Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e/b48ee68b-0bae-3362-83c3-c9fc474dea52.roa
File:                     b48ee68b-0bae-3362-83c3-c9fc474dea52.roa (raw, json)
Hash identifier:          AWhd+rt6DZ6c6M5kUnmoJAXM8GXhX8CDwanbL9Oke74=
Subject key identifier:   75:22:E8:F7:62:0A:0C:5A:9B:0A:77:B7:12:25:FD:C4:46:FC:15:47
Certificate issuer:       /CN=7d69a54d-e6bb-43b2-a363-308bc5f4225e
Certificate serial:       010D0C9F4328584F6B87F28B447FE523F9BDEA40
Authority key identifier: E8:3B:E0:23:4A:2C:B5:A5:39:09:32:19:CD:33:53:8F:DF:26:84:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e/b48ee68b-0bae-3362-83c3-c9fc474dea52.roa
Signing time:             Wed 07 Oct 2026 06:00:52 +0000
ROA not before:           Wed 07 Oct 2026 06:00:52 +0000
ROA not after:            Tue 05 Jan 2027 07:00:52 +0000
asID:                     402547
IP address blocks:        156.9.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e/7d69a54d-e6bb-43b2-a363-308bc5f4225e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e/7d69a54d-e6bb-43b2-a363-308bc5f4225e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6b:87:f2:8b:44:7f:e5:23:f9:bd:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d69a54d-e6bb-43b2-a363-308bc5f4225e
        Validity
            Not Before: Oct  7 06:00:52 2026 GMT
            Not After : Jan  5 07:00:52 2027 GMT
        Subject: CN=b84f77df-4951-4fa1-8fe7-d0b44a4121ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:1c:cd:8e:96:6a:b3:77:7a:06:37:32:55:
                    a4:2d:34:97:ef:17:bb:e9:0e:c6:ff:e9:6d:92:f7:
                    22:cd:d9:c0:fa:5e:39:26:3b:45:f4:8c:51:46:ca:
                    2f:a8:47:49:0e:dd:44:d6:f5:61:f6:08:be:53:53:
                    00:92:48:22:18:14:7b:61:e8:73:ef:93:b1:a5:d8:
                    ad:b5:d2:7a:b1:a0:b2:55:b5:31:07:ae:51:fc:51:
                    57:cf:86:48:96:a0:f8:70:7a:4a:4f:c4:da:9f:5b:
                    96:e7:66:dd:7d:7e:6d:08:a9:f8:67:fa:50:24:7c:
                    17:81:10:5c:8e:fb:41:a7:43:6d:15:82:41:cd:37:
                    69:fc:47:b8:89:25:da:90:19:90:ff:63:70:81:4c:
                    9b:1f:b4:f7:7c:79:6f:e6:10:d1:ca:4b:c8:2c:36:
                    38:4b:0c:c5:8c:0e:18:0e:2d:c1:74:79:53:f3:37:
                    4e:cb:dd:15:2b:b5:dd:54:07:b0:d5:ab:87:d3:1a:
                    3c:dc:b5:3b:54:58:f5:17:a8:51:95:2c:e3:6e:88:
                    13:b4:b1:b7:30:7d:f3:87:0f:dd:7f:19:c1:0b:ea:
                    d7:94:88:21:02:9b:ec:bc:b9:24:df:cf:3e:06:48:
                    ab:cf:b0:26:3d:b2:46:ed:75:70:79:b3:ed:0a:90:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:22:E8:F7:62:0A:0C:5A:9B:0A:77:B7:12:25:FD:C4:46:FC:15:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e/b48ee68b-0bae-3362-83c3-c9fc474dea52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e/7d69a54d-e6bb-43b2-a363-308bc5f4225e.crl

            X509v3 Authority Key Identifier:
                keyid:E8:3B:E0:23:4A:2C:B5:A5:39:09:32:19:CD:33:53:8F:DF:26:84:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d69a54d-e6bb-43b2-a363-308bc5f4225e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.9.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:cb:f6:20:d0:7e:4b:4e:7c:c4:2b:60:76:55:ed:a9:88:8d:
         6a:5c:a5:a2:9f:d8:49:b0:d8:8d:5f:23:3b:04:50:92:e0:62:
         41:3f:e9:ee:b2:94:a7:d8:63:3f:2b:dd:c1:d6:3f:99:ea:3e:
         73:e8:21:2f:48:4a:21:a4:c1:f2:b7:a0:1d:1f:d8:12:98:29:
         3d:c8:7d:f4:21:aa:05:da:09:d4:f1:0c:f1:f8:5f:74:1a:a5:
         cf:d2:3f:60:16:56:50:ab:cf:2e:ba:80:13:3b:b5:45:bb:33:
         af:83:bd:2f:1b:7a:58:0b:4a:98:26:43:23:36:8b:bc:24:00:
         30:c5:64:a5:a1:00:d2:26:e1:ba:4f:e3:0e:13:82:ef:3f:a8:
         bb:f5:04:92:63:9c:86:9e:99:fb:63:5b:34:b8:df:1e:f5:57:
         01:d6:18:fa:7a:4d:57:18:ff:7c:16:e2:4d:0d:da:9b:00:a3:
         95:ff:d8:3d:fd:1f:54:98:b3:d5:e9:0b:ac:c4:61:8b:c8:83:
         82:51:7c:18:53:ac:1d:aa:6f:b6:da:b0:23:1f:84:76:81:91:
         6d:f2:ed:3d:7c:35:70:8f:98:cb:83:d5:7c:81:ee:3d:c6:13:
         f2:3a:d1:b1:d6:a6:36:77:98:0f:77:ca:e9:9d:83:de:be:e4:
         87:61:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:38:53 2026 by rpki-client