Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ecccfd45-817e-3ca9-89ea-2d4a4c1d6ff4.roa
File:                     ecccfd45-817e-3ca9-89ea-2d4a4c1d6ff4.roa (raw, json)
Hash identifier:          nwpFdX6cyWU54KE9AR0wv3NARElnB3/nRoTTSP48zZM=
Subject key identifier:   07:0A:C1:79:90:AF:3A:BE:E8:DF:7E:D3:5E:A0:C6:22:7A:23:5D:E4
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584F49746385FE6AACC84048DB80
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ecccfd45-817e-3ca9-89ea-2d4a4c1d6ff4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     4922
IP address blocks:        70.32.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:63:85:fe:6a:ac:c8:40:48:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4af3670f-34e4-42a9-bc9a-4f4f1b473358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:49:5e:2c:be:e1:3f:8c:b1:bf:b9:c8:88:98:
                    f5:97:94:5c:c2:7b:87:fe:2b:87:7b:6c:f1:2f:fb:
                    85:84:21:21:bd:b1:00:32:c9:c6:dc:8b:d3:81:bf:
                    95:f8:7a:17:68:51:5a:fa:5e:07:61:aa:bb:cd:16:
                    ec:49:25:67:3d:69:7a:7a:b7:23:88:bf:d0:5a:40:
                    7a:28:6b:84:f5:09:a3:68:c6:1b:0e:48:a8:63:53:
                    40:c8:5d:13:25:9b:66:73:fb:98:3d:27:99:95:4a:
                    b1:d6:96:33:73:44:a4:c9:cb:fd:c4:7c:3d:99:bf:
                    4d:62:e2:b9:59:a9:76:d3:8c:1a:14:72:28:34:65:
                    9d:f1:0e:30:e2:17:3d:fc:26:9a:67:28:54:8d:c2:
                    52:a0:48:1c:d4:05:c1:f6:26:95:92:26:0b:c9:3d:
                    38:57:24:40:f5:f7:28:79:4d:11:d9:a5:6d:0a:20:
                    6c:6e:8f:c3:14:f6:5e:1a:2e:06:54:f7:55:f2:dd:
                    b6:dc:0f:22:3f:4e:06:c4:bc:a1:55:d3:12:5e:0a:
                    4b:6d:5e:41:52:da:1d:a2:ca:14:43:b1:1f:10:e6:
                    38:4a:04:47:f1:73:95:20:8c:7d:fe:b7:e5:ad:c7:
                    5a:85:99:a1:94:e8:06:88:50:c4:0f:1c:6d:71:05:
                    de:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0A:C1:79:90:AF:3A:BE:E8:DF:7E:D3:5E:A0:C6:22:7A:23:5D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ecccfd45-817e-3ca9-89ea-2d4a4c1d6ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:56:eb:43:8c:a1:e7:18:22:5f:25:e6:00:eb:1b:54:aa:7b:
         cb:5f:cb:41:65:07:e3:b6:c0:6a:f8:ba:0d:02:a1:34:a0:09:
         a7:89:0f:f3:37:40:9c:34:6d:e5:27:4b:86:b9:40:32:6a:53:
         56:f7:bb:71:81:e1:76:40:a7:dc:16:e7:94:ee:95:60:54:1b:
         a1:b2:dc:2e:19:61:c3:30:d4:7d:af:01:60:81:5c:39:2a:3b:
         5b:74:51:72:fc:f0:4e:0f:16:45:43:19:6e:07:03:91:00:0a:
         c1:3e:66:b2:2e:10:e4:50:aa:af:cb:b3:a6:6a:6a:17:7c:1b:
         63:25:34:f3:6d:dd:52:0f:b7:1c:29:11:78:be:f2:7a:09:fc:
         6f:0c:9c:f4:0e:e1:11:f6:b7:e3:53:5b:97:da:9a:43:e7:0c:
         16:71:17:28:50:4c:18:75:01:cb:09:d9:cc:a4:3b:7b:31:15:
         99:11:a1:6a:88:af:82:9b:9d:04:69:e9:49:4c:5c:92:42:98:
         7d:45:8e:b0:3a:2f:8b:b6:79:2c:71:8e:8e:3a:b8:9b:c0:c9:
         62:49:7d:1e:8e:9b:cd:a5:54:55:f0:1e:90:3c:72:6d:6f:b7:
         57:7f:bb:71:e8:8f:b8:54:d9:d3:76:23:43:68:c6:6c:83:de:
         91:34:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 09:50:52 2026 by rpki-client