Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/e806becf-4b0d-3529-9108-3b24d3fa75e9.roa
File:                     e806becf-4b0d-3529-9108-3b24d3fa75e9.roa (raw, json)
Hash identifier:          9vz1UH5/XurU0BOVmNCjEGY2HqreKSubZQgtqLul430=
Subject key identifier:   A9:8B:61:3C:96:BB:B4:8E:C3:55:6D:8C:01:BF:E0:27:4B:E5:D6:16
Certificate issuer:       /CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
Certificate serial:       010D0C9F4328584F698D7D6CFC4410A950A98400
Authority key identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/e806becf-4b0d-3529-9108-3b24d3fa75e9.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     63452
IP address blocks:        192.171.18.0/24 maxlen: 24
                          192.171.19.0/24 maxlen: 24
                          192.189.171.0/24 maxlen: 24
                          2602:ff50::/40 maxlen: 40
                          2602:ff50:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:7d:6c:fc:44:10:a9:50:a9:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=46a1ec8d-49bd-41dd-a33e-7bd265415e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:c8:61:91:1c:1a:f5:06:cd:02:5e:cf:e8:
                    38:e5:71:94:a6:7b:05:19:88:80:64:8d:bb:f4:c7:
                    51:36:89:30:99:f2:96:da:05:2a:5e:51:ca:b2:8d:
                    bb:c6:40:d9:66:9f:0c:6a:fa:70:1c:b3:08:5d:ad:
                    c7:8b:cb:be:65:83:cd:32:e9:de:6b:c5:52:41:98:
                    e9:5c:a0:a8:c1:85:06:ec:a5:26:14:23:3f:5c:93:
                    30:3e:f9:93:51:b3:dd:c9:aa:7e:60:18:ec:6a:d4:
                    1b:0d:55:a5:6d:24:2a:55:a6:a2:2e:2b:eb:43:83:
                    90:0e:5d:b3:f0:ed:41:17:34:62:a9:e5:cf:ef:e0:
                    e8:0b:26:c4:cb:71:70:af:0c:4c:12:84:ab:ae:19:
                    6c:7b:97:1c:4b:9b:eb:6c:9a:7e:1f:a1:4d:d1:d8:
                    7f:07:0d:f2:dd:a9:aa:6f:44:2e:31:b6:ec:60:d1:
                    a9:8e:d1:68:44:4d:8e:9a:3a:60:e2:46:67:4f:5b:
                    0b:fd:a9:c7:0a:b3:95:64:64:b3:c5:45:62:25:cf:
                    83:f4:d0:4a:0e:1a:d1:0f:2c:7a:b2:d5:82:7d:4b:
                    00:20:45:97:3c:27:20:95:36:50:d3:cb:0e:35:b1:
                    59:04:70:4d:2a:52:d9:a3:4a:9d:85:0f:43:ce:8b:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8B:61:3C:96:BB:B4:8E:C3:55:6D:8C:01:BF:E0:27:4B:E5:D6:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/e806becf-4b0d-3529-9108-3b24d3fa75e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl

            X509v3 Authority Key Identifier:
                keyid:4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.18.0/23
                  192.189.171.0/24
                IPv6:
                  2602:ff50::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:71:c4:03:62:7c:44:d3:df:be:0f:d2:69:1d:e1:e8:06:f6:
         06:e8:9e:a3:65:dd:db:6a:e1:76:44:f4:ab:b9:54:7f:ef:61:
         87:66:35:fc:0a:e5:ca:0e:45:46:32:c7:a8:e5:a6:db:27:99:
         8b:39:cc:2d:4c:c9:d7:9f:f3:06:60:bf:37:2a:87:fc:00:3a:
         94:c6:a8:e5:99:ee:de:3d:35:fa:e3:fe:28:1a:05:7f:c0:35:
         dc:34:f6:12:0c:78:b2:09:96:5b:d4:d9:83:0a:d3:6f:8c:94:
         45:55:cb:5b:bf:c7:f3:33:c5:5c:2f:c1:4b:30:a6:4e:b5:47:
         b0:18:75:ea:c7:84:49:de:51:ac:d4:d9:25:bd:bc:ab:1c:f9:
         c4:1a:10:9b:da:71:ee:3a:97:5f:51:ad:44:a9:06:af:68:79:
         4f:fe:96:d3:b7:1c:1e:00:47:f9:16:15:5e:32:da:5b:c4:ee:
         cb:8e:65:36:38:42:40:87:ca:7f:e7:4a:74:55:1a:35:38:db:
         91:0c:3d:0f:b3:d6:0b:cb:27:2c:0d:dd:e6:78:f1:c6:d0:97:
         48:4c:54:19:58:31:ee:1d:a6:47:d7:d5:4d:77:5d:91:68:69:
         2c:48:25:3e:68:0f:5f:65:3e:2f:fe:fe:95:d6:08:db:63:df:
         dd:9b:06:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:44:19 2026 by rpki-client