Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/1e5a3bbf-c571-34dd-b08d-599206306f95.roa
File:                     1e5a3bbf-c571-34dd-b08d-599206306f95.roa (raw, json)
Hash identifier:          nvgtTRZnSlzh99YBBHy9my6gkjJ8X4/oVKyVh8ljUzc=
Subject key identifier:   CE:8B:3A:97:53:F5:F7:AA:55:0B:58:99:C4:8A:1D:0B:DE:84:11:11
Certificate issuer:       /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial:       010D0C9F4328584EFCACD03D7D93B5809D90EF80
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/1e5a3bbf-c571-34dd-b08d-599206306f95.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     394264
IP address blocks:        172.110.41.0/24 maxlen: 24
                          172.110.43.0/24 maxlen: 24
                          172.110.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:d0:3d:7d:93:b5:80:9d:90:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=e2f23314-97e1-4eaa-9fc5-069d767e090f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:55:81:72:ce:5d:b5:89:56:d6:47:fe:13:
                    0f:07:56:da:4a:8f:4e:58:56:a9:46:f9:42:97:56:
                    17:fe:2c:24:9d:20:83:39:a4:30:4e:13:55:31:a9:
                    c4:ea:83:95:26:95:46:af:96:74:3b:60:28:c8:21:
                    3b:59:d3:81:74:d4:52:b7:68:b3:56:91:0f:be:e3:
                    5d:92:69:09:de:63:31:96:07:c3:80:44:bd:a6:31:
                    83:30:fc:39:30:98:5a:a8:ad:e3:6c:5a:14:2b:0b:
                    3f:bb:a3:d4:fb:a1:1d:c4:88:6a:a4:6b:2d:f8:0b:
                    e1:c7:dd:75:b9:46:f9:0f:32:9e:48:74:37:30:5b:
                    84:df:78:5c:56:a1:c9:a8:fb:7a:09:f3:ea:49:d9:
                    96:11:78:16:8b:fa:1a:33:94:2f:a8:e2:e5:47:e0:
                    da:a5:84:14:b3:9f:f1:aa:5a:37:09:b4:62:96:7e:
                    71:ad:69:65:52:00:20:57:76:cb:b6:b1:af:5f:cb:
                    0c:a2:3b:10:d2:38:c6:08:4b:dc:29:6b:f0:1b:a8:
                    45:44:91:38:8b:d0:b5:6b:7a:c0:d5:f0:c2:6b:f2:
                    f3:7e:90:0d:bc:e1:9e:4e:97:2f:65:cb:3a:45:0c:
                    4f:f5:15:52:cf:7a:59:38:cf:bb:2a:33:cf:e7:a0:
                    71:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8B:3A:97:53:F5:F7:AA:55:0B:58:99:C4:8A:1D:0B:DE:84:11:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/1e5a3bbf-c571-34dd-b08d-599206306f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.41.0/24
                  172.110.43.0/24
                  172.110.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:94:e1:3d:cd:52:bc:10:26:90:b3:76:b2:b7:2f:63:08:15:
         12:23:a3:80:26:34:ad:0f:6c:04:bb:df:19:b9:50:af:58:7c:
         85:7b:8b:f5:af:8c:4e:8a:0a:fc:e4:5f:c5:06:73:4d:30:93:
         92:5e:cf:15:7a:bb:70:1d:67:1f:ab:6f:12:8d:a3:31:72:b7:
         94:38:b5:cf:bb:a3:1a:68:20:cc:1d:cd:ff:2d:ec:61:8f:33:
         88:fd:76:b5:c7:8b:ec:f8:60:6a:51:a6:cb:a2:93:23:cf:d4:
         36:67:96:f2:4d:41:ce:ef:f2:c7:40:1a:64:6c:11:e5:e1:f4:
         d3:16:e3:b3:f4:86:b6:7d:23:d8:c0:46:5b:2b:12:2d:13:bd:
         8a:79:cf:20:7d:ed:1b:41:a3:df:f0:aa:33:d5:cf:38:bd:47:
         68:a8:ce:66:1f:f4:01:4c:c1:fe:a1:e8:bc:a2:38:4a:f2:c0:
         47:54:28:d7:2d:e7:02:27:f2:40:fb:8c:36:3f:74:54:84:cb:
         ba:af:63:e6:56:95:93:31:9b:d9:69:67:b2:6d:00:90:9a:b1:
         78:6a:b3:99:3a:b6:1b:66:30:b7:d2:9a:1a:cd:b7:4e:fa:96:
         af:97:bf:01:c6:80:e4:b4:71:4d:7d:dc:46:be:49:ce:94:fe:
         fc:dd:84:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 10:20:54 2026 by rpki-client