Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bffb3dc4-d37f-3241-bb6d-33db58ffb7fb.roa
File:                     bffb3dc4-d37f-3241-bb6d-33db58ffb7fb.roa (raw, json)
Hash identifier:          mOw6hVYLoMjLjH0rAJpSEw74dS5lvCZNqkKnxfD2tlg=
Subject key identifier:   64:20:50:26:04:A3:D9:6E:F8:5F:A9:13:C8:75:23:4D:5C:D4:14:5B
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF73D4934CEA68EFD960C80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bffb3dc4-d37f-3241-bb6d-33db58ffb7fb.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     62044
IP address blocks:        170.85.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:3d:49:34:ce:a6:8e:fd:96:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=d0e55fee-d79b-4861-9c66-7f24cd89d094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c4:ce:14:9b:de:1f:b7:8d:de:83:15:5c:73:
                    2a:1b:18:5c:9a:13:8b:98:47:45:5d:f2:5b:bd:30:
                    73:c5:f0:33:9b:0f:cc:7e:19:b3:c8:fb:d2:8b:ec:
                    3a:c9:7d:fd:0b:b9:e1:67:77:1f:21:ac:37:db:41:
                    d3:f7:ac:97:3e:96:e0:aa:a9:dd:73:18:8e:5e:75:
                    f7:03:7b:22:72:67:df:67:e8:0d:21:d7:93:7c:94:
                    87:ff:81:06:4a:94:2c:a4:19:09:6b:3c:39:d4:89:
                    9c:8f:db:f0:f9:99:56:26:ca:54:64:40:a3:a3:b9:
                    19:7e:c9:c0:17:d6:5c:ac:2a:15:5d:bc:b7:d4:44:
                    df:13:25:61:4d:41:bc:47:46:c8:08:41:23:a9:d7:
                    d8:13:8d:02:31:fa:ec:4c:0c:13:f0:40:24:7f:34:
                    65:a3:ff:07:10:b0:50:19:d0:ab:e9:89:f3:5b:0f:
                    08:5d:2b:cd:1e:7b:a5:af:b1:f4:ef:63:fb:66:ee:
                    c3:9c:e7:95:13:cd:e0:13:e0:f0:07:c9:69:8b:2e:
                    9e:9f:2c:3c:ba:f2:71:a7:60:52:9f:11:10:da:12:
                    97:a8:c3:01:2b:e3:ee:c1:04:59:7b:e6:d9:20:7b:
                    ef:bf:03:29:88:0f:cf:17:3d:f5:12:39:55:ea:7c:
                    ef:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:20:50:26:04:A3:D9:6E:F8:5F:A9:13:C8:75:23:4D:5C:D4:14:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bffb3dc4-d37f-3241-bb6d-33db58ffb7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:d3:8f:32:70:ef:75:42:4e:55:dc:d7:57:5a:69:29:e6:6a:
         43:93:77:73:e4:1e:e5:c7:f4:85:49:4f:b3:ce:72:5c:84:b8:
         b2:b8:3f:0d:c7:be:fa:81:01:35:53:32:10:3e:d9:ec:fe:28:
         fd:e0:67:72:a3:13:e1:2d:de:e6:97:e8:84:52:49:af:61:e2:
         ba:43:4e:7f:e4:87:75:60:7a:13:7b:14:af:ee:50:60:08:4e:
         84:c2:55:2d:96:d8:17:c9:07:9f:0c:4c:ba:5f:f2:6e:5c:da:
         17:da:22:bb:59:3e:cf:c2:b4:cf:da:c4:d6:e6:b0:71:ed:05:
         8c:bb:29:df:2f:68:62:ce:f8:a8:57:9d:8e:5b:3f:7f:85:95:
         4c:f9:09:85:df:b2:44:78:bc:d9:a2:ac:ae:3c:d7:f5:53:63:
         28:f0:a1:0d:ce:a5:39:01:ce:16:23:36:c9:5b:d2:6d:6c:c3:
         bb:d4:d2:81:e7:58:40:d3:1c:dc:58:69:8e:73:34:30:86:bf:
         ec:0d:c5:6f:50:a2:12:3a:71:c8:cf:cc:73:f8:af:2d:24:95:
         60:18:a3:14:6d:4f:32:0f:e7:7b:8e:e4:83:b6:07:2d:9a:d2:
         c0:86:4a:02:4e:d9:84:5b:f3:00:01:a7:f5:65:70:f7:bf:3b:
         f8:16:46:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 17:23:55 2026 by rpki-client