Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/26fb2c9b-0f92-378c-a881-700e70672106.roa
File:                     26fb2c9b-0f92-378c-a881-700e70672106.roa (raw, json)
Hash identifier:          jbNOPPQfVuZ7+toza75myYCHuoC9j83ikK4kGZ8Q3Eg=
Subject key identifier:   45:78:1C:B9:14:63:9A:47:9C:9D:30:08:A9:6A:2D:42:CA:46:B6:CD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584FA16325F3928EFEA03B311440
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/26fb2c9b-0f92-378c-a881-700e70672106.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     152644
IP address blocks:        204.141.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:25:f3:92:8e:fe:a0:3b:31:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=185a55f0-40ed-4871-a6c4-c2d1a19ba4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:c8:f2:38:9b:76:98:55:e2:cd:6e:9b:02:
                    2c:82:65:4e:c4:89:cf:9b:51:72:7f:c7:ec:69:ac:
                    d9:f6:e3:a1:cc:05:85:76:0d:9f:f6:d7:c4:28:92:
                    75:16:e1:d3:d3:89:23:a4:0e:06:0d:1e:e5:d2:b3:
                    9b:0b:b7:3c:42:3c:38:9c:98:64:65:75:bf:ad:97:
                    a3:fc:ac:ad:8f:64:11:2e:74:6e:99:ae:fd:72:b2:
                    e8:d1:35:90:c0:ec:d4:5b:8e:28:53:28:4d:4f:0d:
                    d9:06:e5:73:10:d3:02:c2:13:b2:d4:b7:d4:f9:8c:
                    ba:8b:ed:1e:36:58:8b:10:e5:1a:f9:a8:63:62:e2:
                    f6:7e:9e:f8:0a:7c:40:b5:7d:62:ab:63:34:36:68:
                    74:38:87:ee:d2:b0:6b:da:c5:1a:ba:aa:c4:c3:07:
                    2d:5e:1f:1f:f2:05:52:b8:5e:2c:8c:57:44:a0:cb:
                    85:bf:31:1e:02:26:26:b1:5b:18:1c:4e:8d:70:19:
                    d2:f9:1e:41:0c:0d:4f:e1:90:79:45:e7:0e:12:cf:
                    52:b8:5b:5b:7b:14:56:29:b6:99:56:e4:b0:62:44:
                    d8:66:f0:73:d8:6c:ae:0d:06:5c:d8:82:9d:72:33:
                    a6:4f:1f:d8:a8:c6:4f:5c:c2:1e:2e:58:3e:48:64:
                    1c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:78:1C:B9:14:63:9A:47:9C:9D:30:08:A9:6A:2D:42:CA:46:B6:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/26fb2c9b-0f92-378c-a881-700e70672106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:b1:ff:7c:e8:6d:ca:8f:4b:90:7e:36:53:be:7d:1a:62:1b:
         6d:2f:42:f7:c7:f8:1d:f8:c0:21:96:d1:b7:c8:a8:bf:9d:cb:
         a8:df:6e:00:88:a3:82:14:9e:1b:ff:6a:d5:d0:15:fd:ba:87:
         99:c1:22:6c:ce:d4:de:9e:12:f1:74:3e:22:88:7d:23:8f:ed:
         94:64:25:b7:91:1a:06:1d:e1:0d:6e:79:6a:62:af:ef:5b:34:
         95:db:fe:f3:05:88:7d:17:7b:5e:61:61:a2:9b:f4:e4:0d:ec:
         88:54:74:f3:67:46:32:73:d3:20:c9:aa:0a:cc:31:8c:1b:e7:
         cd:c7:68:39:31:1e:0a:62:87:41:d5:b2:5e:a4:2f:e4:40:e6:
         f3:9d:fb:a5:09:07:92:7e:8b:84:78:e2:da:b8:d1:05:ac:af:
         27:7b:31:ec:99:b0:40:9a:4e:d0:f0:47:13:62:50:67:2f:cb:
         bb:7f:30:e6:28:6b:26:00:10:54:b3:98:de:04:dc:dd:b0:52:
         69:eb:d2:ec:20:c1:2e:7b:58:28:14:71:50:5d:fd:05:ea:80:
         72:78:5b:6a:ea:2d:47:e7:5f:9b:ae:cb:ab:92:b3:da:a7:c2:
         c4:69:a1:2d:a0:7e:4b:76:79:f5:ac:5e:8f:8c:3a:98:75:23:
         95:4a:0c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:17:24 2026 by rpki-client