Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4764eeb3-b454-3825-8d1c-ad8e5188d22d.roa
File:                     4764eeb3-b454-3825-8d1c-ad8e5188d22d.roa (raw, json)
Hash identifier:          brYZU+TtRBGa1vX4FtyMOqLxXjW7F1kJ1T5+95T7eZs=
Subject key identifier:   BC:14:58:B1:93:0F:48:0A:D5:5C:42:4F:72:E0:91:B6:FA:1A:0F:3D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF73D86735DB42E50CF8180
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4764eeb3-b454-3825-8d1c-ad8e5188d22d.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        170.85.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:3d:86:73:5d:b4:2e:50:cf:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=c28ca1c0-7e23-4ecb-b8f6-967c238afff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:fd:23:c0:bb:f6:0b:31:67:54:4e:56:b2:
                    2f:4d:fa:bf:a8:cc:15:18:4a:e7:00:c9:92:36:a5:
                    28:8a:ca:91:e5:26:48:cf:49:93:d7:39:70:be:2d:
                    8e:2c:78:ee:30:ed:1a:a1:0a:1e:e6:72:21:a8:63:
                    42:0e:7f:3b:1d:14:b6:77:87:e2:3f:e6:08:38:97:
                    91:c5:f2:1c:40:8e:28:7f:95:08:55:66:4a:08:8d:
                    6b:26:a7:d8:d9:db:7a:6e:4b:da:f9:35:e3:af:c8:
                    da:f4:0b:f7:b7:06:ec:62:6a:6e:79:be:5b:ad:e8:
                    d9:5f:e7:11:1e:ee:74:8b:33:62:28:53:c6:25:13:
                    d4:ac:46:a6:11:c8:30:3a:88:7d:a8:9b:a3:02:98:
                    8d:8b:f8:a3:5b:26:61:e1:5d:fe:3a:dd:3f:84:c9:
                    89:d4:2f:5f:fa:ed:46:3b:80:9a:c5:3f:da:77:69:
                    46:38:66:d2:db:6f:b6:30:07:58:80:2b:73:a1:df:
                    8b:30:59:a5:45:6c:55:31:9f:03:5d:c4:54:9f:32:
                    7c:fb:be:dd:83:ea:34:16:bc:82:e0:43:51:57:b5:
                    f6:5a:81:11:9c:22:81:04:47:1e:ba:d7:e7:d5:59:
                    52:31:f9:61:2d:ce:9a:a6:b2:b9:89:e0:26:a6:59:
                    1c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:14:58:B1:93:0F:48:0A:D5:5C:42:4F:72:E0:91:B6:FA:1A:0F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4764eeb3-b454-3825-8d1c-ad8e5188d22d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:3e:72:ac:10:e6:2f:f9:ea:af:8c:86:07:29:ec:a9:c6:
         3b:27:c0:d2:67:3d:12:c1:6a:9e:ca:94:27:9c:ec:3b:0d:0f:
         76:08:02:4b:ee:f8:b9:ab:8b:fb:19:c7:65:ca:26:b2:f3:14:
         ed:c3:b4:df:b8:2f:1d:4a:00:0a:9a:44:c0:6d:97:fe:36:3c:
         91:37:a3:0e:e7:26:f0:9c:5e:b8:02:b3:8c:0d:bb:5c:93:b5:
         ca:86:63:41:bc:16:d1:0e:3e:de:bd:b4:6c:fd:01:79:97:90:
         76:97:af:0c:72:76:de:74:cb:c5:d0:54:13:be:b4:73:45:49:
         b9:2b:94:92:d7:ae:89:a3:d8:dc:ae:92:ad:b3:1f:b3:92:83:
         e4:07:c8:d5:54:63:63:3d:45:eb:ce:1c:f2:68:2f:e3:93:13:
         50:b1:7b:2e:77:30:7d:aa:51:ca:43:c2:a6:29:1f:11:72:be:
         17:54:e7:2a:32:2c:ed:ca:51:08:3d:cb:f9:f2:b7:f3:fb:81:
         5e:ec:39:37:7b:a9:c7:9e:24:a0:06:9e:ce:0a:eb:d6:1e:38:
         ad:84:b4:03:1e:53:89:f1:ae:ed:9a:78:9e:1e:20:ca:b2:9b:
         b5:9f:0b:4f:18:a4:cb:db:46:83:0d:46:f0:ce:64:82:73:a0:
         86:32:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 18:09:17 2026 by rpki-client