Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/45913dec-1fba-3180-8e91-30a1d5ee6e1d.roa
File:                     45913dec-1fba-3180-8e91-30a1d5ee6e1d.roa (raw, json)
Hash identifier:          MJ6BDCfytucHEdTLA7d1ofo95/PHApq0+uG5YsOv8QA=
Subject key identifier:   39:43:C6:65:FA:6B:D7:D2:00:24:FE:2D:BC:7D:CC:D5:6A:90:8E:F7
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584F79661F0A78AD5D2192F41B80
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/45913dec-1fba-3180-8e91-30a1d5ee6e1d.roa
Signing time:             Mon 12 Oct 2026 05:14:01 +0000
ROA not before:           Mon 12 Oct 2026 05:14:01 +0000
ROA not after:            Sun 10 Jan 2027 06:14:01 +0000
asID:                     397423
IP address blocks:        104.166.86.0/24 maxlen: 24
                          162.223.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:79:66:1f:0a:78:ad:5d:21:92:f4:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Oct 12 05:14:01 2026 GMT
            Not After : Jan 10 06:14:01 2027 GMT
        Subject: CN=511e8299-a9fd-471d-a609-3c76a6ff6632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:31:bc:ac:d2:a0:f4:72:f0:1a:8c:f0:d3:
                    a0:a4:4b:df:5f:53:dc:1b:4e:0b:df:5e:c8:d8:b1:
                    ee:26:2c:c3:ac:21:ed:0f:bc:09:78:a7:f0:7a:cf:
                    58:0d:bb:5e:8b:d3:59:dd:1f:6e:47:65:18:bd:62:
                    c3:1f:2b:f3:6e:37:be:ac:d2:9c:cb:e8:ca:fd:66:
                    68:9b:a7:12:a0:4c:64:19:43:ef:38:3e:8c:0a:e8:
                    01:35:3e:5a:37:bb:49:23:fb:16:b6:bf:a7:58:8b:
                    db:77:20:45:da:a9:94:5c:a1:65:0b:a4:95:75:3c:
                    50:89:e7:0e:9c:54:ff:ea:f6:01:e8:d1:d6:db:80:
                    ca:d2:37:4f:0c:0b:ec:4c:eb:1f:4c:57:ab:ac:67:
                    a7:ab:50:7e:3a:b0:8f:5d:00:aa:3b:8d:c3:80:2d:
                    97:a0:9e:2b:f6:e3:26:a2:ad:d3:13:ea:ea:96:63:
                    1f:bc:36:fe:5b:50:67:7f:11:c6:42:9b:2e:2a:0f:
                    d2:c8:42:a1:c3:e2:2e:b2:1d:e4:6a:23:d1:48:72:
                    c3:91:40:b9:60:4d:0c:49:dc:cb:08:f2:80:c2:37:
                    0b:da:ee:e4:46:9a:b9:63:bd:d8:20:63:61:d2:15:
                    da:5e:b4:36:48:95:05:89:c4:35:2e:9a:ea:86:12:
                    0e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:43:C6:65:FA:6B:D7:D2:00:24:FE:2D:BC:7D:CC:D5:6A:90:8E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/45913dec-1fba-3180-8e91-30a1d5ee6e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.86.0/24
                  162.223.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e8:6b:48:3c:cb:8e:51:65:14:91:fb:a5:38:ee:f9:47:0d:
         05:0e:80:13:a3:b9:91:86:af:e6:96:95:17:23:e3:ff:c7:bb:
         1b:cc:0c:8c:16:72:e7:08:fa:ef:ce:45:04:2c:a6:f8:37:3f:
         4a:6f:ad:54:ad:f5:50:52:2b:c5:20:f2:d0:e0:96:f4:f1:61:
         af:22:ff:cf:10:05:6b:25:97:b2:4a:6e:29:a4:8a:33:30:b4:
         11:4b:f0:be:9c:af:ec:91:6e:76:b1:9b:b4:39:85:f8:4b:7a:
         bc:86:76:a6:7b:e8:07:75:ea:8d:15:a1:30:f6:1e:48:24:6a:
         1f:b3:46:51:24:83:de:8d:b8:c3:e6:b9:ac:1f:73:5c:82:81:
         bb:f6:8a:97:0d:08:9a:b6:e0:cd:86:43:aa:be:bc:23:24:c4:
         a2:6a:1d:bb:72:f1:07:06:0d:8c:00:d8:5f:25:b4:3c:3c:ac:
         13:4b:a0:36:4c:33:17:e1:0f:1c:c7:87:64:9a:69:7e:c4:07:
         91:79:14:32:08:2f:07:64:3b:f6:aa:4e:9d:a9:4f:50:08:5d:
         ca:00:d0:a9:dc:e9:c3:fc:32:7a:4d:5b:f2:4f:bc:6d:ca:66:
         34:1c:34:b3:0c:7c:16:60:d1:18:70:9a:a1:ff:11:d6:63:f5:
         e5:3e:64:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:10:29 2026 by rpki-client