Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/aa8f3bb8-011b-3bcd-b874-202c8f935c17.roa
File:                     aa8f3bb8-011b-3bcd-b874-202c8f935c17.roa (raw, json)
Hash identifier:          46V1+ZiF1BGhYFuxxZcgoETZf6ac2Lf2A9YPViM/yY8=
Subject key identifier:   AF:90:59:45:8E:EF:67:7A:87:07:2A:52:1F:15:B5:81:BD:1C:39:2E
Certificate issuer:       /CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
Certificate serial:       010D0C9F4328584F655D6761148EEDF5C102068C
Authority key identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/aa8f3bb8-011b-3bcd-b874-202c8f935c17.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     198949
IP address blocks:        209.237.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:67:61:14:8e:ed:f5:c1:02:06:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=253a1f0a-3bc9-4953-8a95-c87311de6724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:fd:00:a8:bf:11:cb:d3:b2:49:3d:b6:92:
                    54:26:c1:04:6c:50:91:b9:fd:10:6c:79:8f:6d:3d:
                    23:d2:39:c3:89:84:e6:38:41:5f:14:ef:14:aa:97:
                    19:57:49:40:74:ee:03:c8:0a:a7:d2:ce:30:c6:1a:
                    26:83:21:2c:91:40:b5:93:5a:c6:dd:06:0a:5e:57:
                    0d:7d:f9:21:e1:21:f5:d8:b0:3a:b9:ce:a6:44:ee:
                    bd:19:7b:7e:a7:89:e0:29:eb:a1:dc:76:37:c6:5e:
                    de:83:9a:08:1e:62:58:8c:75:f4:5c:cb:c9:07:d8:
                    e9:72:e1:00:70:f8:df:d8:39:73:4e:af:fa:b0:78:
                    af:51:c0:84:41:1d:51:8e:38:75:86:44:f7:02:cb:
                    45:0e:2a:ba:07:51:a5:2d:8f:db:ca:dc:97:40:83:
                    97:e0:64:de:4f:9c:18:f7:9a:9c:6b:1c:51:20:fb:
                    36:21:86:3f:6d:11:9b:73:b4:9e:3a:ec:c9:d8:fc:
                    51:26:d2:8e:6c:db:21:51:e1:23:ba:81:6f:75:82:
                    81:50:d7:01:e6:b8:76:0d:10:33:4d:23:b6:ac:69:
                    4c:24:09:34:73:c8:2a:a7:42:17:ef:e9:bd:b6:60:
                    37:24:18:e1:fd:24:47:f4:f1:0a:ef:e0:20:a7:0d:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:90:59:45:8E:EF:67:7A:87:07:2A:52:1F:15:B5:81:BD:1C:39:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/aa8f3bb8-011b-3bcd-b874-202c8f935c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl

            X509v3 Authority Key Identifier:
                keyid:04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:43:19:a7:c5:fa:cc:3c:7f:5e:91:60:f2:be:fb:2e:93:03:
         6f:e1:57:e3:be:a1:6d:84:c5:e6:f4:da:59:00:f1:04:49:75:
         24:e0:86:d1:30:06:c0:db:4b:18:d6:b5:f8:8b:e1:35:83:d0:
         53:51:9a:47:95:59:6d:22:4d:13:9c:49:14:5f:2b:92:2a:58:
         a3:65:97:db:5e:ef:94:2e:22:29:aa:2d:e4:bf:a5:8e:ce:ba:
         64:38:0c:05:e7:1c:2b:a3:4c:b8:52:4f:ec:f5:62:49:34:86:
         cc:d5:67:92:74:f5:c3:6d:79:e8:d2:90:3d:e0:5a:86:99:09:
         4b:ff:d1:82:77:e2:82:a5:6b:56:e3:92:ac:ba:7f:a7:0c:59:
         ec:d0:3b:c5:cd:72:8a:47:8d:5f:b5:63:e5:68:ed:f1:4a:d9:
         d9:26:bd:8a:85:b4:a5:da:ba:99:52:cd:28:58:93:e9:91:43:
         67:8a:97:6b:09:2d:fc:8d:76:63:71:ed:de:6a:ef:ac:13:13:
         9f:f5:54:20:5b:28:50:49:3f:0a:59:22:a2:a6:5d:4b:03:67:
         47:fb:da:d2:8c:ad:aa:78:a7:51:26:a9:00:3c:23:72:de:5e:
         1e:b1:62:a2:53:da:88:4c:d9:9e:a8:5d:d2:ba:78:3b:3f:1a:
         e3:6f:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:36:31 2026 by rpki-client