Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa
File:                     8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa (raw, json)
Hash identifier:          xvJKU/e0xVR8S4Yzx1QNSVM7LEkI7u7pxIpVbv/54b4=
Subject key identifier:   55:D8:03:5E:39:62:E7:B6:F9:A7:8A:E4:27:7E:97:E1:76:75:2C:7B
Certificate issuer:       /CN=83f6fec3-836a-47ca-a671-0112eb9c74dd
Certificate serial:       010D0C9F4328584F655D734E32455DDFD7A4AA68
Authority key identifier: 52:BF:B6:F7:53:D0:73:5D:A2:C9:26:04:82:F0:72:88:5B:CE:2C:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     63300
IP address blocks:        192.70.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/83f6fec3-836a-47ca-a671-0112eb9c74dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/83f6fec3-836a-47ca-a671-0112eb9c74dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:73:4e:32:45:5d:df:d7:a4:aa:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f6fec3-836a-47ca-a671-0112eb9c74dd
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=aeb8f5e7-eeda-45e2-b58d-e204f903c84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:5e:f6:d2:9a:f1:2d:26:fa:5a:39:ca:fc:
                    76:a7:ff:5f:3a:67:9f:48:85:6e:d8:43:60:32:c2:
                    63:99:87:cd:b7:23:35:23:21:d4:25:75:87:8a:63:
                    b6:e9:f8:84:27:f1:96:2a:21:1f:39:b6:13:9a:6d:
                    fe:c6:fc:1b:25:52:24:a0:97:e9:e7:55:1e:eb:1c:
                    3d:b1:28:0d:f5:e0:43:92:61:da:8c:23:4c:65:5f:
                    0b:7c:0a:68:03:36:71:49:fb:2c:7b:f8:20:e3:2d:
                    d4:42:94:33:68:d1:2b:cd:a7:85:6e:1c:4f:d0:c1:
                    da:0d:c7:c3:c1:60:c2:eb:00:3f:eb:5d:aa:1c:b8:
                    89:5d:39:79:e4:cd:39:6c:84:a7:ca:c1:d3:31:d3:
                    17:42:5a:93:b5:1f:dd:f7:6f:e7:63:10:a9:60:0a:
                    9d:21:a2:e1:ae:35:54:58:04:49:21:83:c4:9b:81:
                    3f:61:b0:2b:40:95:1b:05:83:10:6d:0d:99:54:85:
                    f9:7c:5c:1f:4c:aa:bd:e0:29:ed:0a:ce:43:7f:e5:
                    98:a7:7c:13:b8:aa:45:45:94:90:52:64:15:c8:60:
                    32:74:a8:91:b8:8e:3e:0c:be:20:38:60:80:44:93:
                    ee:a4:8e:96:f9:1f:25:21:23:91:98:2a:9f:42:47:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D8:03:5E:39:62:E7:B6:F9:A7:8A:E4:27:7E:97:E1:76:75:2C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/83f6fec3-836a-47ca-a671-0112eb9c74dd.crl

            X509v3 Authority Key Identifier:
                keyid:52:BF:B6:F7:53:D0:73:5D:A2:C9:26:04:82:F0:72:88:5B:CE:2C:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:50:ab:11:55:5a:a8:17:e8:8f:21:47:e7:d1:b3:fc:0b:71:
         c5:9f:1c:ce:0b:cb:04:15:eb:2d:44:19:1e:df:9a:aa:3c:43:
         25:0c:d5:66:8c:4d:c5:21:e6:71:5e:f7:f4:a0:f1:fe:91:ac:
         21:3e:07:9e:15:8e:94:91:42:15:3e:f2:e1:8a:e1:a0:8f:e7:
         b1:07:25:86:bb:af:be:51:44:15:ca:05:d4:07:59:58:41:08:
         ec:84:0d:01:32:b2:04:39:d6:4b:d7:5d:d2:f9:08:8c:27:76:
         f7:b8:96:ad:d1:c2:30:33:9c:6e:92:c0:d7:da:67:4d:dc:91:
         a0:4a:3d:43:31:b2:92:34:e8:c8:93:43:fb:34:2c:14:6c:08:
         b8:72:ca:2c:63:dc:62:11:4f:a9:d3:bf:6c:95:d5:42:2e:22:
         55:36:45:43:62:27:5e:a3:4f:2b:e4:0f:28:8f:d4:59:4f:65:
         04:35:9e:50:db:38:0a:05:2f:1d:d1:32:6d:73:c6:f4:c9:a4:
         ac:b0:78:71:1f:f3:58:62:d4:22:e5:29:b6:c2:40:7f:59:8b:
         7e:38:d3:70:74:a8:e5:86:63:d5:2f:99:b4:22:db:13:fb:70:
         9b:5d:e3:00:4c:c4:21:08:81:10:01:6d:16:15:ba:6a:b2:b5:
         73:b2:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:21:31 2026 by rpki-client