Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/0aeedde8-fd15-3a5a-9586-4a7b0a7ac6df.roa
File:                     0aeedde8-fd15-3a5a-9586-4a7b0a7ac6df.roa (raw, json)
Hash identifier:          g2LEy5zmDmy24OLXf3Y4HX+aaRgCSPQwM/Uz1DF3bxY=
Subject key identifier:   96:E5:DC:F9:48:2B:9E:72:56:C8:4C:5E:6D:F4:E0:C1:45:7F:81:5B
Certificate issuer:       /CN=2044bf03-a0f3-4eed-9707-b517f4923781
Certificate serial:       010D0C9F4328584F9E98800FA9DC4ED1ADA6DE80
Authority key identifier: 63:C9:ED:E3:0A:CB:B6:C6:A0:E8:61:F0:8B:2F:97:1D:EE:2F:AE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/0aeedde8-fd15-3a5a-9586-4a7b0a7ac6df.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     16428
IP address blocks:        162.254.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:80:0f:a9:dc:4e:d1:ad:a6:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2044bf03-a0f3-4eed-9707-b517f4923781
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=24a379bd-9e6e-455a-a7fb-974b346134d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d6:7a:a7:59:40:9c:c3:27:9d:09:3c:3e:b2:
                    3e:c4:87:4d:5e:52:43:56:70:dd:bf:93:3a:98:e2:
                    4d:2e:e0:af:78:e9:26:4b:b4:47:5c:0f:8f:c1:d7:
                    12:44:d9:c2:ff:d2:a7:3f:c5:3d:69:02:d2:93:96:
                    3a:6e:01:7f:d7:18:7d:fc:a7:a7:0d:80:8e:8d:60:
                    83:91:45:f2:81:33:47:f4:b2:b4:c8:f9:42:91:ea:
                    6e:56:0a:05:54:b6:f7:f2:cc:ac:de:17:2d:ec:d4:
                    e9:dd:09:12:6d:58:74:ab:36:9d:a2:df:e9:80:dd:
                    1f:e0:aa:d0:e6:fc:4e:46:3d:6c:a3:8a:0b:82:62:
                    a9:f3:55:d4:3b:b2:48:28:b7:79:95:33:15:bb:c3:
                    2d:9b:e8:85:17:f5:28:b7:91:96:80:92:cf:35:5e:
                    73:76:d6:0d:7a:24:29:c2:a4:d8:7e:de:9b:18:d3:
                    67:6b:ef:60:cc:ea:98:be:a1:2b:54:55:6a:b5:a6:
                    93:ae:84:ab:1e:6b:12:c4:c7:bf:cc:62:7b:8b:bb:
                    44:3a:9f:aa:2a:6e:23:de:f7:8a:d8:c0:06:e4:7d:
                    e2:92:3e:66:46:2c:b5:ee:56:be:b6:bc:88:76:4d:
                    ba:e7:58:5b:a9:f8:79:e3:75:aa:3d:3f:60:0c:aa:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E5:DC:F9:48:2B:9E:72:56:C8:4C:5E:6D:F4:E0:C1:45:7F:81:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/0aeedde8-fd15-3a5a-9586-4a7b0a7ac6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.crl

            X509v3 Authority Key Identifier:
                keyid:63:C9:ED:E3:0A:CB:B6:C6:A0:E8:61:F0:8B:2F:97:1D:EE:2F:AE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6f:77:f1:3e:eb:1c:4e:77:cd:a3:92:78:3a:14:38:a4:c6:
         86:e9:7a:54:c9:71:94:80:57:bb:7c:98:2a:07:99:1d:22:5d:
         08:f6:78:f5:7f:0c:17:32:8d:1e:44:7a:32:79:64:e5:e3:9d:
         a8:bc:49:ec:97:37:53:00:55:00:ec:fa:53:2b:e6:58:54:02:
         15:78:b0:32:9c:55:4b:ac:19:35:57:f0:16:14:26:bb:7c:15:
         a8:2d:ed:6d:c9:83:ea:54:cf:cc:1c:9d:20:d4:5b:7b:06:93:
         4f:93:f0:ad:a6:52:5c:a0:a5:40:ad:b5:3a:8f:19:17:7d:96:
         03:20:fb:44:b1:c4:6f:4c:97:af:c3:ee:50:d3:bf:1e:e3:69:
         8e:fa:69:b7:72:76:71:cd:1b:62:12:b1:42:48:5a:18:69:9b:
         a9:a0:62:b1:00:53:6c:76:e9:f7:1c:ff:69:c1:b0:1b:66:3a:
         fc:95:bb:e3:df:89:ff:86:80:2a:2f:23:f5:43:1f:ed:4a:b6:
         5b:93:57:cd:8c:fc:f0:e4:3a:60:e6:4a:bc:d7:96:49:40:23:
         ca:9e:26:e5:66:87:75:e4:52:c1:3b:99:b8:b4:a5:7f:63:f7:
         f3:99:be:c9:15:02:d1:8e:28:ef:b2:26:ad:8a:ad:73:c0:65:
         1f:e3:47:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:12:56 2026 by rpki-client