Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/1f367c47-9886-3a3a-97bd-902438a55884.roa
File:                     1f367c47-9886-3a3a-97bd-902438a55884.roa (raw, json)
Hash identifier:          Gk5Bk+Gq230vExVcqB3/rbfcfbQoAJYaBBDFsGTBHKE=
Subject key identifier:   89:2A:3F:00:6B:FE:E0:1C:E8:C5:27:76:DE:0C:95:15:65:EC:BD:B6
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584F82ADCA86CB03AA410762CA40
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/1f367c47-9886-3a3a-97bd-902438a55884.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     22504
IP address blocks:        76.164.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:ca:86:cb:03:aa:41:07:62:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=9e2efc3f-d403-4755-8422-d44b537cc21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:25:66:37:cb:d9:a4:c3:09:90:a6:b4:a7:cc:
                    89:9c:65:24:e7:52:85:b8:c1:00:7f:fa:68:78:91:
                    5d:7c:22:94:34:ec:7b:da:4f:b8:3d:4f:d5:5a:bb:
                    88:84:37:3c:8c:18:91:58:8e:e5:b0:47:ad:69:3e:
                    f5:65:e0:ee:10:cf:c9:5b:cd:a7:c3:a5:47:22:b8:
                    d3:ea:ba:29:60:f8:10:52:77:36:c3:e3:d1:99:4a:
                    02:d8:66:d6:a5:01:58:be:e8:bc:c7:5b:44:49:24:
                    93:bf:11:8a:5d:d3:69:94:f7:f0:29:aa:cc:93:0d:
                    83:6c:53:0b:63:62:62:60:e0:fb:5e:2f:74:95:17:
                    82:5b:06:34:ab:7f:c1:ef:af:14:0a:97:bd:09:d3:
                    a9:47:49:35:01:d9:ef:d6:97:93:ab:81:ba:fb:50:
                    ed:f3:4b:f6:de:ed:4b:b0:14:ba:c1:4f:8d:06:e3:
                    72:46:89:dd:22:ea:d3:96:db:83:65:5a:b4:5e:75:
                    53:3e:cc:65:c6:a2:ae:a8:1d:80:aa:d9:8c:e7:10:
                    36:b6:49:75:fa:4d:4f:48:50:95:7b:b3:f8:70:a7:
                    51:d1:dd:c5:52:b3:2c:8d:24:b6:3c:cd:b0:b4:0f:
                    24:4f:1f:2e:c2:b7:99:f3:a7:3e:08:a0:42:e1:67:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2A:3F:00:6B:FE:E0:1C:E8:C5:27:76:DE:0C:95:15:65:EC:BD:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/1f367c47-9886-3a3a-97bd-902438a55884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:85:4f:d2:45:8b:3a:b4:30:31:a4:c2:8f:bc:ff:05:0c:b8:
         e5:a4:b5:2c:e4:75:e2:fa:34:1f:55:2c:f3:4a:33:72:ad:44:
         93:3a:df:33:43:d5:dc:20:9f:9f:74:4a:71:38:80:c8:a6:9c:
         be:51:e1:23:9e:e9:b1:b7:ec:89:29:46:eb:17:46:63:c2:5f:
         e4:3a:66:65:07:6d:d0:7d:58:80:b6:31:12:10:5a:77:39:e7:
         4b:34:75:45:73:51:bd:8f:f8:7f:2a:86:bf:2a:d2:f5:96:2d:
         d3:01:26:18:6d:fc:d7:ba:7e:73:68:49:ec:0f:16:3b:ce:4d:
         6b:37:be:4c:ac:95:e4:49:4d:ad:5c:07:18:29:76:f9:19:59:
         01:98:1d:91:f8:91:a6:67:28:85:01:e5:62:5c:a8:ca:70:77:
         c7:6f:7b:e9:34:6b:fc:99:93:19:ab:8e:0d:35:51:bd:97:f8:
         1a:48:d2:e2:3f:ed:48:dd:13:a8:4b:72:4d:43:f6:be:b5:89:
         55:ba:8a:6b:35:d2:b5:37:79:b1:d7:bf:42:13:63:d9:34:e6:
         2a:09:49:23:0c:30:2d:46:32:3c:3d:f4:10:e3:7d:85:49:f3:
         c7:e4:b7:7c:2b:48:53:82:44:c1:9c:bf:c6:27:76:3d:d4:12:
         16:d2:01:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:12:06 2026 by rpki-client