Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6eec1167-35b7-3f82-bfe7-2808ac8af1df.roa
File:                     6eec1167-35b7-3f82-bfe7-2808ac8af1df.roa (raw, json)
Hash identifier:          6fkqOqOQ5DuX8WiSZkkaLqyL5X+SNOEIVyau0q6xPmU=
Subject key identifier:   B5:3F:3A:0C:EC:17:22:03:5D:67:3F:3A:69:FB:70:34:C7:EB:68:A4
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584F49751C73B6D433A4AC75B900
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6eec1167-35b7-3f82-bfe7-2808ac8af1df.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11090
IP address blocks:        185.30.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:1c:73:b6:d4:33:a4:ac:75:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8cec9743-2585-41c8-8ab2-0e038b1c3460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:4f:c7:2d:9a:9b:c5:08:ed:26:7a:c1:1b:
                    a7:7d:53:0f:ee:90:fc:65:45:0b:77:f7:ec:00:e4:
                    95:8c:17:33:9e:90:70:b2:5b:65:81:04:45:e5:74:
                    de:31:7f:e7:e7:a5:f8:d6:0e:4b:c5:e1:5a:37:10:
                    0d:e4:9d:d6:42:5a:8e:43:49:53:57:f4:3e:af:12:
                    7c:97:4a:bb:b4:fa:53:1f:92:db:cc:7e:6e:93:62:
                    17:93:60:1f:78:c1:3e:90:df:4b:e6:d2:8e:66:ca:
                    eb:b7:8e:16:2d:c6:81:40:25:96:3e:b0:94:4c:c0:
                    f2:f0:41:65:2a:64:b2:d9:59:8b:81:ce:99:5b:6b:
                    40:a4:2c:11:e6:90:89:f0:64:11:b4:c8:ac:a4:de:
                    18:35:9f:f2:7c:fe:7b:0d:a0:ed:40:62:ed:ff:24:
                    5f:92:51:ca:34:c7:7d:8c:d3:27:24:21:30:4d:f8:
                    1b:12:f1:8d:18:f8:86:04:6e:4e:38:c1:bf:a4:0b:
                    f8:65:d2:ed:4c:e3:39:5e:48:01:8e:10:58:6d:2d:
                    2a:27:97:5e:7e:b5:b2:a4:f2:51:af:ea:66:ed:b5:
                    2a:71:05:b6:1c:5c:39:40:ea:11:c4:c8:57:d5:96:
                    3e:77:ac:6c:7a:4f:1f:a8:3b:b6:87:8e:3d:c1:ef:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3F:3A:0C:EC:17:22:03:5D:67:3F:3A:69:FB:70:34:C7:EB:68:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6eec1167-35b7-3f82-bfe7-2808ac8af1df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:86:28:b5:21:57:75:5b:93:69:e1:62:8f:73:3a:25:5e:47:
         e8:65:c8:d2:19:ad:18:07:5d:4e:75:d9:f1:c1:50:bc:b9:a6:
         90:36:f4:0b:fe:66:97:e9:f1:6a:5e:6c:09:f0:ea:83:5c:2d:
         38:d3:04:12:07:ca:13:2e:ed:71:67:12:77:e8:93:b1:15:ad:
         aa:df:32:1d:b4:b4:af:44:f5:fd:a5:cd:18:d5:5f:d6:63:3b:
         bf:c2:32:38:61:e9:19:c0:12:4d:4f:be:c4:05:d8:dd:05:4f:
         9d:f2:fa:ed:6f:4a:64:93:72:a2:7a:9a:f0:79:f5:5b:22:5b:
         4c:21:ba:44:d2:0a:ca:38:e4:ca:6c:0d:4d:66:d8:83:a2:08:
         e6:f9:d5:d1:a5:db:b0:2c:75:ad:7f:fc:05:05:36:c8:f1:01:
         8f:3c:28:05:d0:cd:63:ca:59:17:e8:d1:b3:42:61:f7:7f:a4:
         95:4e:41:19:dc:03:98:7c:2c:30:7b:f6:c1:fd:51:4c:dd:63:
         57:10:8a:65:c9:36:17:d2:ec:33:38:9b:83:42:a1:4a:28:f2:
         38:5e:41:0b:84:cc:e9:51:64:58:d2:ca:58:60:eb:56:88:07:
         38:43:72:83:70:83:da:6f:c1:e7:0e:17:0e:32:31:0a:78:ec:
         81:8d:a2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:59:48 2026 by rpki-client