Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/9dada9d3-717f-3962-aba2-159519fc566d.roa
File:                     9dada9d3-717f-3962-aba2-159519fc566d.roa (raw, json)
Hash identifier:          B6tS941HWQ+4Orkgb29jiPbLnOTlSiaJf2n1iLDMBOQ=
Subject key identifier:   D8:94:06:76:06:FA:8F:46:0B:86:9C:3C:40:C5:B8:32:C5:07:DB:78
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584ECBD1E950D928E37B76DD8E00
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/9dada9d3-717f-3962-aba2-159519fc566d.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     14555
IP address blocks:        170.10.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:e9:50:d9:28:e3:7b:76:dd:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=48a9c46d-f420-49cf-a78a-b8a6c5218c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:58:36:8d:38:2f:c8:de:f5:20:02:89:1d:
                    20:07:e2:53:9e:b1:34:18:33:20:a6:cf:40:72:77:
                    2b:9d:a0:16:89:9f:4a:97:5e:ec:f8:71:54:d1:29:
                    a9:36:16:16:ed:39:85:66:f6:24:24:9b:b9:27:cf:
                    9b:ea:49:f6:37:27:80:62:ec:d5:1e:fb:0f:5b:d6:
                    af:ef:79:4a:ec:4e:eb:d6:db:34:56:dd:20:e4:04:
                    28:ba:6d:06:ad:8e:8a:65:18:7d:06:1b:02:d0:90:
                    d8:8c:80:ab:12:90:0a:84:6d:58:1b:5b:c1:08:83:
                    15:a5:11:90:1b:29:b3:c1:46:2c:63:61:d1:6c:ad:
                    91:6e:e0:c5:9e:6f:a5:88:c2:d3:d0:de:67:94:0c:
                    92:cc:05:a3:97:b5:8c:b5:12:ee:3f:f5:d4:73:57:
                    0d:3b:05:d7:e7:de:75:02:8e:c0:0e:91:7b:9f:32:
                    bb:3f:06:72:2a:8e:36:c1:57:d2:e9:b5:a4:63:b4:
                    aa:9f:5d:74:fc:ed:39:b4:af:a9:02:05:5e:ed:1e:
                    19:77:64:52:9c:14:57:67:07:db:28:08:82:6e:26:
                    02:cf:c6:fb:5b:92:37:8d:1d:c1:3b:e0:ca:d4:bc:
                    cc:9a:dc:72:6f:cb:76:c9:2a:d8:70:12:54:cc:ac:
                    1d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:94:06:76:06:FA:8F:46:0B:86:9C:3C:40:C5:B8:32:C5:07:DB:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/9dada9d3-717f-3962-aba2-159519fc566d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:24:a2:27:66:7c:a0:ef:7c:d1:a5:8b:f7:95:fd:72:2e:eb:
         6d:23:1c:53:cd:c7:d3:b0:d9:2f:0c:83:c3:91:14:bb:42:a2:
         68:e2:79:4c:a5:17:1f:44:47:8f:56:c7:59:08:b4:44:44:04:
         c5:40:ff:aa:5b:7b:85:3b:a3:94:e5:de:2a:f6:fb:89:51:9c:
         a8:3a:2e:94:36:66:0b:19:f5:fc:ba:0e:9b:1e:c7:43:77:59:
         89:07:59:2a:d6:ad:10:22:66:3d:d7:41:5c:0f:e8:0f:80:a8:
         fb:2a:09:54:a8:7c:6e:13:a9:92:b5:1d:cb:6a:c4:7a:26:3a:
         69:c5:81:c1:95:06:e6:09:f3:df:b6:82:a8:c2:72:e8:b1:98:
         bd:9c:0c:99:9c:19:24:94:92:68:99:d4:7e:e6:5f:02:7b:8b:
         8a:ed:7e:83:22:a7:0e:ec:d8:96:ac:4e:d6:3d:d4:8e:65:ab:
         97:28:4c:1e:4e:2f:d1:d3:2c:c2:08:d2:25:73:d9:9b:28:44:
         a7:aa:ab:58:df:3a:a0:b2:7d:18:aa:e2:e3:a7:23:6d:7d:86:
         5b:e8:e8:08:18:d0:6b:f3:a0:45:11:07:3d:b1:df:15:b9:40:
         4c:cb:ef:ab:ec:20:a2:48:21:20:ac:f3:5f:94:2d:70:c3:55:
         06:e2:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:23:56 2026 by rpki-client