Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37/685824ad-9ea0-39c4-b9e5-5afb208efd02.roa
File:                     685824ad-9ea0-39c4-b9e5-5afb208efd02.roa (raw, json)
Hash identifier:          2cb03iw4ZVJJz5qSa7KvVV7EdceqklysBtHWaNCujAs=
Subject key identifier:   B1:4D:88:54:EC:F6:E9:EB:B2:C0:25:4D:C1:86:C1:11:83:49:F9:4D
Certificate issuer:       /CN=80525d40-f18d-4db4-bef3-5e7fc4b7aa37
Certificate serial:       010D0C9F4328584F99030925CCAA8013F9B0D980
Authority key identifier: 82:4D:4D:22:8F:F4:0E:8D:0A:FE:75:3C:02:B9:DF:AC:AF:67:FA:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37/685824ad-9ea0-39c4-b9e5-5afb208efd02.roa
Signing time:             Fri 23 Oct 2026 13:00:12 +0000
ROA not before:           Fri 23 Oct 2026 13:00:12 +0000
ROA not after:            Thu 21 Jan 2027 14:00:12 +0000
asID:                     30624
IP address blocks:        167.204.224.0/24 maxlen: 24
                          167.204.225.0/24 maxlen: 24
                          167.204.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37/80525d40-f18d-4db4-bef3-5e7fc4b7aa37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37/80525d40-f18d-4db4-bef3-5e7fc4b7aa37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:03:09:25:cc:aa:80:13:f9:b0:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80525d40-f18d-4db4-bef3-5e7fc4b7aa37
        Validity
            Not Before: Oct 23 13:00:12 2026 GMT
            Not After : Jan 21 14:00:12 2027 GMT
        Subject: CN=5d7d7c2f-a094-4642-85bd-32f30815ac85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7f:fa:6d:b2:9f:6d:5e:08:80:4c:c7:73:2c:
                    5e:ca:8a:a8:26:e9:ac:c0:9f:d4:d7:f0:09:41:f5:
                    50:e5:fb:af:dd:17:9b:85:b6:40:d1:bd:d0:54:2c:
                    b0:2a:96:5f:54:0d:c6:4d:bc:0e:be:0e:75:b1:85:
                    7e:12:84:35:95:0d:72:d5:e1:8d:18:ea:92:b4:c3:
                    31:09:1e:e9:69:27:40:e7:0d:1e:6f:a6:84:e2:cc:
                    d5:21:f2:60:53:69:57:f3:3f:0a:a6:34:fc:c8:dd:
                    6e:bb:14:62:47:6d:8e:3b:1f:84:ff:b1:61:4d:ea:
                    e6:a3:5d:74:99:c2:1b:cc:51:60:4b:60:c1:a0:85:
                    ee:02:2b:86:05:27:a3:c4:01:1b:55:31:03:a7:bc:
                    2d:06:71:5a:bd:d9:6e:25:04:80:e4:92:7e:d2:06:
                    82:bf:d8:cf:4e:8f:12:77:0a:16:f2:5f:2d:c2:d0:
                    7d:4f:9c:1d:3b:02:c5:0a:d3:69:22:b4:2b:04:a1:
                    6e:1c:6c:4a:11:c2:9d:65:ff:5d:24:60:40:46:ce:
                    f5:42:38:61:a0:3c:3a:b3:0b:33:26:2e:ce:29:79:
                    44:b7:3e:a9:85:ff:c7:fc:6a:87:8b:3e:68:aa:21:
                    46:d1:ec:13:d3:e9:19:46:20:35:b7:e5:54:74:b7:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4D:88:54:EC:F6:E9:EB:B2:C0:25:4D:C1:86:C1:11:83:49:F9:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37/685824ad-9ea0-39c4-b9e5-5afb208efd02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37/80525d40-f18d-4db4-bef3-5e7fc4b7aa37.crl

            X509v3 Authority Key Identifier:
                keyid:82:4D:4D:22:8F:F4:0E:8D:0A:FE:75:3C:02:B9:DF:AC:AF:67:FA:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.204.224.0-167.204.226.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:78:4a:3d:4a:ee:c0:7a:89:19:37:36:6d:95:df:d0:48:95:
         7f:f8:4f:94:51:f0:02:a3:cb:48:b3:78:bf:f5:1f:46:da:07:
         9c:44:9e:89:b7:34:18:7b:fd:f8:aa:32:63:5f:34:ef:4a:83:
         ac:ee:7e:97:a2:66:53:ac:9d:ec:90:5b:40:e9:df:df:47:e6:
         c9:53:20:b2:48:af:44:47:63:75:44:1f:ef:e2:66:6d:a6:68:
         05:1d:aa:40:d8:4a:db:64:18:78:0e:e6:5f:80:3a:c2:03:64:
         24:26:49:3d:f2:ba:6d:9e:56:98:f8:3e:2c:6b:84:ac:f3:ac:
         18:0b:e0:5c:5d:2f:0b:24:83:73:3d:a1:4a:c0:98:50:7b:25:
         6f:e2:68:50:56:3b:34:b0:e1:3c:75:d9:45:85:20:4a:90:b2:
         bc:14:71:88:15:cc:5e:f7:fb:82:97:3a:64:26:b1:02:6f:90:
         9c:bf:54:58:c2:ce:f3:32:0f:66:76:d2:90:73:92:e6:38:67:
         c1:c2:65:b0:37:e4:b5:79:c6:e0:3e:d6:5f:51:eb:c5:a4:86:
         5b:5c:dc:24:7b:56:9a:84:c4:e1:d5:75:97:08:95:2e:01:db:
         43:a5:72:b0:ac:dd:83:31:f2:34:77:69:a7:1f:65:8a:3d:f8:
         7d:67:44:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:43:34 2026 by rpki-client