Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1a682d54-b3b1-3e8d-a4e0-800207cf983e.roa
File:                     1a682d54-b3b1-3e8d-a4e0-800207cf983e.roa (raw, json)
Hash identifier:          1UafkWgMnZ25+idMZZ/wUrBRtBzfunhRP8MviwtfKZc=
Subject key identifier:   7A:49:44:88:8E:E5:D5:99:8B:CC:5C:6A:35:1C:0F:16:93:DB:94:91
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2FC503035E3B286EC5240
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1a682d54-b3b1-3e8d-a4e0-800207cf983e.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     62044
IP address blocks:        170.85.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:fc:50:30:35:e3:b2:86:ec:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=b9ebe98c-fe3b-4acb-9dc9-47b4637b8c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4c:f5:68:2a:02:2f:e6:b2:d0:1f:cf:89:c1:
                    5e:c9:85:78:02:8c:34:36:7a:0a:37:27:7a:e2:1c:
                    c5:e8:5e:0d:3b:1b:0e:10:cb:ad:01:58:de:ea:fd:
                    8c:b0:13:b0:1b:07:b4:fc:25:7f:2c:cb:6c:e4:f5:
                    86:7e:fd:6d:1f:3f:c9:c8:76:e3:bd:7a:f8:ac:1b:
                    a0:a9:76:49:8d:b4:ab:f0:2f:f5:cc:c3:d3:77:07:
                    01:c9:57:17:cc:6d:cc:d2:62:dd:95:97:cb:b0:15:
                    9a:87:4e:61:a6:d9:ab:a8:bb:28:39:48:c1:48:78:
                    d4:09:27:9c:1c:83:af:16:6d:ef:92:cc:af:83:ff:
                    c4:17:ef:2a:30:99:0b:fc:f1:f5:57:75:10:b4:5a:
                    f2:2f:c8:ed:30:c6:0d:38:7f:8f:3b:e7:78:c4:71:
                    30:19:5e:e4:db:2b:0c:28:f4:57:68:3d:74:1f:cc:
                    a4:46:6e:6e:ab:8f:e5:04:d5:c6:de:a4:6e:86:08:
                    e7:57:9d:30:74:46:a8:bc:bd:13:03:09:c9:2c:e5:
                    16:27:94:f5:20:5a:86:06:ae:43:fc:bc:72:22:93:
                    0d:d0:a5:6f:d7:de:86:0b:86:4f:aa:69:13:16:57:
                    a2:39:ae:8e:26:f9:46:f5:ba:2f:0e:a6:f5:d9:5a:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:49:44:88:8E:E5:D5:99:8B:CC:5C:6A:35:1C:0F:16:93:DB:94:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/1a682d54-b3b1-3e8d-a4e0-800207cf983e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6c:75:bf:fb:af:63:b5:79:6f:49:ab:3f:6a:42:da:e1:8f:
         60:12:67:35:c9:f6:67:02:cb:ef:13:da:e2:e9:64:5e:2e:54:
         e3:08:80:bf:2e:0e:1a:16:27:e3:69:6e:39:79:3a:4a:fe:53:
         14:72:b1:49:ca:7c:78:d9:6f:5f:45:3d:f3:33:49:71:c7:38:
         e1:44:2c:33:15:6c:46:c3:f5:1f:de:da:6e:c5:74:7a:a1:4b:
         b0:42:59:57:72:fe:73:e4:42:ef:fa:91:3f:45:d4:10:ac:23:
         b7:76:0b:cd:d5:75:a4:c2:b0:bf:8e:3a:1c:d3:f5:ee:5e:80:
         f1:ad:1d:81:98:db:98:ec:e0:79:30:87:c0:34:11:8c:66:3b:
         e9:d9:8a:cc:5c:c7:c7:93:8d:63:7b:be:9a:a2:5b:c5:88:da:
         b3:71:73:40:40:59:a6:f8:35:77:f1:c6:fd:3e:b9:88:24:b2:
         c5:49:e6:82:32:33:ea:bc:1d:e6:00:86:0f:fc:98:f5:b7:2a:
         ba:55:d4:da:83:90:ec:02:32:9c:13:e1:41:eb:6b:ef:ac:6b:
         4e:e8:3c:e2:35:f7:1b:aa:04:74:b1:d7:dc:ad:06:e2:9e:e0:
         87:32:10:57:63:33:66:fc:ec:b7:6f:ef:01:02:01:97:72:d9:
         96:d7:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:27:26 2026 by rpki-client