Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa
File:                     c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa (raw, json)
Hash identifier:          XoCAIKOI83XPkhzUEl9LbJymm7rQG9c9WLGAo/ltPrg=
Subject key identifier:   EC:3F:AB:D2:78:B3:28:04:A3:9F:31:44:B1:EF:B4:F3:65:27:80:33
Certificate issuer:       /CN=dba0d862-3d0e-4150-90de-3c956c1b532d
Certificate serial:       010D0C9F4328584F9A687E21C0E17E6080E65C00
Authority key identifier: 8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     394177
IP address blocks:        170.75.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:7e:21:c0:e1:7e:60:80:e6:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba0d862-3d0e-4150-90de-3c956c1b532d
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=0d3fb053-4176-43a1-b210-9cde8017df07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:d0:f1:5e:7d:a1:ee:54:b0:f8:b6:19:5d:
                    f8:c9:d9:4e:6d:0e:bd:59:0d:c3:ed:b3:60:56:84:
                    1d:e0:84:de:ca:11:1c:f7:1f:88:15:5c:67:36:e2:
                    c2:ff:4d:a5:e8:d4:7b:30:57:3c:29:cc:78:40:be:
                    e7:53:fb:02:df:74:b5:0a:ba:0a:01:48:be:7e:49:
                    50:32:c5:e7:85:1c:5f:3f:d5:c6:18:c0:9c:45:6b:
                    f8:d9:4e:0e:4f:e4:86:a1:7e:7a:a4:70:b7:c3:b4:
                    c3:a5:70:76:53:8b:26:d7:66:6b:a6:0b:52:a1:73:
                    a0:24:62:76:17:b1:b2:fe:79:28:8d:39:f0:52:79:
                    68:c0:56:9b:b7:c2:8e:de:45:a0:8a:3a:e9:15:7f:
                    0c:62:e4:6f:16:d3:e6:f2:32:36:c9:27:45:50:e0:
                    cd:93:a3:86:05:46:fb:a5:a7:ce:dc:44:9b:a2:0b:
                    3d:97:34:d6:e9:3d:69:fa:1f:29:72:b4:40:75:b4:
                    0f:54:8e:b6:90:fb:bb:79:a7:18:67:23:15:0c:9b:
                    9d:c2:c8:42:dc:dc:a7:07:94:6b:63:ba:46:d6:8c:
                    c3:00:13:da:35:61:49:12:e4:b8:ad:a6:25:70:7c:
                    71:ed:61:ca:98:24:d9:71:f0:a4:66:61:a2:74:5a:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3F:AB:D2:78:B3:28:04:A3:9F:31:44:B1:EF:B4:F3:65:27:80:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl

            X509v3 Authority Key Identifier:
                keyid:8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:03:ba:21:c9:d0:54:6d:c1:f6:90:e1:e3:c3:b9:66:6f:77:
         f5:55:5e:26:96:68:dd:f7:1b:6b:ee:00:d3:4e:a3:b1:26:0b:
         f4:a2:6e:36:03:ca:67:4a:c7:f8:20:3d:1c:72:af:32:7c:29:
         1c:d2:93:02:86:14:19:f2:dc:75:70:a5:bc:c3:bd:c8:e6:5f:
         41:14:87:ca:af:17:68:57:34:90:4e:91:33:73:52:b5:4b:b2:
         e9:38:3e:8d:aa:ed:d6:72:1a:22:53:c4:84:45:54:38:51:22:
         1b:97:df:35:44:56:be:ff:f3:7e:f7:02:6e:7e:e8:c8:f5:da:
         a6:ae:bb:2b:f1:80:24:f0:2b:f0:b0:10:34:61:91:96:4c:50:
         d4:b9:6d:d6:5d:4d:6d:57:a8:26:45:a9:ee:05:34:c0:b5:05:
         36:d9:51:70:74:89:08:94:b7:9c:f5:bc:07:da:10:e8:77:14:
         47:91:d7:27:14:49:45:72:f7:37:d8:93:67:66:57:29:43:cf:
         f3:22:cc:a9:37:94:13:dd:a9:a3:34:15:f3:b9:03:45:88:a1:
         6c:88:99:7b:9d:1a:73:b6:41:41:65:ee:a6:d6:c0:6f:81:4b:
         ca:5d:2d:fe:36:57:8e:1c:bd:14:79:73:2a:a8:25:4c:7b:5d:
         61:53:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:13:45 2026 by rpki-client