Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a48a010c-3333-3bcb-b76d-8e6b10a80d6f.roa
File:                     a48a010c-3333-3bcb-b76d-8e6b10a80d6f.roa (raw, json)
Hash identifier:          YaosclU4vx6vcslvnqwNVV16pxpI1jGQuV37ZMGeriI=
Subject key identifier:   5C:12:CF:7E:60:71:85:2B:A3:97:7E:A2:93:01:BB:BB:C8:79:CE:01
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF73D16CC69968C73E16600
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a48a010c-3333-3bcb-b76d-8e6b10a80d6f.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        170.85.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:3d:16:cc:69:96:8c:73:e1:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=801d7782-2ae3-4628-b2b3-b032dc686f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:84:13:90:da:a5:4c:29:a8:e9:60:92:1c:
                    f8:34:ed:ae:c4:ea:fc:51:05:1e:ff:ff:99:7e:46:
                    0d:72:ed:31:4c:94:d8:24:b7:7c:e8:db:2a:c2:8b:
                    c5:77:4c:04:d2:80:c2:2b:a1:2f:14:6e:bc:47:08:
                    82:3f:74:bf:75:cd:7f:9d:a1:76:51:dd:92:2d:40:
                    af:f8:61:d6:91:f5:26:bc:01:00:60:bf:28:17:c4:
                    fe:3f:5d:cb:22:a4:45:a6:38:1e:9d:3b:5c:39:19:
                    78:2d:25:79:40:ca:6b:63:59:f5:97:4a:f0:62:15:
                    b2:2d:80:4b:fb:33:94:b7:58:ea:8b:2f:28:23:1a:
                    9f:2e:30:1f:28:24:4f:3d:84:f9:47:25:b8:57:58:
                    44:06:53:db:f5:22:b1:8e:b6:a0:a5:82:3d:91:55:
                    a0:dd:b9:4c:1b:31:73:15:78:17:43:25:4f:64:f0:
                    c5:15:df:f3:d1:89:9c:69:9f:67:50:69:26:76:19:
                    33:c2:73:09:e7:4d:b3:14:d4:a5:a7:ad:87:78:c7:
                    4c:5b:f0:a0:32:4b:03:ef:67:be:be:a0:78:0f:e8:
                    04:3b:b5:a8:fe:7c:67:1d:84:cc:dd:09:7f:eb:ba:
                    f1:73:a4:a8:ae:c9:83:3f:01:dd:be:55:4b:3b:e6:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:12:CF:7E:60:71:85:2B:A3:97:7E:A2:93:01:BB:BB:C8:79:CE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a48a010c-3333-3bcb-b76d-8e6b10a80d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:e0:0c:ac:8b:2c:5c:4f:82:42:d8:97:85:6d:c4:82:45:
         9b:03:64:f0:67:0b:4d:b7:85:1e:1d:d0:76:70:1e:f1:ce:77:
         f7:11:73:31:12:0f:db:8e:43:7c:d5:fa:7b:60:1e:46:2a:85:
         79:a0:55:31:da:13:f8:e1:8c:71:eb:56:35:e6:c0:8c:6f:0b:
         23:ac:97:00:14:06:52:bc:0b:5e:a0:1d:61:f6:6e:56:62:c7:
         43:78:7d:73:fc:fa:60:61:34:6f:2a:89:07:8f:49:65:9b:4d:
         d8:63:2f:bb:a4:d6:d5:a7:38:89:97:72:59:7c:a6:77:85:f9:
         eb:34:6e:b5:ec:35:01:f1:02:1f:f7:63:66:00:5f:43:ff:c9:
         b6:db:40:78:55:27:5a:fd:26:af:94:5a:82:6b:3b:93:14:29:
         bd:29:12:84:7f:eb:60:63:8f:20:6c:2a:b2:04:9e:5f:81:f3:
         48:8e:55:85:fb:0a:c7:58:22:0e:ac:09:b0:c0:65:f5:8e:4a:
         51:e9:09:ee:ac:ad:a7:d0:cd:53:db:4a:cb:74:c4:af:2d:84:
         6b:63:20:05:df:2c:ab:81:b4:8f:f6:8f:62:21:4f:a1:65:f6:
         1b:b0:b6:64:e4:c8:27:95:a2:08:81:e4:ab:62:34:37:53:4a:
         e8:86:15:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:01:16 2026 by rpki-client