Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/3eeedfb2-56b8-3cc5-b2cd-408ca625c7d3.roa
File:                     3eeedfb2-56b8-3cc5-b2cd-408ca625c7d3.roa (raw, json)
Hash identifier:          jFhQJ68GczzjJYfDdJKhGajfP+dRe95afOV/ljfwC/Q=
Subject key identifier:   05:6E:9F:8F:13:A2:21:9C:65:B4:45:3B:3B:8E:88:86:A9:5C:B6:56
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F4328584F5E62C462315190F8EC8AF580
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/3eeedfb2-56b8-3cc5-b2cd-408ca625c7d3.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     29838
IP address blocks:        199.167.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:c4:62:31:51:90:f8:ec:8a:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=56dec21c-f7e1-4a43-b018-d8ee7c96b0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:38:a2:2c:25:42:5c:a5:74:3b:60:a2:c4:
                    d4:1c:a8:b6:bf:1c:9c:52:20:83:4e:57:f0:68:22:
                    94:5c:c0:6a:4d:51:eb:0d:5b:32:c2:53:a6:d5:74:
                    77:0b:79:f6:bf:c1:81:55:ad:cb:ba:44:5f:59:5d:
                    75:bb:32:ff:a4:06:df:f2:48:b6:d9:7d:9f:13:93:
                    42:9b:5e:ca:14:ff:6d:e4:09:0c:b8:69:3c:b0:6f:
                    58:51:1e:8d:da:6b:90:df:60:f0:a9:1f:0d:26:26:
                    6b:14:ec:9f:46:96:b3:d1:40:86:06:0f:bb:81:e9:
                    d4:ea:65:12:13:68:00:5c:3e:79:dc:7f:d8:5d:5f:
                    09:2d:90:4e:a0:4f:1a:83:f4:a6:3d:c1:8c:6f:af:
                    18:1b:fa:14:61:11:61:e2:77:82:02:c0:77:ae:7b:
                    b3:f3:f1:f4:19:84:9d:c9:6d:74:37:c0:dd:7c:48:
                    66:9f:da:49:d8:5d:0d:30:ff:e8:b9:f7:d8:23:ba:
                    22:bb:1e:ba:93:0b:77:73:11:91:40:5d:f1:a3:08:
                    0b:e3:2e:c7:ae:66:b8:2b:36:24:7b:96:c5:ea:37:
                    94:35:6c:b8:5c:e2:fe:88:2b:8d:7f:a2:8f:a7:f6:
                    db:a2:76:e4:3f:4e:77:e7:81:47:4a:33:ca:9b:74:
                    67:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:9F:8F:13:A2:21:9C:65:B4:45:3B:3B:8E:88:86:A9:5C:B6:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/3eeedfb2-56b8-3cc5-b2cd-408ca625c7d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:04:5b:6f:2d:95:77:01:5b:c6:ab:d2:cc:16:dc:d7:d8:c6:
         d6:d2:68:cb:1a:29:b2:a0:f3:57:f8:86:b5:d7:85:a7:be:33:
         68:07:28:50:e6:dd:6d:84:9c:86:e8:35:d1:5b:fc:bf:ef:d7:
         7b:df:82:44:03:52:1c:df:a8:d1:b3:c6:91:b5:9c:26:43:8b:
         07:3f:64:82:cf:b9:7e:33:25:61:89:87:6f:99:72:62:f6:07:
         5c:74:a9:31:a5:c2:00:52:5b:58:4f:22:77:44:b1:82:38:3d:
         4f:49:ee:a6:90:1c:59:ca:4c:6a:c7:c9:99:e1:ba:8f:c8:3d:
         48:7b:5a:e2:fc:09:54:d9:71:da:2e:d7:26:7a:1c:00:f1:4f:
         58:9d:ea:8e:d1:f1:da:47:fe:95:5d:5d:e2:d2:09:a9:ff:fb:
         d8:da:bd:e2:23:e0:6b:8c:37:43:af:d4:fa:68:81:71:d7:d3:
         ac:84:37:b3:e2:db:16:52:2d:72:88:93:e6:9b:ca:42:63:36:
         4d:90:6d:11:78:d5:3e:f6:8a:cc:50:47:3a:c5:ac:68:37:29:
         9f:5e:62:3e:a9:4f:42:25:e3:09:de:1b:d3:83:d5:ca:9f:70:
         9b:12:96:a9:1f:d1:fa:54:12:c7:ba:d0:ba:f1:c9:55:25:4d:
         00:24:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:24:59 2026 by rpki-client