Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa
File:                     0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa (raw, json)
Hash identifier:          CtwcqeauPcQlP/4vVpimgqzsh96LPxcd6I8VM/aW8CQ=
Subject key identifier:   74:05:BB:46:80:19:EE:48:CD:94:13:ED:4F:3D:86:71:1E:9A:B2:2D
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584F7A4D8F9A28E280929BD88B00
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     16509
IP address blocks:        208.95.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:8f:9a:28:e2:80:92:9b:d8:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=53619708-b1b7-481e-93bf-8621f0253db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:11:60:ea:e2:69:a5:39:8c:d2:06:9e:da:
                    02:45:50:06:4e:13:0f:01:63:2d:53:99:4b:dd:66:
                    0a:e7:87:24:1a:1f:34:fa:38:a8:71:f3:f2:0c:7d:
                    3b:84:92:84:b6:59:70:0e:da:ba:b8:52:26:a7:9f:
                    dc:a7:c8:17:ae:de:15:c3:cd:34:fa:68:c6:00:85:
                    5c:4d:01:98:78:ea:18:ce:64:0c:6a:f5:fd:e9:41:
                    f9:43:40:89:2b:3e:7f:60:a2:84:8c:ca:ff:5b:2f:
                    d8:15:4b:37:e7:30:23:92:ab:26:18:b3:e4:7e:21:
                    32:2e:db:e9:a8:3c:d8:1b:82:bc:ac:0a:7e:d7:e6:
                    93:8a:f3:d7:09:2d:fc:e2:ee:02:16:ca:59:e0:3f:
                    95:f1:bb:bb:7a:a5:2a:ed:c6:6d:9c:69:ce:0e:fe:
                    23:7f:55:9a:7e:8c:8a:48:c5:b6:b4:62:da:da:9e:
                    d4:09:59:cb:5e:fd:d7:e6:cf:0b:a1:d3:f3:c8:29:
                    a5:5a:44:08:88:57:79:9c:b2:62:37:fd:c7:54:e0:
                    47:ce:65:ba:81:17:a8:3c:0b:28:d2:2c:df:b5:f7:
                    63:43:d6:30:4b:50:57:50:fe:19:b0:f2:d9:9d:62:
                    f3:07:a2:17:13:82:9b:2c:55:62:a2:d8:6a:e5:53:
                    86:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:05:BB:46:80:19:EE:48:CD:94:13:ED:4F:3D:86:71:1E:9A:B2:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:bb:7c:b0:f8:0e:1b:45:7a:7a:d6:95:b8:90:dc:28:b5:b7:
         06:dc:0e:bb:af:77:64:29:7f:d9:31:29:65:72:49:52:e1:7a:
         31:89:11:b2:2f:cb:2b:b5:e5:6c:b7:b9:1e:7f:c0:8b:3d:5a:
         bc:b7:43:41:29:50:84:75:54:e7:fa:1d:b7:08:c1:88:9d:37:
         0d:d5:f7:eb:1e:80:0b:13:71:d7:b6:e0:4c:c6:be:bb:32:4a:
         2d:50:58:af:f8:07:75:c3:05:70:49:e6:b9:b1:10:c7:f9:87:
         ac:4e:51:83:26:c7:0d:94:8a:58:86:8e:33:41:cd:03:20:f1:
         f8:d6:79:ee:7c:a5:47:07:9b:1d:7c:ad:4d:96:21:a2:d8:ce:
         43:7c:35:cf:ac:d4:61:9b:b8:42:b3:7f:3f:b5:e3:a2:af:1f:
         3a:89:26:12:46:84:54:97:99:33:6a:70:51:82:fa:ba:c9:81:
         ed:9d:6b:ee:94:a0:cc:54:67:f1:88:28:db:ac:80:d8:eb:cf:
         b2:c1:d7:08:d1:e4:7f:74:dc:40:b2:bf:64:16:9f:a5:ef:55:
         40:a4:d5:12:88:d3:45:c2:10:6e:4e:0f:06:7c:b4:e3:0f:e3:
         0e:98:9d:74:db:48:ce:44:27:f0:e4:4e:2e:02:3d:a7:c7:01:
         44:7e:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:50:54 2026 by rpki-client