Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/e1a769b2-60df-3094-a846-a1b102fcbb48.roa
File:                     e1a769b2-60df-3094-a846-a1b102fcbb48.roa (raw, json)
Hash identifier:          bbfKtl0dty0V22h1m5LoOWAyhCXbs3eD6y6B6ho16wE=
Subject key identifier:   36:FA:97:FF:C0:89:1E:29:DF:C8:8C:DD:CC:AD:CD:C7:E2:EB:1A:40
Certificate issuer:       /CN=ac0c72ee-a963-4924-8dd0-a48579578b1b
Certificate serial:       010D0C9F4328584F89A87DF02070F129FE80B580
Authority key identifier: 8F:35:48:6A:6F:2C:E2:E5:11:9B:D3:4E:C3:FB:F2:00:1F:EC:A8:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/e1a769b2-60df-3094-a846-a1b102fcbb48.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     400042
IP address blocks:        76.164.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:7d:f0:20:70:f1:29:fe:80:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0c72ee-a963-4924-8dd0-a48579578b1b
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=6ea418a7-b680-4517-95c6-b571773479b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c3:35:fe:b7:ec:52:ee:82:f0:e5:70:08:43:
                    f2:70:eb:90:69:f3:b4:d1:3f:82:b4:c7:3e:70:79:
                    d7:94:b4:63:59:a8:fd:41:03:f5:ac:8a:83:2e:32:
                    be:fe:1e:89:a2:c6:2e:45:4b:d4:5f:d6:be:46:f0:
                    93:cc:bc:99:d7:f6:f7:e4:96:3b:24:ac:d1:f4:e4:
                    90:a3:c5:e0:74:90:69:39:ef:05:f7:99:83:7d:a5:
                    52:da:4d:88:12:30:a5:ba:d9:78:43:eb:04:40:f0:
                    ff:a6:71:e4:b2:c9:4a:c7:61:58:15:37:15:4e:04:
                    28:9b:85:86:6c:4b:7e:8d:f9:38:68:55:4c:1d:fb:
                    9a:a8:80:3e:f0:f8:19:ff:38:75:8c:bf:d9:15:7b:
                    84:61:fe:0e:fc:dc:49:8e:db:d5:28:d9:b6:61:3e:
                    99:f1:ab:81:fe:73:e3:c7:b4:f2:57:23:a4:23:d0:
                    5d:0d:68:4c:09:27:26:4c:ec:69:4d:eb:54:ad:f4:
                    5d:58:79:67:a4:df:49:ab:c1:b3:50:93:b6:ee:34:
                    37:d7:6c:89:75:f7:b6:d4:ee:c3:3a:d4:d3:61:10:
                    ff:f2:ac:90:0f:a7:41:e6:cf:97:50:4b:c5:bb:75:
                    a9:f0:14:27:63:5f:9c:68:ea:10:29:c0:4b:8d:91:
                    a2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FA:97:FF:C0:89:1E:29:DF:C8:8C:DD:CC:AD:CD:C7:E2:EB:1A:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/e1a769b2-60df-3094-a846-a1b102fcbb48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b/ac0c72ee-a963-4924-8dd0-a48579578b1b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:35:48:6A:6F:2C:E2:E5:11:9B:D3:4E:C3:FB:F2:00:1F:EC:A8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac0c72ee-a963-4924-8dd0-a48579578b1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:28:2d:ef:0e:2e:c6:5e:5e:24:df:d4:ed:95:85:51:60:33:
         46:12:bb:2a:d8:e8:f0:11:39:c8:91:28:e1:26:1d:fd:e6:e6:
         b1:41:aa:89:82:6a:e4:59:aa:44:ab:27:68:e9:7b:07:94:ee:
         cd:93:3a:86:d2:fa:a0:c4:6b:40:a0:78:b3:5f:ed:65:78:bf:
         71:72:1e:6c:43:be:62:ed:96:b3:cc:f3:df:31:c1:30:bf:3f:
         d6:6e:86:3f:74:78:1f:a4:38:2c:90:40:2a:95:b4:36:f3:12:
         d2:dc:23:a8:12:e6:93:02:ec:19:6d:3d:e8:21:03:77:18:ab:
         16:ff:98:7c:dd:82:8c:ee:f5:11:98:f8:27:9f:a2:fd:a0:be:
         06:ab:19:9e:46:af:71:e4:b2:f6:88:26:ab:79:39:cb:de:50:
         a7:89:d4:6a:eb:d5:c0:c0:a2:a9:90:6b:ba:39:f0:7c:68:ea:
         6d:2b:09:ad:e9:27:0e:c5:02:c5:b6:6c:db:43:5c:d6:18:54:
         9d:22:4a:bf:a0:7b:87:79:7a:56:60:c0:6a:d3:5a:ba:bc:c7:
         d5:44:f9:18:9f:bd:c7:f2:4d:52:5b:ca:fa:65:ce:09:d9:54:
         e5:2b:06:8b:7c:f9:bb:66:fa:cd:0f:cf:65:26:d4:51:5e:be:
         15:19:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:55 2026 by rpki-client