Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8faf337-6f56-36aa-80e4-1bee07bbb914.roa
File:                     f8faf337-6f56-36aa-80e4-1bee07bbb914.roa (raw, json)
Hash identifier:          NTL9Rxl3gmXl7bmLny44Rmj5jhsV2HNsEL6jPFAJOcA=
Subject key identifier:   7E:CA:FB:95:23:27:E5:73:75:57:F9:35:98:C4:53:72:D7:2E:2A:89
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584EA796637E8FA6D9004B1C3330
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8faf337-6f56-36aa-80e4-1bee07bbb914.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19886
IP address blocks:        171.162.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:63:7e:8f:a6:d9:00:4b:1c:33:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ea610fe9-cf94-4bb3-b98a-3de91e9abd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:6b:df:b9:21:61:06:a9:1d:2c:6b:a9:71:
                    94:ef:76:a6:71:29:46:65:9a:cd:55:60:12:91:5b:
                    74:00:12:e8:0b:e4:17:71:d5:ab:ee:a9:6d:d9:c3:
                    8d:42:2a:12:97:b7:01:0c:e2:0b:8e:6a:b6:84:45:
                    ce:0f:34:72:b4:39:87:68:5b:73:3b:c4:41:a4:76:
                    7a:fe:f4:c4:0d:1e:7a:dc:0f:94:d8:fa:24:81:1e:
                    21:03:7f:65:8f:45:4c:fa:d1:13:0a:79:d9:44:be:
                    07:74:e7:2c:13:f2:7f:5e:50:04:62:4d:40:fc:27:
                    3c:8c:43:0d:6e:67:e6:fb:1b:12:b3:bf:c5:ce:d0:
                    f0:ed:7e:d7:e3:1e:49:b9:58:cb:8a:e7:91:27:68:
                    80:9e:06:92:2b:1d:df:40:3c:0d:77:b4:5b:d7:64:
                    f8:81:6f:31:fd:ef:de:e4:07:6b:97:54:49:90:2f:
                    7a:da:2d:83:28:d7:05:72:c0:ee:63:90:86:ab:91:
                    58:07:7c:b7:6f:c2:11:b0:9e:e9:ed:ba:84:ed:33:
                    0b:8b:d9:ff:9a:38:c0:c7:83:ff:a1:43:28:b3:7d:
                    be:86:0b:30:28:2a:84:c3:a9:ec:80:c1:78:5c:3d:
                    21:4c:a2:d4:63:a7:d4:9e:01:8c:22:0a:a7:e3:93:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CA:FB:95:23:27:E5:73:75:57:F9:35:98:C4:53:72:D7:2E:2A:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8faf337-6f56-36aa-80e4-1bee07bbb914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:29:37:3e:d9:d0:ab:19:12:83:8f:08:43:29:60:a1:40:22:
         e6:21:d4:fa:ee:d4:c3:76:ba:9e:ee:66:56:24:3c:8a:d9:60:
         67:33:66:0a:cc:d8:a1:08:c1:57:58:84:76:eb:20:75:41:44:
         e6:f7:0c:a2:0b:4a:4f:86:4f:f4:72:65:cd:24:50:53:02:07:
         5b:7a:fd:2f:93:3d:eb:a0:8f:64:0e:1a:05:24:2b:0e:b2:5c:
         1b:22:0c:6d:e2:f2:80:52:09:23:32:87:ad:db:85:16:ea:d6:
         c6:93:2a:a5:f1:64:2b:7d:92:c9:33:70:88:5f:0f:6f:0e:45:
         de:d6:83:30:e9:51:a2:08:c0:32:ed:32:eb:f6:ed:49:50:b0:
         be:2c:86:f2:fc:42:c9:54:f6:5f:a2:70:4c:0e:96:b8:98:36:
         0c:c9:96:34:b4:fe:43:19:22:54:c1:30:db:f7:a7:13:1e:18:
         90:a0:48:72:8b:dc:81:3c:8e:c0:3a:5f:74:31:f3:7d:18:c0:
         5d:6d:27:6d:d4:9f:80:93:6c:39:b3:48:54:f7:77:f2:b3:81:
         2f:a5:33:ea:06:90:bc:06:d9:ba:bc:bd:b9:b8:95:a3:b5:84:
         fb:54:5e:c8:24:a9:45:27:b0:66:40:91:ab:04:27:23:0b:3b:
         e9:c9:d6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:52:32 2026 by rpki-client