Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/c680d96c-ff82-375e-822b-e0d09613fa44.roa
File:                     c680d96c-ff82-375e-822b-e0d09613fa44.roa (raw, json)
Hash identifier:          7rQZiH/fl9erPO22p/vT6TQ+XvPcowFSDpaOkJ2VUzg=
Subject key identifier:   56:38:04:0A:CD:58:3A:8D:E4:63:CD:76:02:35:C8:5F:D8:06:0F:30
Certificate issuer:       /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial:       010D0C9F4328584F698D78F526B3EDEA27D05B40
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/c680d96c-ff82-375e-822b-e0d09613fa44.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     397457
IP address blocks:        147.160.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:78:f5:26:b3:ed:ea:27:d0:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=45b8742b-40f6-48dd-90a9-7b83abea31dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:a0:72:46:02:08:20:c3:93:96:4d:25:6d:
                    aa:46:e8:ae:80:bc:62:10:64:20:66:d1:04:9d:8c:
                    0d:4a:f4:72:0c:d6:61:b1:e5:39:ad:63:7c:a5:f6:
                    7b:40:59:56:82:39:be:d2:d7:38:39:8b:9f:f6:87:
                    34:31:21:83:88:45:89:4c:8e:12:06:45:4e:ec:23:
                    9f:0d:22:17:b6:b0:b6:f7:d4:dc:39:ad:59:66:9d:
                    9e:aa:e5:19:11:b1:70:ee:c0:52:b9:85:90:b2:ae:
                    f2:58:61:b3:f8:00:ce:bb:6b:e3:ee:fe:df:16:64:
                    05:38:56:4e:ec:bc:96:c5:7a:d0:95:92:ff:7f:6d:
                    b7:8d:44:9a:ee:dd:bd:2b:81:99:33:ec:b5:22:44:
                    6a:77:59:9c:9e:af:d8:9e:99:ba:02:f1:5c:67:2d:
                    38:ed:cc:97:05:09:64:62:93:bf:ff:76:1b:f7:87:
                    4d:25:20:41:99:44:67:9b:cc:5a:fe:03:04:c2:e4:
                    49:7d:82:d0:61:08:60:51:02:ff:c5:8f:d7:7b:0a:
                    7a:97:0f:78:37:d0:0a:f6:c8:a8:bf:f1:d0:ed:4f:
                    73:30:d5:d2:3d:e2:af:a0:cb:23:70:65:35:8a:e5:
                    23:ad:8c:41:a9:cf:f3:6b:58:03:3e:de:50:dc:c9:
                    98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:04:0A:CD:58:3A:8D:E4:63:CD:76:02:35:C8:5F:D8:06:0F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/c680d96c-ff82-375e-822b-e0d09613fa44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl

            X509v3 Authority Key Identifier:
                keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:1d:5c:6e:b3:bb:f2:ba:d1:e3:1b:62:a0:8b:12:82:53:2b:
         52:5f:3d:26:66:4f:0b:b2:3b:a6:1a:a4:27:a9:36:49:6c:6e:
         c3:73:44:50:6a:71:0b:66:45:68:a6:62:9f:b5:ab:3d:e0:1a:
         4b:9e:24:14:7c:32:b3:63:70:9e:ab:8f:b9:80:9f:dc:d8:5c:
         f5:fa:6f:8b:d3:3f:1f:f6:a7:57:05:36:71:15:b2:c6:84:77:
         33:7f:8c:8f:3c:85:d8:ad:0e:e9:e1:a2:52:6a:4d:b9:e4:41:
         e0:b7:11:61:1d:1a:4b:49:ab:4d:fa:25:57:8d:c0:e5:b7:c5:
         fe:34:bd:ff:31:0c:08:58:21:44:9e:40:20:3e:94:2c:2b:88:
         b9:e3:83:de:a4:a2:2e:62:80:19:45:2b:1f:8c:b1:d6:0a:d5:
         33:0e:3b:73:fc:ad:60:9c:82:e7:43:de:15:47:ec:11:4e:ad:
         b6:ce:3d:85:65:2b:8a:2e:79:9a:ad:c6:3c:84:59:ad:20:ac:
         d7:db:b8:8e:33:f3:07:56:16:db:09:b6:41:27:41:a7:dc:90:
         e4:e5:d0:27:82:8c:59:69:b4:65:10:b5:09:a9:98:1c:1f:fc:
         78:2c:bc:96:11:12:28:fe:fa:89:c2:cd:50:64:c5:3b:8b:48:
         63:e9:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:31:53 2026 by rpki-client