Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa
File:                     d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa (raw, json)
Hash identifier:          kpaXjKjxumNnFqYNqR/ymm2YLvXx5B28fUIzAXDGiaY=
Subject key identifier:   2C:6F:A5:DB:3B:17:C6:FD:86:0B:63:02:84:4B:08:26:85:AB:C9:4F
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584FAB28A75FF8D710FD68BC1110
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa
Signing time:             Fri 30 Oct 2026 01:00:13 +0000
ROA not before:           Fri 30 Oct 2026 01:00:13 +0000
ROA not after:            Thu 28 Jan 2027 02:00:13 +0000
asID:                     2572
IP address blocks:        204.184.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:28:a7:5f:f8:d7:10:fd:68:bc:11:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Oct 30 01:00:13 2026 GMT
            Not After : Jan 28 02:00:13 2027 GMT
        Subject: CN=1c9ee2b3-afa3-4d66-8172-635a81960152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:52:f6:1d:24:a6:75:7b:ad:04:58:a6:db:
                    53:97:39:26:4e:88:e0:6b:e3:00:3d:af:6e:6b:e5:
                    7f:da:31:3d:a3:33:6c:6b:fd:18:0b:ec:e1:0e:cf:
                    1f:13:be:5d:59:73:fc:b5:bf:2d:8b:b3:51:83:92:
                    cc:99:14:ba:a5:06:70:37:a3:5e:0e:61:65:bb:a9:
                    49:b9:09:c8:01:d8:f7:ef:03:1c:85:d8:7b:97:37:
                    80:5b:1c:9b:93:8d:09:5d:c6:89:d3:66:d8:06:42:
                    8f:82:af:23:a1:61:ec:7c:c3:03:04:9a:d7:b5:de:
                    36:d0:ed:e9:90:64:10:0e:64:96:8a:7e:92:d3:c1:
                    f1:38:39:ab:f3:83:8a:ab:11:70:d2:fe:e5:91:f5:
                    40:d0:6c:9e:d3:e7:c0:db:81:63:0a:65:ac:ed:ca:
                    d3:79:60:e6:b9:8f:bd:e2:77:5b:c1:55:3c:54:66:
                    f0:bf:04:89:60:34:1e:33:f1:1a:d5:06:7a:85:5c:
                    b9:c6:12:52:5b:e7:0a:bd:0e:8e:53:60:b9:ef:e6:
                    74:a3:ac:3e:58:a6:57:92:be:3d:60:31:6e:62:f3:
                    0e:1b:e9:e0:25:a0:d9:15:62:60:5b:32:dc:25:fb:
                    41:58:a1:65:53:29:25:87:58:ca:e0:6f:66:eb:29:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6F:A5:DB:3B:17:C6:FD:86:0B:63:02:84:4B:08:26:85:AB:C9:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ec:f4:02:7b:ec:72:48:77:03:7d:c1:96:01:ad:6f:28:a6:
         34:b2:9e:4b:32:08:fb:f1:84:d0:6a:cb:11:54:e7:50:21:a1:
         f3:64:16:cc:9f:b2:bc:66:58:dd:6c:3c:c3:d3:be:aa:a2:52:
         6d:a5:e7:9a:63:ef:05:41:05:76:dd:3b:90:ec:56:e2:bd:a0:
         19:cc:08:50:4f:e9:45:2d:71:1f:a8:1e:06:77:77:a7:96:ca:
         d5:19:a9:12:bd:ee:e8:c7:d5:42:98:49:62:ef:b5:44:4e:17:
         8e:e9:dd:f0:7d:88:c1:48:11:12:9b:4e:77:9e:23:10:b5:0f:
         6a:55:9f:4c:14:51:b9:ca:29:6e:08:1e:43:fd:67:02:b1:54:
         06:83:14:42:fa:57:92:76:8f:48:a6:93:c5:03:ff:03:ec:ca:
         88:6f:e0:4f:51:00:5e:6a:6b:d5:3e:ac:9f:cf:10:fc:eb:b8:
         91:98:8d:92:2e:fa:d7:52:a5:29:48:e1:4e:9c:88:e8:7a:b4:
         38:a2:56:91:c0:5d:5f:d4:45:a3:55:9d:ca:63:ae:22:77:00:
         05:8c:d1:64:a6:a8:19:a9:60:44:4c:46:db:8f:b8:e9:c5:0c:
         24:0c:ef:ed:65:5e:cd:52:14:07:d7:1f:52:a1:2a:7b:bf:7d:
         bd:b8:d3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 23:23:16 2026 by rpki-client