Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/ae5bc477-7f7c-3e3d-b2ee-22a7ece79511.roa
File:                     ae5bc477-7f7c-3e3d-b2ee-22a7ece79511.roa (raw, json)
Hash identifier:          +J8aWdIXGNQHE5LN/5NzBQRJYsC4LkS3yX4fZbjK3h8=
Subject key identifier:   44:7D:80:2B:8F:F7:9C:18:50:82:27:26:47:F5:98:63:28:BD:D8:7A
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F4328584F81483D124EF8D29711E043C0
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/ae5bc477-7f7c-3e3d-b2ee-22a7ece79511.roa
Signing time:             Thu 15 Oct 2026 01:00:12 +0000
ROA not before:           Thu 15 Oct 2026 01:00:12 +0000
ROA not after:            Wed 13 Jan 2027 02:00:12 +0000
asID:                     11663
IP address blocks:        204.113.4.0/24 maxlen: 24
                          204.113.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:81:48:3d:12:4e:f8:d2:97:11:e0:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: Oct 15 01:00:12 2026 GMT
            Not After : Jan 13 02:00:12 2027 GMT
        Subject: CN=45f89bb1-cd16-4dc3-b4fc-aafdd7cddf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:d6:f0:d9:12:ff:16:86:ce:80:2b:b9:c6:
                    94:75:24:11:9b:d1:58:7b:3b:04:1c:63:ab:ca:3b:
                    59:9b:51:f5:1b:a3:90:56:41:23:89:ed:c5:ae:e1:
                    e1:58:bd:6b:70:83:0d:08:cb:75:48:90:b2:f3:25:
                    f1:9a:de:d4:46:b8:52:ee:17:88:1b:b5:12:a7:c2:
                    2e:ec:fe:76:c2:4f:fb:19:f6:99:a1:7f:4f:a1:33:
                    ca:d5:74:04:60:cb:32:3b:3e:a9:46:3a:2d:17:f6:
                    ff:3b:93:72:65:7c:2f:8e:24:21:38:ce:1e:97:45:
                    90:61:fa:53:7c:db:7a:78:29:56:ba:b0:f3:f1:2b:
                    43:28:ce:98:57:e6:bf:40:20:63:b5:cc:92:a1:01:
                    b0:17:49:05:05:eb:13:b7:4f:83:4f:4b:1a:06:3e:
                    6b:19:3c:3c:a2:6d:91:ff:3e:a8:b8:5f:e3:06:b1:
                    2f:92:25:7f:e5:41:fa:9b:6d:ef:ec:54:2e:c7:58:
                    7d:5f:c0:71:3a:24:8f:85:d0:a7:38:f5:e4:db:c0:
                    99:89:75:df:57:94:31:13:10:22:1a:d1:82:b4:b4:
                    74:df:7a:b5:22:ae:ac:c3:cc:7a:e8:2a:b5:3f:7c:
                    87:09:79:fa:c2:f1:78:c5:0d:87:92:68:b0:f9:6d:
                    df:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7D:80:2B:8F:F7:9C:18:50:82:27:26:47:F5:98:63:28:BD:D8:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/ae5bc477-7f7c-3e3d-b2ee-22a7ece79511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.113.4.0/24
                  204.113.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6f:4b:5e:19:34:e7:6d:17:ca:72:0f:0d:b0:16:24:41:48:
         6b:88:f1:53:b5:31:c2:55:7d:4a:42:ff:2c:0d:8a:b1:41:64:
         3d:b0:f4:34:cf:55:7a:c9:33:69:47:d6:fd:f0:be:dd:56:4d:
         b8:69:5c:04:7a:ea:42:d2:e5:e2:b2:9d:70:aa:3d:4a:a8:0f:
         92:4b:2e:e0:51:58:5f:52:dc:fc:23:b2:d9:86:d6:cb:27:1d:
         91:5f:37:e1:b9:aa:20:c0:b7:d0:4a:1c:76:4a:7e:4c:95:37:
         0d:a5:93:dd:a3:5c:e2:41:3f:b4:9a:4f:ff:0f:38:67:13:84:
         a1:2c:3f:e1:30:38:30:b9:d6:4a:8c:12:7d:da:b6:b3:a1:5b:
         23:2f:bb:23:19:69:91:75:ea:dd:8b:dd:3a:12:a0:3f:ee:67:
         c4:2b:83:70:d7:11:70:74:31:f2:39:05:c6:93:bb:de:0a:e8:
         da:1c:13:a1:28:78:72:ed:26:9c:82:f4:90:e6:71:e9:4a:b9:
         73:f3:d3:dc:6d:d2:66:2d:9d:32:d6:80:8d:36:99:88:fe:2e:
         fa:3d:f4:3d:c9:ad:f9:12:f5:1b:5b:e6:2b:84:f9:f5:f3:53:
         37:8b:d3:71:82:92:6d:3d:5c:54:73:b7:02:c9:c6:4a:b7:d1:
         77:73:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:31:32 2026 by rpki-client