Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e0f13160-9c37-3768-a2a8-bfb424bf8264.roa
File:                     e0f13160-9c37-3768-a2a8-bfb424bf8264.roa (raw, json)
Hash identifier:          JZknornEuAgH+aUmEXiIn7T3LtVJux6O7B6uyyN+Y8o=
Subject key identifier:   99:34:E5:C8:E3:0A:3C:F5:18:1F:58:96:FF:6E:19:34:6A:8E:96:FA
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584FA42DDA52EFE2BECE54CDAB00
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e0f13160-9c37-3768-a2a8-bfb424bf8264.roa
Signing time:             Tue 27 Oct 2026 13:00:13 +0000
ROA not before:           Tue 27 Oct 2026 13:00:13 +0000
ROA not after:            Mon 25 Jan 2027 14:00:13 +0000
asID:                     7979
IP address blocks:        172.85.109.0/24 maxlen: 24
                          172.85.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:2d:da:52:ef:e2:be:ce:54:cd:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Oct 27 13:00:13 2026 GMT
            Not After : Jan 25 14:00:13 2027 GMT
        Subject: CN=f2b8c504-4f0c-42ea-b893-6fe796f17d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:8b:34:90:c5:76:73:5d:c4:49:b6:f4:93:
                    e2:96:31:81:11:75:51:cc:94:7f:fb:2c:d7:a4:18:
                    e1:60:e7:d8:1b:29:84:ac:9f:49:32:03:b5:c4:04:
                    ca:89:d0:c3:ae:60:09:e6:56:7b:d0:1f:0e:7e:e4:
                    53:4b:1c:73:dc:cb:2e:ab:51:bc:7d:92:61:9e:0a:
                    09:a0:60:1d:7d:2d:82:74:12:57:4a:a0:15:37:95:
                    86:38:b6:45:cd:36:e2:45:5e:a3:e0:22:ef:d0:c6:
                    b3:b1:e3:0f:48:77:49:c4:b0:05:52:ad:26:2d:d0:
                    8f:59:5f:b4:d0:c8:93:16:09:ab:b0:f1:92:2f:8e:
                    92:e3:d6:b2:1b:59:3e:bc:77:c7:08:30:a7:8b:d5:
                    94:a0:4d:c0:67:87:c7:e6:d3:52:5e:6b:ee:4a:2f:
                    5e:c5:49:cd:d6:bc:9f:5d:ed:3e:0f:65:e2:a1:c6:
                    a8:d7:0e:72:07:29:68:27:cb:2d:b9:b3:3e:7d:0e:
                    de:f8:ca:ec:c7:07:e7:4c:42:57:4a:cf:d9:5e:f5:
                    cc:94:d3:b2:c8:63:f3:d3:f1:63:20:83:17:10:0e:
                    85:60:cb:cb:5d:2f:08:9e:a9:d7:c1:7a:f0:70:6d:
                    48:b2:d5:ce:9c:eb:23:c9:28:d2:1a:3f:f5:77:31:
                    04:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:34:E5:C8:E3:0A:3C:F5:18:1F:58:96:FF:6E:19:34:6A:8E:96:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e0f13160-9c37-3768-a2a8-bfb424bf8264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.109.0-172.85.110.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:04:b5:10:f9:a4:74:8a:85:df:bf:34:78:b0:9e:48:49:74:
         98:84:c1:7f:55:4e:3f:0e:bc:38:a7:3b:5b:42:fb:d1:96:1c:
         f3:ad:1d:de:a0:21:de:6a:92:b8:09:6a:9e:1c:f8:b7:82:25:
         41:96:56:2a:fa:1f:ad:4c:3c:bf:cc:ad:21:dc:67:be:93:14:
         49:30:cd:a2:4c:3c:48:c3:65:ba:8b:44:aa:5b:61:a5:17:d5:
         d4:0f:f4:22:1d:7f:42:83:4e:4c:65:e3:22:06:c8:fd:42:db:
         65:7f:8c:e4:6e:51:bf:42:84:b3:46:3a:62:44:80:94:ed:d0:
         18:f9:1b:ec:94:71:92:85:6d:1a:6a:58:08:a5:08:df:ee:de:
         04:da:c9:b5:fc:bf:1f:99:3c:aa:a1:a6:08:db:42:76:04:3d:
         6c:1d:ea:63:9e:38:02:4d:e5:ed:04:7e:73:1b:91:f8:9a:00:
         79:90:a1:f5:03:10:0d:da:81:6c:c4:97:f6:6c:e1:65:39:d3:
         70:d6:93:5f:d8:31:3b:a2:e2:5d:d1:70:16:42:10:07:b9:16:
         66:50:34:48:1d:b2:d1:96:80:cb:31:91:d7:06:bd:ca:f1:2a:
         4b:22:a2:9f:2e:e6:6f:ab:26:c6:31:d2:9c:db:3d:7f:e9:0a:
         85:1e:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 07:33:07 2026 by rpki-client