Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/a6df5481-79ab-316c-b529-adaa3f7fe8e7.roa
File:                     a6df5481-79ab-316c-b529-adaa3f7fe8e7.roa (raw, json)
Hash identifier:          U/4urT8Hlb7E678pr2dtxQJlTeDUeQ/GA8FfmUD/9AA=
Subject key identifier:   48:A0:FE:B9:AA:2D:60:68:19:EB:95:5C:46:D8:30:89:DC:10:A0:9B
Certificate issuer:       /CN=f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004
Certificate serial:       010D0C9F4328584F778364619D958CA2E760D880
Authority key identifier: 37:71:46:B7:1B:96:9B:81:E7:E2:92:EE:46:4C:C1:CF:E8:12:9E:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/a6df5481-79ab-316c-b529-adaa3f7fe8e7.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     401953
IP address blocks:        165.110.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:64:61:9d:95:8c:a2:e7:60:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=9a6d9628-a3fc-4544-9ad7-aa4b2670feb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2e:fb:50:ba:94:8e:7f:6f:35:cf:7a:de:5f:
                    9c:b9:8e:44:48:c7:41:8a:54:39:78:b3:d2:8d:9e:
                    9e:ff:26:d6:20:24:cf:fb:4a:b5:e9:5b:cb:dd:b9:
                    56:08:2d:85:b7:57:7f:8a:bc:41:27:6f:18:cf:74:
                    fa:4e:c3:d3:a7:6e:a0:e5:09:e4:13:de:f7:6d:f4:
                    07:8c:98:9c:79:fd:63:e8:98:b7:4c:be:9d:bb:ad:
                    33:85:fc:a3:f2:0d:aa:42:5d:4a:c3:41:5d:94:89:
                    2c:46:a0:d0:db:36:80:fc:d6:24:eb:e9:26:0a:6f:
                    b7:d6:77:f9:22:b5:1a:a2:5c:9f:a6:25:d1:6c:6a:
                    5f:83:70:73:2a:8d:97:77:39:9e:7c:0a:63:ad:91:
                    8a:8e:86:c6:8d:91:a3:7a:59:02:e3:2d:94:30:6f:
                    dc:17:41:33:36:c7:ac:a9:f0:33:13:89:2f:14:29:
                    78:ea:45:92:c6:ad:22:15:d6:22:c3:19:d6:de:bf:
                    fb:57:93:50:47:37:fb:03:d9:7b:c3:9e:d8:63:b5:
                    3b:60:e6:84:17:c8:28:b2:c0:01:ae:e2:4f:2f:7c:
                    a3:15:55:e1:52:d3:b8:d8:10:bf:36:01:00:64:9d:
                    14:41:ce:52:97:38:bf:b8:57:3e:f0:70:8a:e7:19:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A0:FE:B9:AA:2D:60:68:19:EB:95:5C:46:D8:30:89:DC:10:A0:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/a6df5481-79ab-316c-b529-adaa3f7fe8e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.crl

            X509v3 Authority Key Identifier:
                keyid:37:71:46:B7:1B:96:9B:81:E7:E2:92:EE:46:4C:C1:CF:E8:12:9E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f2a3cd84-47b7-4a7d-b16d-01a8f4cc7004.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c7:6a:08:33:e0:a8:d0:35:bc:4e:9e:a7:7c:98:cb:43:e8:
         88:7a:64:cb:7a:c2:28:e2:34:70:f9:a3:66:f7:62:c5:a1:19:
         34:36:4b:24:b4:b6:73:50:6f:64:c1:d5:68:3f:a0:22:1f:07:
         b3:75:72:7f:15:70:a5:24:2b:7c:26:a7:20:f7:53:bf:81:69:
         e5:51:78:b4:ea:6d:e3:ec:b3:ce:02:0a:43:24:5b:e8:b2:8b:
         51:de:68:dc:e4:90:a1:77:36:2b:2c:93:85:0a:7e:d4:c2:91:
         ac:02:b7:96:42:e0:2e:52:7b:fe:29:48:94:23:28:25:59:66:
         7d:86:31:9d:59:87:1a:80:48:61:6b:73:66:28:e3:a9:3f:75:
         9c:95:5f:f3:8f:85:e9:27:ca:40:08:6e:3b:88:e1:c8:91:42:
         87:fe:cb:bc:4b:75:09:02:8e:f8:aa:7c:be:9a:96:25:96:8a:
         64:ad:39:20:25:88:a4:34:dc:b5:21:65:c1:23:7f:67:b7:9c:
         9d:49:53:bf:b6:75:7f:6e:9a:13:3a:20:68:d1:16:33:0b:87:
         fc:58:8c:31:af:e5:3f:a5:90:97:4d:df:98:db:c6:90:62:ea:
         19:e4:6a:fc:a7:a5:77:26:64:f1:42:9c:87:5c:e1:b7:aa:f7:
         6a:99:c0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 12:02:24 2026 by rpki-client