Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/e9ddd58f-d402-3228-8842-fe9c4e665a35.roa
File:                     e9ddd58f-d402-3228-8842-fe9c4e665a35.roa (raw, json)
Hash identifier:          WZ9/MMXvQRhM6w6J21slFbjANyE4oFaKCwkSdxZWf9E=
Subject key identifier:   B7:5A:B0:F9:DA:17:04:1A:1C:AA:16:24:78:C2:E1:85:19:BF:76:E9
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584EA79A6538C147B0A1FB234500
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/e9ddd58f-d402-3228-8842-fe9c4e665a35.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14555
IP address blocks:        170.10.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:65:38:c1:47:b0:a1:fb:23:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9ce7d0f9-4d95-4ace-a0b1-a979276c780f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ab:35:5a:c5:07:26:90:42:5e:29:80:ec:51:
                    32:8e:4a:67:6c:b8:12:97:0c:4c:2b:62:65:1c:20:
                    6c:cc:56:5e:54:f5:d9:5e:7f:ee:dc:73:a5:3a:d9:
                    85:43:ac:08:46:a0:8d:7f:5c:23:15:b5:03:fa:1a:
                    fc:bd:3e:86:a7:d5:7d:1d:4f:21:cd:09:55:93:35:
                    c6:db:54:01:36:33:7f:07:cc:29:fe:5e:4e:7a:50:
                    2c:6b:33:10:d2:00:e9:c5:91:26:bd:df:9b:2b:ad:
                    f3:99:75:88:3d:d2:ff:4d:e3:82:e4:06:4b:bc:c9:
                    12:9b:4a:94:41:77:d9:bf:12:29:fc:ae:84:d8:96:
                    a7:99:92:c8:c9:0b:52:c4:8f:44:b2:72:80:3f:fc:
                    21:23:9c:8a:57:ff:43:6d:d5:4b:2a:ea:8a:8c:3d:
                    d5:10:0b:83:0c:ce:32:81:48:64:3e:c0:71:b2:e3:
                    85:4e:61:05:fb:33:6e:80:1f:6b:f8:1c:6f:b3:76:
                    b7:9c:05:52:87:43:14:8c:07:d5:fb:3a:d8:b7:35:
                    ab:4f:b2:44:70:93:ac:2d:a0:a6:7d:7c:4e:5d:ba:
                    51:00:e1:b9:f8:4b:33:de:3b:f0:9c:08:b0:c7:85:
                    8b:06:24:2e:e4:de:b7:51:37:61:df:c7:a8:46:85:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5A:B0:F9:DA:17:04:1A:1C:AA:16:24:78:C2:E1:85:19:BF:76:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/e9ddd58f-d402-3228-8842-fe9c4e665a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1d:79:dc:9e:ec:5a:d9:b2:bd:5e:60:cb:4b:17:25:8e:dc:
         8c:a8:c0:19:0f:8e:b2:7f:bf:cf:f8:cb:ce:fa:e5:67:5a:4b:
         43:59:15:99:79:62:79:87:5d:e1:63:b0:13:e1:8c:f5:77:43:
         8c:14:ec:83:2a:cb:2f:b0:fe:0c:5e:67:48:b4:93:c8:53:fc:
         ae:a0:8e:d6:0e:0f:66:ff:b1:23:7f:c9:49:4d:c9:6c:bd:6a:
         c2:39:34:72:08:b6:0a:c2:b5:e9:e9:79:2e:29:97:c8:c2:e1:
         5a:0b:cc:17:8f:3f:d1:3e:9d:78:58:c7:8c:a4:99:1e:78:af:
         43:71:93:89:15:44:13:9f:3d:fb:5f:4b:84:db:92:92:ad:2c:
         ef:95:eb:ad:38:70:3a:cd:8b:36:0f:8c:35:ae:3c:35:4d:5e:
         51:09:45:3e:cb:f2:53:b7:3d:76:ca:8e:7e:64:70:89:9f:62:
         23:dc:7c:84:8b:80:48:7e:e1:41:f3:8d:96:bd:d1:97:fc:ba:
         b2:b3:64:b2:5a:f8:5e:ab:5a:68:d3:23:81:cc:d3:19:c9:8d:
         29:31:ac:81:13:29:a6:8f:78:d0:82:c5:7e:79:76:9d:69:59:
         74:6a:21:9c:2b:77:ba:0f:9f:5f:d3:9e:2e:06:92:77:ae:4b:
         87:85:84:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:22:43 2026 by rpki-client