Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/871a2ca0-ea8c-3747-9a56-e7822408b82b.roa
File:                     871a2ca0-ea8c-3747-9a56-e7822408b82b.roa (raw, json)
Hash identifier:          ifNVzX2ZWs6pjQGEVAQElm0aQH3yrFBnNb9ChwyUjro=
Subject key identifier:   73:50:AF:D2:39:4B:06:BE:DF:34:7D:54:32:AE:50:9A:12:CA:D1:12
Certificate issuer:       /CN=776cdb06-1306-4fbd-b690-680ab4fe3f19
Certificate serial:       010D0C9F4328584F454284DB3CC00D57DAE10480
Authority key identifier: CF:2F:18:51:CD:2F:C6:34:EC:48:C5:D8:07:F7:88:DB:D0:FC:8E:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/871a2ca0-ea8c-3747-9a56-e7822408b82b.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     203380
IP address blocks:        165.140.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:84:db:3c:c0:0d:57:da:e1:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776cdb06-1306-4fbd-b690-680ab4fe3f19
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=61ec0bc0-b0c5-4cdd-a0ec-3041c2f87e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c2:33:e2:4d:81:65:de:ca:bc:b3:72:39:7f:
                    c9:4a:29:82:06:c3:64:26:f2:80:7d:77:4f:56:35:
                    8b:02:6e:0e:f2:0e:4a:6b:8e:0a:9c:f6:8b:de:e4:
                    f0:c0:10:f6:6f:25:d6:c6:6f:f3:7c:78:a9:68:09:
                    83:d7:ae:3a:8b:bc:73:c4:9e:b2:4d:b0:97:46:9b:
                    d1:a4:50:b4:48:c0:70:2b:a5:df:a2:c6:f8:a1:d0:
                    ec:30:f8:a7:db:36:03:d7:66:0c:b1:4c:ca:cc:e6:
                    32:1f:b5:72:9c:c0:25:2a:02:77:ca:bc:15:15:32:
                    fb:d5:c9:7a:5f:6e:5f:76:73:2f:60:81:ec:ab:3e:
                    40:b0:86:64:c7:28:24:bb:01:00:bb:34:b8:b8:a2:
                    56:08:76:cc:66:0c:ee:13:53:53:33:41:46:71:27:
                    ca:3c:a1:e9:64:5a:b7:47:fe:c0:b3:13:74:59:68:
                    72:cf:14:83:b6:33:0d:74:c1:bc:81:34:21:dc:af:
                    5f:81:9a:3c:d0:07:50:53:b8:db:a4:7e:a9:34:1d:
                    f2:44:48:14:ff:0b:2d:88:61:24:3b:40:bd:5a:0f:
                    f2:ae:98:a8:de:98:be:9f:13:b8:3b:06:dc:55:c8:
                    98:ac:b7:74:46:ae:c9:10:6c:1a:68:b6:b4:ae:ec:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:50:AF:D2:39:4B:06:BE:DF:34:7D:54:32:AE:50:9A:12:CA:D1:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/871a2ca0-ea8c-3747-9a56-e7822408b82b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.crl

            X509v3 Authority Key Identifier:
                keyid:CF:2F:18:51:CD:2F:C6:34:EC:48:C5:D8:07:F7:88:DB:D0:FC:8E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:37:e9:eb:d4:91:42:a0:8b:af:8f:26:c0:7c:34:31:dd:dd:
         fb:61:a3:3f:90:61:9c:3b:d5:f1:52:0b:63:72:a9:58:23:8b:
         de:35:3e:ce:a0:25:c4:b7:77:02:4e:f7:f0:4b:1c:62:89:cf:
         40:7b:46:8e:d7:f8:5a:29:92:1c:7d:ee:3a:11:54:36:ec:f9:
         9c:c2:ff:47:ef:f5:80:5f:b0:ea:b5:0d:59:69:e0:95:71:d9:
         34:57:3f:8f:ef:64:3a:04:ea:d2:8d:8b:a3:ef:26:0b:6d:93:
         c3:29:0a:b7:d3:25:a6:3d:91:e4:08:87:18:f4:8c:a5:0e:9d:
         86:e3:9b:44:64:ec:82:43:a8:7d:0a:ab:05:52:45:5d:ff:0b:
         b3:90:4b:d5:37:7c:45:34:87:28:85:38:aa:a4:e4:65:e3:7e:
         8a:63:59:88:ec:d8:63:74:84:21:41:44:d0:0b:de:b3:ff:4b:
         98:62:95:5c:ef:39:07:4e:ff:ac:54:92:2e:30:ed:4c:7c:0a:
         9d:0e:c1:39:dc:16:b4:57:82:6e:59:31:65:ac:ab:2f:c8:f8:
         14:25:09:35:ea:bf:e7:43:75:88:e4:cf:d3:2d:1e:42:f6:3a:
         02:55:a9:ac:c1:20:94:b1:02:d3:bf:bf:9b:0f:1b:06:a9:7b:
         35:86:50:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:01:14 2026 by rpki-client