Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/2eedfd50-fd33-316b-8e62-946c1da5f017.roa
File:                     2eedfd50-fd33-316b-8e62-946c1da5f017.roa (raw, json)
Hash identifier:          F2fUM93RkU97OquMeMql5bQqoKa1XueyDPuiQqYySOY=
Subject key identifier:   57:33:6E:A0:F2:9C:A4:19:B4:D2:71:CC:26:FA:6C:7F:66:67:A4:C0
Certificate issuer:       /CN=3d9d359c-ec49-4660-ab04-8247987b8dc7
Certificate serial:       010D0C9F4328584F119CDFAB0E7DA8F6497C4E60
Authority key identifier: 2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/2eedfd50-fd33-316b-8e62-946c1da5f017.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     402718
IP address blocks:        169.128.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:df:ab:0e:7d:a8:f6:49:7c:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9d359c-ec49-4660-ab04-8247987b8dc7
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=dfff5bcf-891b-4379-b3c8-d0c20deb0865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:a8:aa:65:28:81:a1:4a:22:05:b1:52:fb:
                    24:6f:df:87:e4:37:aa:49:2d:f4:f9:f4:ee:e6:58:
                    e9:04:63:dc:9d:52:6d:90:2a:d9:52:60:62:76:84:
                    88:f3:ba:0b:a6:77:94:4f:0f:1f:47:ff:e0:fc:d5:
                    71:5c:e1:ff:57:7d:b3:81:4b:ae:a3:24:6f:e8:39:
                    6d:b1:6e:84:39:92:e3:a9:1b:35:41:87:b6:9a:35:
                    6f:7f:ab:d5:a3:e6:79:1f:bd:ee:2a:8b:cb:d0:c9:
                    ee:e7:8a:b0:3d:db:63:45:68:bf:64:33:92:fe:63:
                    17:f0:b7:e5:52:0b:98:3b:5e:03:d7:72:40:62:5e:
                    61:78:00:8c:3f:12:66:ab:d0:cf:01:fe:72:6c:30:
                    eb:c1:e0:f8:ba:90:71:b1:9e:d9:32:31:6e:36:27:
                    a6:48:64:1c:e3:d1:91:eb:dc:f6:1d:d9:bd:96:11:
                    06:02:86:2e:da:38:15:4e:54:c2:e3:b2:20:96:40:
                    20:85:74:e5:c0:c7:f4:6e:b5:22:d0:05:bf:0c:1e:
                    62:f5:89:d0:e1:94:c7:26:68:9a:d2:fb:fb:28:f6:
                    bd:db:c2:b0:3d:7f:43:8b:ea:50:45:c7:ea:3a:20:
                    d3:73:60:2a:f6:d2:d7:82:fa:fc:5e:83:bf:91:7a:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:33:6E:A0:F2:9C:A4:19:B4:D2:71:CC:26:FA:6C:7F:66:67:A4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/2eedfd50-fd33-316b-8e62-946c1da5f017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:cb:3f:c9:a0:06:ad:b6:4a:18:96:c5:5e:aa:96:f7:b1:9e:
         e0:d8:4b:19:11:0f:6b:d5:4b:35:ee:27:ef:76:a5:47:19:e8:
         af:78:38:08:de:46:fc:5f:26:ac:8b:88:0c:dd:00:25:a9:16:
         25:38:39:8c:f3:21:0f:48:10:aa:a2:fe:2b:4c:3c:2d:f7:8b:
         54:ca:d0:f7:aa:b5:b4:a8:a0:c1:8b:2b:ce:c7:f4:6e:02:68:
         15:e6:9b:c5:97:50:04:56:c8:2e:e2:4f:96:0f:52:a1:2e:e1:
         b8:a9:db:e2:a5:eb:82:5a:3e:35:80:4c:36:6a:f7:df:e2:a8:
         a4:a0:a0:3f:a1:53:6c:d4:01:ff:c5:ea:a3:30:25:a7:77:b6:
         48:ab:b8:c3:8c:61:a1:57:94:0e:3b:ee:b8:79:7a:78:bf:fa:
         16:d2:55:03:0e:85:14:d5:39:92:08:89:31:3b:95:fb:79:ee:
         69:0a:c3:2f:0f:32:28:23:b2:5e:79:1d:d2:2b:0c:72:29:de:
         2d:23:df:67:8e:3b:5b:dd:b1:28:ab:18:3f:37:09:ed:a6:60:
         7a:38:82:2b:fe:5e:43:ec:85:c5:62:bb:c1:a5:4f:a8:ef:94:
         fa:4b:a2:36:62:e8:06:54:20:f8:60:99:3b:d5:ac:0b:c1:5a:
         e0:fc:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:51:53 2026 by rpki-client