Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa
File:                     d3bab822-4cb5-3a34-898f-cd524c33f81c.roa (raw, json)
Hash identifier:          mRiwlic3C6VSh1ozToGlbczui3h70KQDDHqQuTCsfy8=
Subject key identifier:   FF:90:47:5E:8F:F7:98:6E:8E:73:C2:06:17:2D:28:B8:1C:52:36:E0
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584F2C2258CDFEB204702893AF80
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa
Signing time:             Mon 14 Sep 2026 13:00:12 +0000
ROA not before:           Mon 14 Sep 2026 13:00:12 +0000
ROA not after:            Sun 13 Dec 2026 14:00:12 +0000
asID:                     2648
IP address blocks:        132.163.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:22:58:cd:fe:b2:04:70:28:93:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Sep 14 13:00:12 2026 GMT
            Not After : Dec 13 14:00:12 2026 GMT
        Subject: CN=39d38291-729a-4e7b-83af-e9badc597ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2e:99:15:35:74:f7:a6:a1:38:bf:e9:84:8b:
                    e1:2b:e5:f7:1e:ec:a9:23:76:10:b8:68:9a:89:e0:
                    ea:86:36:74:94:60:28:5e:45:1e:df:da:a3:04:47:
                    0c:46:30:33:59:0b:e3:4b:db:fa:50:7c:26:7b:05:
                    30:c8:a5:49:49:aa:13:13:77:59:d6:34:39:2f:c5:
                    0d:a3:44:38:b8:36:f1:8a:7a:51:5b:d5:53:a1:9a:
                    c9:a2:40:65:95:44:43:1a:6f:0b:60:ff:73:68:2f:
                    ab:e7:b7:2c:88:5b:bd:62:9a:f3:32:82:37:53:5a:
                    1b:66:b5:df:cf:e6:79:d1:1d:f3:b0:21:bf:5e:25:
                    ae:38:58:a4:d6:03:d3:1f:c2:3a:e9:53:9c:69:f2:
                    db:46:ad:70:51:bb:9e:f4:72:00:79:25:c3:8d:96:
                    2c:22:09:3e:6f:58:77:32:0d:b9:ad:0a:05:af:67:
                    88:2e:e7:47:df:5a:39:ab:14:6d:4f:3f:cd:7e:71:
                    f2:74:1a:62:aa:66:9d:88:86:94:71:ff:a3:4d:68:
                    79:4f:74:10:ef:80:17:48:cb:d7:2a:d5:6b:84:99:
                    27:76:40:6b:a7:2d:91:e7:cd:6e:eb:1c:a3:85:5b:
                    87:a1:b2:31:0c:5a:f1:f8:40:f7:ce:a1:3d:93:a6:
                    1f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:90:47:5E:8F:F7:98:6E:8E:73:C2:06:17:2D:28:B8:1C:52:36:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.163.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:95:07:cf:59:6b:61:c3:c6:ca:7f:18:02:ec:d1:99:e8:
         74:88:a3:5f:af:b5:95:25:d9:d7:95:eb:c8:8e:cc:25:8f:d2:
         eb:c4:f1:dc:a8:61:35:cb:fb:99:af:33:0c:d0:07:92:0e:81:
         ec:e9:dc:ee:2f:eb:0d:50:64:d5:c5:43:89:f8:9b:62:64:c2:
         d9:58:2f:f8:6a:48:43:25:57:02:59:3a:10:f3:b9:1e:53:ac:
         09:c4:cb:58:7c:b4:b5:83:f3:3f:32:64:7f:7c:50:b1:8c:e0:
         8c:60:ef:e9:bd:34:60:eb:78:2a:7d:0c:27:ab:5e:46:3c:f8:
         46:a6:d0:12:08:84:65:4f:6a:0c:fd:1f:b9:80:f2:af:ee:02:
         f6:98:f0:f1:c1:05:47:22:a5:17:9b:89:12:9f:98:9d:1b:3f:
         88:48:45:4c:81:55:a6:1c:c0:9d:2b:65:d2:01:d1:f1:47:54:
         50:9c:75:79:e1:63:8c:50:0c:2a:0b:4d:6f:7c:a0:96:59:ed:
         d9:91:98:20:8c:94:46:b5:b3:9b:a8:d0:3b:82:69:37:56:1a:
         e0:0b:96:ec:00:bc:0a:a1:d0:4d:98:f6:d5:f6:c1:d7:87:05:
         70:eb:b2:b5:22:99:04:2f:f0:bd:ae:8c:d9:d6:22:76:6d:03:
         0f:f9:f0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:32:57 2026 by rpki-client