Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa
File:                     4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa (raw, json)
Hash identifier:          jZo96T2E2JC0Wo4uoA648JTz1jwiRVUH3eqGx/xAETE=
Subject key identifier:   25:C0:6A:0C:89:DB:06:6E:19:40:B2:15:59:A7:E7:41:31:9A:3C:86
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584F497750F8D1215C745BBF3E00
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     213122
IP address blocks:        167.94.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:50:f8:d1:21:5c:74:5b:bf:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f8c6f382-41ba-4696-9b46-7c1e6e7e8b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:04:99:96:91:98:62:56:68:8f:9c:31:fe:
                    c1:50:ec:41:a8:9a:33:7a:9e:51:01:63:b2:24:dc:
                    6b:97:c0:9b:93:2d:6f:c6:62:db:e6:0f:e3:e2:a2:
                    32:07:4b:9b:ff:5d:a4:1a:e6:8e:7b:0c:e7:eb:42:
                    3d:6a:1e:7f:de:58:a9:45:da:2b:25:39:ee:89:f5:
                    75:dd:e8:29:f9:a5:71:a9:07:47:53:46:93:b7:84:
                    e0:05:92:a3:fe:88:cb:7c:80:18:e6:65:a4:b7:3f:
                    b0:8a:b3:f0:4c:67:a1:d6:76:f0:7a:81:5b:c1:0c:
                    83:29:dd:df:7e:a1:c5:7d:8f:c1:d9:12:df:30:d9:
                    a2:d2:e8:3a:17:36:31:c1:1b:89:91:ac:b7:27:04:
                    ea:e3:53:7a:30:6c:59:86:d4:2d:2c:8a:13:34:1b:
                    f4:69:77:00:4b:51:89:76:fd:81:f7:30:70:0c:6b:
                    d3:68:36:8f:21:0b:7b:2c:92:6e:0a:7c:10:bf:94:
                    1a:e1:38:ef:1b:de:22:0c:63:a7:5a:07:99:3b:e7:
                    d8:69:f5:70:1e:b4:63:c1:4f:46:49:50:80:3e:8a:
                    fe:a6:d7:03:d9:3d:30:c8:0e:f2:19:71:f5:98:75:
                    28:ff:ae:a4:1f:05:ab:92:f1:5f:e8:c4:2b:dd:c1:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C0:6A:0C:89:DB:06:6E:19:40:B2:15:59:A7:E7:41:31:9A:3C:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/4cd4e0e8-bad9-346d-9411-15c2f1ce24e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:9f:17:fe:b9:ec:60:89:08:6c:f7:67:8c:31:3f:4d:31:e5:
         17:ef:6d:bf:65:c6:32:0d:38:c4:c0:a9:c5:58:0d:73:9a:97:
         e7:2b:60:da:cd:af:d6:cb:4d:dc:87:4a:fd:ee:b6:ed:b1:a2:
         a3:aa:62:47:1f:90:b8:fb:ae:2e:60:8a:86:28:97:5a:7f:5c:
         65:05:a2:94:ca:33:b4:eb:9f:e3:a9:93:33:92:a8:d0:c9:5d:
         d8:2e:14:7f:0e:6d:62:30:8c:e2:c6:9e:ae:a3:2f:fe:ac:f2:
         1d:23:d4:f3:42:ad:80:d0:e5:b1:2b:db:23:8d:f7:73:43:81:
         44:3d:53:2b:33:a4:e6:93:05:fa:05:29:77:e5:d9:72:d1:0e:
         94:8c:ff:ba:bb:e5:6a:34:de:86:61:9e:93:53:e0:9a:90:3a:
         ed:e5:65:3d:a4:e2:69:e7:25:fe:9e:fb:de:8a:37:0a:b2:f6:
         0d:bb:d7:70:7e:15:ba:98:e5:91:f1:37:35:48:83:20:a1:e4:
         27:94:6f:8f:ad:49:7a:bc:bd:46:23:3d:91:c0:87:02:d1:9c:
         5b:ad:af:76:8a:76:68:19:62:d5:a8:ae:1b:b2:f6:ff:fb:da:
         5c:57:73:34:85:b0:cf:e8:f5:21:df:d9:fd:02:e7:56:5f:5e:
         53:24:31:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:01:53 2026 by rpki-client