Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa
File:                     7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa (raw, json)
Hash identifier:          tMQRoYsPPOMxzVoPTCwTnURANm/9mlD13eExN8VuKlI=
Subject key identifier:   F7:EA:19:09:F9:AD:E4:78:1E:7D:1F:C5:F9:A4:1E:A9:4E:5E:9B:01
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F4328584F6F22DBFF714A469F74F97500
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     139267
IP address blocks:        173.243.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:db:ff:71:4a:46:9f:74:f9:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=db0ccfc8-4efc-4da9-9a19-778875721e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:6b:8a:72:80:85:6d:ef:79:74:d7:c0:59:
                    11:22:c1:92:82:bc:94:f9:09:81:ec:a0:f4:51:36:
                    7b:9b:9f:32:3e:ff:72:9a:5a:df:f9:df:d4:40:29:
                    11:ad:82:89:d1:49:d4:cc:25:89:9d:ee:d1:0d:66:
                    cc:20:68:82:d7:ea:3b:f5:77:de:fb:25:2f:56:a4:
                    46:10:b0:a9:3a:04:fc:22:f9:7e:34:e5:c0:fa:36:
                    b7:8d:5b:d4:a5:5c:4a:f3:e5:df:29:a2:db:b0:24:
                    c0:45:c7:83:18:0f:28:8c:13:a5:a5:b5:14:43:1b:
                    a8:ee:89:be:98:71:8c:21:39:9c:cd:a9:b7:ae:e6:
                    9f:61:54:28:f4:7a:27:59:db:58:03:8f:b2:23:ff:
                    37:9f:bc:8d:24:85:5b:67:5c:dd:7d:12:ac:6c:19:
                    14:52:90:16:4f:a8:6e:28:d4:04:a7:86:60:cc:1c:
                    75:36:18:73:c1:12:43:5b:c9:ed:28:fe:aa:a2:2a:
                    ad:13:14:fe:bd:1d:81:22:cf:3e:db:c8:fd:0d:02:
                    1e:f1:73:28:d6:4c:45:e2:46:de:74:91:60:57:9f:
                    1b:cd:43:aa:19:64:3b:62:33:9c:44:9a:69:17:11:
                    41:57:6d:a0:74:55:bf:8b:28:93:c0:3e:a1:cf:a0:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EA:19:09:F9:AD:E4:78:1E:7D:1F:C5:F9:A4:1E:A9:4E:5E:9B:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:ab:06:90:8b:99:af:1f:ab:2b:48:96:2d:b6:39:e3:46:
         44:de:d3:49:7b:87:6e:a7:12:dc:53:24:82:df:73:da:57:97:
         45:ac:c1:34:09:45:5a:2d:25:8b:50:ba:c1:9e:e2:76:4e:68:
         f3:73:b9:79:fd:a9:d8:cc:e3:ed:03:f9:ca:eb:e7:82:33:3f:
         7d:52:07:f0:e2:70:d2:5f:db:c8:ec:46:91:99:54:80:03:82:
         ab:93:8a:ce:7b:06:60:77:96:fa:2a:c9:48:94:37:85:6a:4f:
         b4:63:10:d4:f4:fb:29:19:81:32:4c:0a:58:86:ed:be:12:f5:
         13:4c:62:35:a9:66:92:e2:a0:11:89:81:74:43:fe:f6:90:5c:
         d9:7a:0a:00:97:ec:b5:f6:ea:61:18:19:dc:32:cc:05:1e:af:
         31:4d:6e:77:0d:62:8d:32:39:13:3d:25:96:e9:22:7e:fc:9b:
         34:bd:98:23:f6:08:51:f1:61:65:18:24:f6:3b:b0:73:5b:68:
         55:13:2e:79:04:16:08:d5:6a:27:62:b6:03:f5:fa:9c:02:bd:
         3f:9a:33:be:db:22:18:32:5a:63:ae:d0:35:ad:bf:32:0b:c7:
         1a:55:30:f9:24:ae:4b:81:5f:24:6d:5e:5c:6d:c6:83:a5:e2:
         c6:a6:69:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:35:19 2026 by rpki-client