Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/19c274b3-4227-3816-8fd1-74b230ab94b7.roa
File:                     19c274b3-4227-3816-8fd1-74b230ab94b7.roa (raw, json)
Hash identifier:          /Z6CFAQU48/xZyQTy8ZLkY8i3/olmNZUWkm1kc8nOfQ=
Subject key identifier:   78:1F:99:02:C3:07:ED:99:33:C9:53:86:B6:ED:F5:72:A4:2F:BE:1C
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584F58CD5AAB30C5F0855D25F1C0
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/19c274b3-4227-3816-8fd1-74b230ab94b7.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     399870
IP address blocks:        170.205.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:5a:ab:30:c5:f0:85:5d:25:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=69f6be45-a7ee-40a6-86e6-f1199a4ec0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:76:66:31:cb:c9:ea:73:d5:82:42:90:aa:bb:
                    a1:2f:96:b4:d1:fe:87:8e:dc:1c:2a:e9:88:45:55:
                    92:14:fa:9b:9c:02:c9:88:d8:71:a4:7a:29:6b:a2:
                    fe:3c:85:1e:ce:08:87:c8:1c:fc:87:84:b9:0c:41:
                    5c:f7:27:89:79:12:4a:5f:8a:06:a5:50:74:40:ac:
                    86:ca:56:ec:e6:06:20:52:67:5f:23:94:58:c2:78:
                    de:15:c1:bc:d1:df:0e:34:2a:a7:3e:cc:50:15:f4:
                    ba:d7:af:b8:d6:d7:d1:cc:af:14:8e:f3:4d:70:35:
                    ad:57:94:78:17:e0:98:75:5e:93:e5:f1:9d:ab:4f:
                    2f:c0:0a:f0:19:94:9d:32:b7:ae:ba:9d:09:80:57:
                    df:36:a1:5b:54:a7:bc:d5:31:69:5c:72:4a:5a:03:
                    bd:80:09:a9:d3:2d:5c:f8:91:2a:92:d0:1f:7e:01:
                    78:71:82:5f:e5:f4:55:cd:72:6f:b9:9e:ff:7a:c5:
                    71:9a:1e:43:84:02:53:12:a9:ad:bd:96:aa:99:e5:
                    fe:84:66:e6:2d:e1:93:bc:27:b5:e5:e9:60:2b:02:
                    a3:df:75:a6:5b:d9:f8:2a:92:14:5d:36:07:fb:cc:
                    f9:cb:75:22:fb:11:62:0d:32:0e:be:ff:fb:02:d7:
                    01:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1F:99:02:C3:07:ED:99:33:C9:53:86:B6:ED:F5:72:A4:2F:BE:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/19c274b3-4227-3816-8fd1-74b230ab94b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:be:09:9b:80:c8:3f:a4:a0:d0:5b:94:c2:1a:a6:d3:5c:b5:
         18:d1:ab:aa:c9:71:8f:94:f9:0b:57:40:a9:e9:2a:b9:78:4c:
         6a:c7:8f:7f:ec:f0:30:89:ba:f0:53:ad:49:d3:ad:67:f3:2e:
         7c:93:81:27:2f:4e:16:36:61:b8:5d:7a:34:4f:63:3a:58:ce:
         6a:a4:ae:df:33:c0:f6:01:ce:be:67:2d:f9:33:1c:4e:20:43:
         86:6f:29:71:04:ec:c2:64:a9:fc:4e:6a:e9:1a:ce:a1:9c:65:
         8e:4a:f8:53:0e:75:6d:a4:d2:1a:b4:73:10:0d:48:f1:30:94:
         af:7c:26:3a:7f:d6:dd:8a:21:e1:21:78:76:b4:b7:4e:de:52:
         bb:82:44:6c:ab:04:4e:77:e9:7a:ca:cf:e3:9a:fc:44:7f:8b:
         0b:72:c3:54:1f:e8:60:f7:48:8b:66:6a:9b:df:ae:ec:90:3c:
         2c:6b:8e:2a:7a:72:d4:bd:23:5b:48:ac:b1:b9:e3:4c:ed:01:
         40:8d:6e:e1:8f:2b:4b:84:9a:18:a0:92:7b:c7:08:0a:6d:b6:
         c4:f2:3c:28:0f:bb:30:78:97:ed:ba:63:ab:fd:e0:74:ac:12:
         02:4d:2e:91:f7:fd:a6:be:61:67:9e:63:2c:eb:b5:75:10:41:
         99:7a:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:54:13 2026 by rpki-client