d4:81:26:7e:b6:f6:78:fd:8d:b4:db:09:46:88:8e:e3:34:e9:
         ff:5b:e7:2f:3b:14:d1:5f:1b:67:43:80:a8:ee:23:64:8a:e3:
         32:cc:48:25:ea:fc:7a:3c:29:9d:c9:e3:33:f2:41:52:f1:82:
         20:df:a3:57:62:f7:8c:68:a7:3e:d1:e7:fa:37:c3:51:6e:8d:
         51:d2:1b:9e:3b:1d:48:5f:c0:f7:9a:46:fd:7c:81:8c:ed:ed:
         01:45:32:06:95:8f:86:74:08:8b:78:f7:73:8f:35:79:a2:ec:
         ff:39:74:68:70:84:c9:57:e2:48:99:a1:de:ff:cf:e7:54:09:
         6e:3c:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:03:45 2026 by rpki-client