Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/f04fa8ab-3894-36e6-9343-e11c41b48098.roa
File:                     f04fa8ab-3894-36e6-9343-e11c41b48098.roa (raw, json)
Hash identifier:          67Aw4F9darp7g1ObBELceQJpyiWRVEuTxsIl+dA5MLQ=
Subject key identifier:   ED:0A:B4:5D:B5:D1:C4:BD:F9:B8:E5:68:73:51:03:6C:82:E5:E6:CA
Certificate issuer:       /CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
Certificate serial:       010D0C9F4328584EA7980A25154CD0C1DDD49C80
Authority key identifier: 25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/f04fa8ab-3894-36e6-9343-e11c41b48098.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62802
IP address blocks:        170.4.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:0a:25:15:4c:d0:c1:dd:d4:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eb5ee59d-afff-425a-b706-1ee323b55e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f7:0c:b4:0c:dd:d3:09:37:6b:eb:b4:55:4a:
                    e0:1c:14:ee:21:c2:d5:d4:f5:24:ea:97:fe:3c:80:
                    68:fb:5c:f0:ed:be:c8:06:b2:78:80:2b:84:56:fa:
                    a2:7a:fd:f2:cb:ab:12:db:f2:28:b6:e3:5e:42:1b:
                    87:e2:6c:22:43:a9:e8:51:41:96:92:88:da:36:2d:
                    a9:0f:28:5a:80:f9:d5:98:d1:54:62:b8:36:f3:ee:
                    da:5d:b6:58:54:10:67:18:19:e9:6a:a8:1a:4f:b8:
                    e8:a6:46:3c:2a:8c:5d:64:60:be:2a:f1:fc:27:ba:
                    e5:ae:85:82:0c:2b:4b:84:d1:f8:0d:2d:4b:38:93:
                    2e:d8:51:92:8c:ad:66:3d:d4:f8:77:de:79:86:dd:
                    f1:87:35:f0:29:7c:ca:55:b0:2e:90:d5:fd:c1:8d:
                    0f:11:65:11:c2:e1:47:a0:51:09:3d:ee:51:97:6e:
                    bb:95:ef:6c:99:6e:e8:2d:00:5e:79:6b:0f:92:ae:
                    ca:2e:76:f6:24:61:06:75:4f:2e:be:b1:60:a8:86:
                    cd:31:e0:53:83:2a:41:9d:a9:b8:07:a0:bc:3d:ab:
                    bb:33:7c:e3:d8:0e:7b:47:70:f1:d7:0f:6b:f6:83:
                    0f:95:1f:87:a2:91:08:55:28:8e:39:3a:67:96:83:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0A:B4:5D:B5:D1:C4:BD:F9:B8:E5:68:73:51:03:6C:82:E5:E6:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/f04fa8ab-3894-36e6-9343-e11c41b48098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl

            X509v3 Authority Key Identifier:
                keyid:25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.4.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1b:c6:57:50:3c:43:57:a6:9c:46:42:f7:db:51:db:f3:8a:
         79:9a:d0:ea:8a:9d:db:0b:6e:5e:09:f9:12:3e:97:be:66:fc:
         d5:27:0f:c2:70:53:fd:66:ce:42:ca:6e:87:3e:2e:65:52:48:
         45:1f:a8:ea:d1:ea:06:c4:09:23:3f:80:73:20:73:fd:0c:ba:
         68:75:fd:05:da:1d:75:5d:f8:02:1a:92:05:f0:02:7d:a9:22:
         c0:de:00:57:9d:8f:50:bf:cf:93:f7:d5:18:c5:b4:0d:d0:99:
         77:ed:d0:38:43:2c:17:2c:da:0d:2a:43:ef:02:a9:36:0a:22:
         f9:b9:8d:83:f0:6f:60:5e:8c:88:f3:0d:94:30:53:ed:93:3b:
         5c:db:6d:c2:07:8d:e6:17:9f:8b:8e:38:04:d6:33:f6:cc:65:
         65:30:7b:c7:73:b6:20:ef:06:c8:cd:14:05:cd:de:31:e1:cf:
         80:d6:ef:df:eb:e1:ee:36:02:98:bc:d8:e4:a7:3b:b9:c2:f1:
         1c:7a:3f:f9:63:8e:32:c8:26:f5:d2:eb:6b:b7:af:28:62:8d:
         d1:e8:19:38:97:8b:19:61:93:4c:0b:65:3e:c1:c6:bf:2c:28:
         93:9f:f7:99:38:5f:6a:31:f3:f8:64:01:5c:f6:8c:6a:52:93:
         1f:b4:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:25:23 2026 by rpki-client