Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff45b1fc-7070-315b-af69-e349af3a0636.roa
File:                     ff45b1fc-7070-315b-af69-e349af3a0636.roa (raw, json)
Hash identifier:          0hIJU2e1wWvmCxgG3fle7JwhaW8AhCcZmJJj0uk+6wI=
Subject key identifier:   32:C9:BE:18:69:F4:84:89:A3:2F:06:9B:D1:E2:B1:D9:1C:BD:BB:3E
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584EA7966563C0835F32D3891680
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff45b1fc-7070-315b-af69-e349af3a0636.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19886
IP address blocks:        171.162.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:65:63:c0:83:5f:32:d3:89:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4899910d-350a-4c9b-8c7b-fb2b9fd6bcee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:40:ce:30:40:85:ca:21:c5:f1:a9:79:b0:56:
                    79:8c:95:dc:02:c1:68:14:6f:eb:b1:7a:66:fd:49:
                    95:19:a5:94:de:7d:e1:35:e6:4f:57:f9:43:60:04:
                    c3:c8:d6:96:ac:8f:00:1c:a1:ff:97:45:22:b9:ad:
                    2c:f7:6a:ce:13:50:5f:97:ad:f0:42:92:82:ee:01:
                    3c:bf:71:ab:bf:16:04:90:ea:1f:74:39:5d:c0:69:
                    9a:55:4f:f0:19:8f:81:26:32:2f:23:9d:ed:07:3c:
                    fe:fc:a8:16:c6:ce:b2:28:76:77:b6:a0:1f:8d:d7:
                    20:6b:4a:3b:b3:6e:b5:63:f8:9a:35:2a:54:f4:b9:
                    e5:c8:d7:8b:fe:f2:84:eb:0e:b2:4d:38:1e:ce:79:
                    17:ea:35:df:c6:ae:f4:a1:7e:24:84:87:99:10:81:
                    13:f6:aa:1e:ac:78:e8:bd:b2:d4:a8:26:76:0d:db:
                    a9:d9:7d:51:8e:4f:8c:7f:c3:6c:e6:db:dc:f5:81:
                    cf:2b:4e:f7:cd:41:f9:94:2f:00:c0:03:1c:b9:3d:
                    b0:e3:17:d5:13:9c:9a:d7:e6:e6:95:df:23:78:a2:
                    52:a2:dc:d8:00:44:35:72:d1:5d:ea:ce:8d:83:2d:
                    da:98:8d:df:26:ac:d5:8a:5a:12:37:b0:d4:98:34:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C9:BE:18:69:F4:84:89:A3:2F:06:9B:D1:E2:B1:D9:1C:BD:BB:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff45b1fc-7070-315b-af69-e349af3a0636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:94:d6:72:85:5c:6c:0e:18:3f:ed:26:57:c4:ef:58:87:91:
         f8:6b:94:59:c1:bb:92:ca:3d:14:8d:05:f2:49:79:28:27:5b:
         4b:c4:3f:88:d5:71:87:b3:d9:3e:a9:e5:01:4d:01:b4:88:4d:
         97:22:a8:37:d0:03:7a:4f:4e:a1:76:86:12:7d:10:14:e5:93:
         d2:94:8e:6b:56:78:7a:92:b7:52:96:2b:94:d7:81:0e:e9:df:
         66:64:31:91:87:79:fd:2c:d7:bd:5f:d7:8d:7e:62:4b:a9:32:
         46:5e:4c:76:69:59:d1:b1:21:cb:74:47:f2:a0:ca:2c:46:8a:
         f6:42:b5:9b:c1:b0:3b:76:6b:2e:4d:06:2c:a4:93:27:8d:09:
         e8:9b:30:e1:4a:ce:ac:8a:62:3a:85:17:76:83:dd:7d:a7:cb:
         0d:63:3f:e2:78:45:6e:2c:23:57:21:d8:02:c6:dc:92:06:26:
         c3:f2:99:e7:23:69:ee:6e:9b:54:36:d3:ab:da:08:ff:31:e0:
         0d:21:a5:61:64:b7:e2:2b:de:bf:5f:ab:ab:9a:72:3a:0c:d2:
         f0:05:d6:fc:ad:21:08:55:c6:c7:b5:27:18:ae:7c:fe:6c:cd:
         8d:21:52:4f:ad:fd:ed:f2:c1:4e:ac:68:e7:28:28:28:54:68:
         b0:d2:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:52:33 2026 by rpki-client