Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa
File:                     f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa (raw, json)
Hash identifier:          gEDvfXS+Tu/MsTQirAb2PJDVxsTwmA2CkFG3snL7anI=
Subject key identifier:   27:64:68:4E:9A:DD:D3:EF:E0:7A:E1:57:CD:C6:DF:67:46:06:18:6E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EFE12234F2A5694E8200B6340
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     3949
IP address blocks:        165.254.191.232/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:23:4f:2a:56:94:e8:20:0b:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=cb5a89d2-890c-4fb1-95e1-09168845f4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:10:a3:ae:79:ce:5a:b7:f6:64:6e:4d:0a:
                    9d:8d:a0:d8:66:e3:40:8d:25:a8:e0:bb:03:b7:5f:
                    41:63:40:c4:e0:82:d0:94:9f:d1:07:64:98:f4:65:
                    c8:e4:76:c0:8b:e0:b9:4d:dd:f0:e8:70:5e:7c:24:
                    bb:f8:12:b7:be:ce:8b:d8:e9:e2:68:5d:aa:da:5c:
                    aa:b2:4c:40:f1:80:07:11:e3:7a:dd:34:3b:28:47:
                    d1:a1:3c:9b:4b:b5:04:b7:e0:06:1a:76:26:64:07:
                    bd:fb:c1:3b:4e:d9:03:a5:74:ce:99:4e:d1:54:17:
                    1c:b4:53:6c:2f:66:fe:b3:ff:b1:26:81:fb:51:dc:
                    13:f7:d8:fa:b6:f6:fc:8c:88:e6:66:f7:b4:a7:35:
                    5f:8a:49:84:69:89:91:36:f9:5c:b3:e8:b2:d1:a1:
                    2c:b5:af:42:8c:2a:62:0c:a2:56:c8:2a:89:f6:70:
                    8d:95:b5:8d:60:31:2d:8a:40:35:62:04:42:69:f2:
                    5c:68:38:20:5c:a1:1a:1c:5f:4d:d7:23:89:a3:dd:
                    f8:6f:68:37:f3:98:8f:4c:47:6e:1e:56:63:a5:3b:
                    6f:27:04:d5:f7:1e:7c:b0:ea:98:2e:50:bf:d4:92:
                    0b:9c:91:ea:d2:f3:57:3e:91:76:99:8f:4e:d9:94:
                    13:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:64:68:4E:9A:DD:D3:EF:E0:7A:E1:57:CD:C6:DF:67:46:06:18:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.191.232/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a3:26:b1:cd:78:b4:40:7c:08:6c:79:f6:ef:96:c5:73:43:
         a6:c6:d8:8b:5a:22:ed:2b:64:88:a9:9c:0b:ba:3e:11:3a:b5:
         ac:80:54:81:81:8c:8d:93:77:be:b5:1f:06:93:0a:cd:97:17:
         97:aa:71:e0:10:a3:81:f9:78:ed:54:a9:7b:06:e1:ff:7f:7e:
         da:0f:53:d2:98:36:74:c0:73:dd:d0:2a:60:da:0c:19:b4:4f:
         5e:b6:b4:ec:ea:cb:60:b8:05:28:3f:4f:3f:21:af:6a:4e:1e:
         66:ad:e8:73:8d:ea:ba:0e:cf:4c:ac:30:07:57:2d:f2:24:99:
         9e:45:3c:00:6e:bd:d3:06:ac:a3:df:6e:2e:d7:e2:91:8b:19:
         57:a6:8e:b1:19:bf:a9:30:9d:ce:94:b5:70:63:de:56:0f:25:
         8a:92:cd:df:0c:42:24:9e:a5:66:1e:74:ae:48:9b:5e:10:f9:
         1f:9b:95:8b:90:0d:2d:6f:58:14:30:eb:1f:a5:ac:0a:60:56:
         d9:88:5e:7c:22:67:0a:74:3a:6b:62:11:aa:04:91:75:6f:52:
         02:55:92:10:88:46:74:17:56:e4:37:c9:69:97:bd:62:4f:8f:
         93:e1:11:d8:a3:2f:4f:34:f1:3f:f0:11:61:72:c9:3d:cf:99:
         15:6b:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:52:46 2026 by rpki-client