Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/05aa2fea-24ee-3777-9c8f-bbe03559447c.roa
File:                     05aa2fea-24ee-3777-9c8f-bbe03559447c.roa (raw, json)
Hash identifier:          YJq6ngesMuzGfZu6COwF75YSfMlSAsrfDW0iED3X7uc=
Subject key identifier:   20:2D:B0:7C:E8:E1:A7:BD:71:CF:05:60:78:1A:0C:89:90:2D:B0:BB
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584ECBD1E8ED16B83B6F2D67D480
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/05aa2fea-24ee-3777-9c8f-bbe03559447c.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     14555
IP address blocks:        170.10.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:e8:ed:16:b8:3b:6f:2d:67:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=ea80d70c-fe6a-4fa1-ad79-b21dc7e4f4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:c1:67:61:d9:70:79:b9:c2:d5:8e:fd:90:
                    a4:25:2c:b6:fd:d5:a4:f2:d4:72:09:bb:e7:96:31:
                    65:65:0a:41:45:77:08:db:ad:1b:bc:02:b0:a6:a4:
                    61:52:a2:bc:91:94:9a:a2:a3:fe:0a:55:cd:8a:c7:
                    68:a0:5c:00:ca:4e:c0:5b:cf:c7:a8:ae:44:e1:34:
                    f7:3d:ab:a1:8d:fb:69:8f:8d:60:0c:f3:36:68:fc:
                    24:bf:83:5c:16:05:b1:b3:48:f1:ea:de:7a:19:0a:
                    c7:9f:c6:49:11:7c:db:37:f5:13:d7:14:5d:73:90:
                    e6:39:c3:c9:b7:92:b5:d3:a9:44:13:6d:5e:c4:5b:
                    b1:ba:77:23:73:29:2c:9b:f3:a8:1b:92:60:f7:de:
                    11:df:03:49:ce:23:93:d9:6e:62:1d:10:b0:30:8f:
                    c7:6e:8a:c6:c3:52:de:f2:65:c7:b2:e3:14:1b:db:
                    35:24:4b:0d:0c:77:a4:d0:cb:9b:52:f9:b8:60:51:
                    55:d2:2b:0e:d1:c4:29:e5:35:f8:2e:1a:45:15:a3:
                    0e:7f:31:d0:70:51:1b:3b:c4:bb:64:55:a6:e9:c1:
                    b9:84:e1:cd:df:8e:ff:d7:6d:14:3d:62:28:b4:6c:
                    0c:3a:a6:1c:bb:ff:b9:dd:35:7d:fc:4d:cc:30:ce:
                    06:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2D:B0:7C:E8:E1:A7:BD:71:CF:05:60:78:1A:0C:89:90:2D:B0:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/05aa2fea-24ee-3777-9c8f-bbe03559447c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:43:96:ff:29:0c:ed:e4:cd:41:59:4e:28:7c:b4:34:f7:0e:
         94:ef:a8:5f:b4:bb:60:c6:da:3b:6f:ea:67:b1:80:f2:a8:f5:
         1d:9a:9b:14:3d:47:d7:ba:1b:8b:81:2f:6d:aa:f1:e2:3d:10:
         e6:ac:ad:d8:4b:4a:9c:40:af:7f:b2:dc:85:79:25:9a:47:6b:
         42:bf:e4:69:15:8e:84:d6:63:51:bb:20:a9:ce:80:80:82:f3:
         2c:8e:38:dd:ad:d1:26:42:6e:5a:dc:07:85:4b:e9:63:57:5e:
         74:82:93:35:92:9e:18:90:c2:c8:2b:81:27:37:87:74:3f:63:
         a5:bb:ae:71:fd:8c:ea:d5:92:23:db:0d:b6:a3:5f:79:ee:98:
         2d:3f:b9:7a:51:b7:50:cf:db:ed:52:67:c2:02:62:b7:cf:c1:
         86:94:00:04:ef:3e:5e:d3:f2:d7:0c:ea:b8:34:41:33:9f:e7:
         e7:cb:40:ee:ef:03:72:ba:b6:3a:9f:5d:4b:10:35:39:45:82:
         0c:a7:ad:ab:81:06:8f:0d:3b:13:c2:be:0e:e8:97:84:b1:c2:
         3b:84:2b:da:92:96:25:a1:a5:23:45:6a:ae:4b:fc:78:fc:54:
         57:97:44:b3:e0:89:74:06:77:8e:1c:22:78:06:f3:72:d8:93:
         0a:f9:13:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:22:40 2026 by rpki-client