Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dc5aee6f-5cf8-3970-bc17-0929e3b3f01d.roa
File:                     dc5aee6f-5cf8-3970-bc17-0929e3b3f01d.roa (raw, json)
Hash identifier:          j6cyWfSIJ7avSEY5eVqwtkZ9M1/onvuT5ViPAshaug4=
Subject key identifier:   40:D2:4A:72:75:89:74:A3:82:DB:69:07:9B:28:AC:EE:53:0E:26:20
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584F814838174FD23ADA4E813C00
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dc5aee6f-5cf8-3970-bc17-0929e3b3f01d.roa
Signing time:             Thu 15 Oct 2026 01:00:12 +0000
ROA not before:           Thu 15 Oct 2026 01:00:12 +0000
ROA not after:            Wed 13 Jan 2027 02:00:12 +0000
asID:                     154321
IP address blocks:        198.44.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:81:48:38:17:4f:d2:3a:da:4e:81:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Oct 15 01:00:12 2026 GMT
            Not After : Jan 13 02:00:12 2027 GMT
        Subject: CN=61fbe17a-9f82-4816-be45-b9a68b4960b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:46:26:04:dd:d9:84:b2:76:58:4f:b9:ce:
                    05:5a:34:89:33:38:b7:3b:f5:6e:a9:c2:93:91:c8:
                    a5:f7:44:bf:8d:95:6f:90:9f:4b:be:b4:a5:29:f8:
                    34:78:75:5e:27:2b:6b:9e:d8:e4:52:be:17:84:70:
                    cc:47:6e:77:22:98:8f:eb:7d:79:62:84:87:fb:80:
                    c6:62:92:79:c7:b8:bb:88:e5:9b:8b:32:65:fa:60:
                    5e:ce:53:cb:39:59:47:1f:1d:1d:17:f6:52:23:a3:
                    9c:df:b6:bd:c2:34:91:dd:43:a1:95:5e:20:8b:7a:
                    49:7c:4d:96:de:31:ae:85:18:a6:f5:af:62:97:be:
                    68:a1:af:3b:1e:62:ba:9b:50:e6:2e:9f:a1:79:f3:
                    ae:29:6d:23:f2:fc:bb:cb:a2:2e:b3:b1:ea:11:20:
                    54:8b:c0:3d:6c:cd:b0:f9:b4:85:a7:07:24:83:2f:
                    fa:67:bf:c9:55:c8:d4:19:ec:df:55:87:a8:e6:95:
                    03:e3:44:b1:84:2d:49:3f:84:b2:cc:9e:eb:78:bf:
                    71:df:1f:20:d4:be:3a:bd:67:64:2b:10:cf:08:e4:
                    34:dc:50:bc:fc:9c:3d:55:f5:eb:d2:1e:a2:3d:c7:
                    71:3c:e5:4f:a0:7e:e1:d8:04:25:dd:73:13:c5:f5:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D2:4A:72:75:89:74:A3:82:DB:69:07:9B:28:AC:EE:53:0E:26:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dc5aee6f-5cf8-3970-bc17-0929e3b3f01d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6e:35:3e:52:8e:92:c5:29:08:7f:85:e0:8b:9c:5d:5e:3b:
         bb:bc:35:35:8b:57:f6:fd:d7:dc:df:ba:da:2e:fe:aa:08:94:
         54:a4:34:65:bc:d4:13:f3:fd:4f:41:b9:27:82:f1:d1:b7:7e:
         22:bf:0a:11:d2:6a:c1:e6:34:6e:c3:b9:a1:05:5d:8c:e0:24:
         b3:c1:85:c4:f9:13:58:47:44:ea:0b:a4:26:11:d6:ec:c2:09:
         e1:c0:9f:bf:e9:6d:d2:a7:2a:dd:89:c0:c7:30:2b:7a:1c:49:
         05:d5:ec:03:55:bd:f4:10:f2:21:28:54:74:3c:8e:e5:44:fa:
         79:d6:ff:4b:43:5c:c0:e8:aa:f6:02:cf:7c:cc:e3:a8:87:8e:
         5e:35:42:b8:44:cf:33:07:b9:65:d5:d4:5f:21:d8:4c:5b:65:
         11:6a:36:a7:2e:48:f0:76:5a:be:22:92:64:3a:8f:85:87:8a:
         04:98:78:1b:7a:ff:ba:49:78:f0:9f:76:75:32:de:46:a4:e6:
         0b:02:7d:ce:82:a8:31:ab:63:2f:22:b5:0f:9b:f2:4a:41:7d:
         ce:b9:89:2f:3d:94:57:be:54:e0:34:cf:f0:27:17:8c:c3:4b:
         6a:48:08:b8:09:da:6c:75:c7:7f:6c:fe:3f:53:c8:76:4c:21:
         f5:d7:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:39:13 2026 by rpki-client