Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/a038081f-a662-3b16-8bc6-9757f5f3d291.roa
File:                     a038081f-a662-3b16-8bc6-9757f5f3d291.roa (raw, json)
Hash identifier:          hvRZSFJTvNz0W8tWGFc2iQZxhlh87P3WhSlR+jT2mK4=
Subject key identifier:   FE:DA:5B:B4:D6:96:F9:DA:C2:32:22:19:52:68:06:7A:BC:37:09:D7
Certificate issuer:       /CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
Certificate serial:       010D0C9F4328584F655D7B170003B5CD2AE03380
Authority key identifier: 82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/a038081f-a662-3b16-8bc6-9757f5f3d291.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     396982
IP address blocks:        205.142.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:7b:17:00:03:b5:cd:2a:e0:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=23f0679d-bd55-48a9-aeb0-364328f93a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:e3:cd:4c:79:0c:e7:0a:bf:83:82:fb:7c:
                    08:6b:80:40:a6:34:60:28:f5:e0:04:14:6c:15:4e:
                    d7:a0:6c:1e:8b:f9:a0:f2:df:79:54:33:ba:03:d3:
                    95:96:10:6e:34:37:62:c0:e9:7d:41:a2:b5:24:ad:
                    99:db:57:86:08:7c:19:2c:49:57:e9:3c:df:0d:54:
                    f9:ae:9e:78:5c:a1:41:f6:d8:c3:97:74:4c:32:61:
                    6a:97:de:a8:90:b7:81:80:15:9d:c0:6e:fa:ff:57:
                    16:c7:3c:e5:29:d1:ac:c7:e1:69:04:21:45:47:8c:
                    c6:61:d1:1b:90:10:b8:57:23:ec:95:b3:c4:c5:f9:
                    51:25:1e:da:0a:ae:3c:3c:e3:91:15:e4:e0:17:ef:
                    9e:f9:81:bb:e7:ef:94:f6:cf:27:50:29:b4:99:bb:
                    34:a6:58:14:e3:31:c2:f0:ea:ed:b2:1a:21:cc:6d:
                    b5:ef:43:3f:a6:39:0d:09:8f:45:86:cd:b5:39:d1:
                    ef:7a:50:50:35:f5:ab:46:58:30:fa:08:fa:a1:3e:
                    c8:16:b1:57:60:3d:1b:96:60:df:f0:d8:eb:5e:2e:
                    c4:a5:48:a3:d4:e8:96:58:60:bc:e6:94:4e:45:84:
                    f0:18:dc:4d:59:0c:05:40:59:d9:b6:38:69:9f:8c:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DA:5B:B4:D6:96:F9:DA:C2:32:22:19:52:68:06:7A:BC:37:09:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/a038081f-a662-3b16-8bc6-9757f5f3d291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.crl

            X509v3 Authority Key Identifier:
                keyid:82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.142.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d0:9a:53:29:66:89:ee:71:4c:d1:3b:5c:08:29:89:f9:d5:
         05:15:a9:38:9b:c0:30:c1:d8:db:5b:50:bf:1e:ef:40:8f:58:
         5c:e8:9f:08:0c:da:ad:fb:7d:41:7c:08:b7:e2:07:47:53:6a:
         f1:e2:03:e5:dd:f7:96:48:49:16:54:fb:4d:27:b7:21:b4:4d:
         21:70:82:41:4f:a2:3c:58:fd:e7:79:78:bd:97:ce:e7:cc:cf:
         96:ab:fc:c3:f2:82:06:24:bd:9c:81:9d:d3:0f:bf:b9:f5:3b:
         80:d1:7c:bb:d9:6e:cc:ef:a2:8f:3b:11:72:7f:cd:04:4e:f0:
         92:5c:21:02:16:97:46:cc:67:3e:85:ba:f1:a6:b8:65:57:de:
         ff:1a:11:5f:02:f9:b6:05:e5:e7:34:28:ad:ad:5f:3a:ad:aa:
         03:bf:01:36:34:8d:8a:64:5d:8a:63:8b:13:87:fa:db:da:ba:
         25:a3:af:93:54:1b:8d:2a:71:74:db:74:28:90:c4:de:5e:34:
         50:6b:df:7b:76:7e:a7:e6:dd:c9:04:ef:b9:c2:9f:4d:7c:fb:
         02:1d:02:37:e5:1d:18:57:bb:2e:04:3c:b7:7b:95:cc:ad:d9:
         84:be:4e:75:ce:62:88:31:29:86:aa:5c:78:e6:67:73:ba:17:
         55:18:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:55:59 2026 by rpki-client