Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/130480d0-ed84-3a44-9466-45f49561ad6e.roa
File:                     130480d0-ed84-3a44-9466-45f49561ad6e.roa (raw, json)
Hash identifier:          1Icl+UbyWtWZ7Yg4gZz1Wp5gYoCpiWGl4/XSYSNjxZU=
Subject key identifier:   8A:D6:EF:5F:E1:3E:97:5A:0F:E5:C2:D5:77:D6:70:97:3E:AB:E7:24
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F4328584F5E62C46D912D14371DB3A880
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/130480d0-ed84-3a44-9466-45f49561ad6e.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     174
IP address blocks:        199.167.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:c4:6d:91:2d:14:37:1d:b3:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=4373d738-c9c7-4cff-9eac-0903206b5008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:a3:a1:92:e0:a8:42:aa:54:d9:96:11:5f:
                    6f:85:cb:35:6c:62:d2:28:fb:80:64:90:10:80:6c:
                    9a:11:40:11:06:a4:8c:f2:e3:30:ac:0a:94:1a:93:
                    83:3d:45:63:d6:ce:1c:51:dd:a4:2e:33:23:df:af:
                    99:f4:c1:b8:11:d5:e2:4a:1e:f4:64:d3:a2:d3:8f:
                    18:e7:94:94:f8:e1:82:d0:8b:60:ff:5b:06:fe:ac:
                    55:34:34:a1:e7:48:b1:95:44:06:0d:2e:b6:47:0d:
                    68:ae:1d:e5:0f:7c:07:ad:69:0b:ad:78:5c:c7:f7:
                    ae:a5:a7:ab:d6:7b:93:a5:dc:2a:4a:22:7b:15:0f:
                    82:36:1a:e6:31:5b:06:1c:98:6f:f6:a4:c8:98:79:
                    b7:95:28:5f:e4:9c:fc:66:da:bc:71:4a:96:52:f4:
                    49:12:8c:bc:95:4b:11:24:59:e6:de:0f:31:0c:ff:
                    2f:2b:c8:8f:16:b1:fe:19:94:9f:eb:e7:2a:43:22:
                    d6:55:ae:13:51:40:bf:bf:02:97:54:34:96:7f:26:
                    17:41:72:94:41:d5:55:7a:83:47:9b:d9:cc:db:55:
                    61:fa:fd:d3:8f:53:a9:4f:0b:c5:41:55:9c:40:ad:
                    eb:9d:f4:4b:0d:7f:b8:5e:58:e1:94:62:b0:10:2d:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D6:EF:5F:E1:3E:97:5A:0F:E5:C2:D5:77:D6:70:97:3E:AB:E7:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/130480d0-ed84-3a44-9466-45f49561ad6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:86:8f:92:a8:2d:35:07:56:15:63:e7:99:42:f0:b6:42:
         43:79:1c:cb:50:e6:bc:3e:3e:d5:df:68:04:36:e6:9d:ad:a4:
         d1:d9:b1:2e:32:d5:bc:f7:1c:d9:04:3f:0d:b2:54:22:54:6e:
         05:db:7f:ab:c3:26:ba:b1:eb:bf:67:ca:d5:a7:cb:a7:ef:d7:
         f5:32:44:8e:2f:9e:00:30:45:8d:02:81:78:4e:d9:b6:3d:69:
         21:75:e6:80:c9:d7:90:36:ca:62:34:5a:54:99:f1:7f:f5:9e:
         c9:f6:5c:1f:b2:b0:77:b2:ad:45:84:c5:15:60:bc:93:66:22:
         96:b0:0f:38:58:b4:b1:32:50:e1:59:de:32:15:a0:0d:d1:22:
         55:97:c9:a5:2c:07:bb:10:21:c2:5e:12:24:76:e5:fb:61:8f:
         d9:8f:79:05:80:61:ad:f9:fa:db:51:26:a3:14:90:bf:8d:b1:
         37:31:7f:08:b2:3f:93:e2:70:4b:50:22:29:dc:68:d1:ac:73:
         78:17:4b:48:c3:c9:77:d8:ac:e0:65:4c:55:f4:68:4d:f1:4a:
         20:5e:c8:6b:82:94:a0:ea:f0:7d:ee:35:7c:89:8d:d3:78:9d:
         5d:9f:0a:c1:2c:a5:4f:c4:b4:3f:7a:93:23:b1:0e:5d:03:1f:
         96:eb:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 05:20:32 2026 by rpki-client