Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ce9d9aa5-a7c0-3b2b-a8fe-cc791feadca5.roa
File:                     ce9d9aa5-a7c0-3b2b-a8fe-cc791feadca5.roa (raw, json)
Hash identifier:          XkeqhE/axBQvkdGfNlFo7bnER8qy/eBTSP5NM3zXdZI=
Subject key identifier:   9A:7F:DF:11:51:4E:BE:74:FB:7C:69:9F:8A:80:DC:2F:EC:AB:D2:25
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584F6DC195BA04C709FF07776638
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ce9d9aa5-a7c0-3b2b-a8fe-cc791feadca5.roa
Signing time:             Thu 08 Oct 2026 01:08:37 +0000
ROA not before:           Thu 08 Oct 2026 01:08:37 +0000
ROA not after:            Wed 06 Jan 2027 02:08:37 +0000
asID:                     55256
IP address blocks:        80.43.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:c1:95:ba:04:c7:09:ff:07:77:66:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Oct  8 01:08:37 2026 GMT
            Not After : Jan  6 02:08:37 2027 GMT
        Subject: CN=11eb1e65-18c7-4501-a46c-9cbba28af446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:55:c2:70:60:28:98:1a:63:79:fd:9b:1f:
                    f5:a6:0e:a4:25:dd:19:57:01:e9:e6:11:a1:d3:ba:
                    de:ab:86:5e:96:6d:a5:a0:b5:1e:c3:72:67:7c:c1:
                    c7:75:85:57:26:e3:e2:f3:61:b6:2d:02:ed:a5:16:
                    38:11:e3:3c:7a:fb:6b:81:00:49:0a:6f:ad:ad:58:
                    9b:ff:69:76:8d:02:a3:91:4a:58:aa:0d:07:73:a7:
                    01:98:9c:78:ff:ca:43:2a:18:62:60:3a:3f:1c:be:
                    f5:f9:a4:32:f2:c8:97:15:a1:b8:2d:90:99:79:7a:
                    b0:71:01:b1:d1:2b:ec:05:ad:12:51:6e:d0:2c:b2:
                    19:1a:b9:a6:d1:e0:11:c4:37:35:24:0a:62:90:4e:
                    61:eb:aa:89:c7:b3:05:98:f4:2a:21:00:e4:26:30:
                    d4:de:8f:28:21:4c:f5:3b:00:3e:fc:d9:34:2b:f0:
                    73:97:8d:7d:12:9c:00:aa:cd:b2:1a:e1:97:f8:99:
                    bc:14:5c:43:e1:9b:23:77:29:62:0e:59:ce:76:ba:
                    a8:6a:ec:44:48:fa:77:df:1b:07:ed:41:b3:4c:67:
                    fc:98:cc:29:aa:c9:48:90:09:6b:1b:ed:23:8b:f5:
                    bf:e0:6c:97:eb:c8:f3:66:20:45:27:f6:71:d5:14:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7F:DF:11:51:4E:BE:74:FB:7C:69:9F:8A:80:DC:2F:EC:AB:D2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ce9d9aa5-a7c0-3b2b-a8fe-cc791feadca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.43.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9d:e0:68:d7:a7:bf:a5:73:27:eb:64:04:4a:82:99:b8:0c:
         06:9f:f2:ea:6c:16:a2:6a:cc:c6:62:e1:a4:2e:c1:ce:ee:39:
         43:0f:65:29:1c:0b:a7:05:90:6f:b3:c5:c1:31:45:98:f5:5a:
         d2:b6:45:a8:a6:87:0e:33:e9:bf:bf:d5:85:a2:17:e3:54:52:
         f4:9d:07:ec:f2:cf:df:2c:2d:a7:48:1a:bd:70:01:04:2c:9b:
         17:e9:d0:1c:18:78:ec:10:8a:5b:5a:47:1a:d8:2f:14:f1:cd:
         8a:ae:cf:db:3f:a6:e0:85:ba:06:66:21:5c:0d:83:e5:19:43:
         65:0c:48:a3:fb:fe:c2:c6:14:7f:46:cb:92:89:2e:6c:1c:cd:
         b8:de:93:93:39:44:99:eb:c4:bf:fd:40:2a:fe:01:b9:ba:d9:
         94:48:82:08:f3:e0:99:d4:10:9d:6f:80:94:31:10:34:0b:47:
         d0:68:da:fe:c3:eb:0c:22:98:76:93:93:14:88:78:8a:5a:72:
         9d:9c:8d:8a:f3:75:e8:ae:ce:ca:16:dd:66:f6:c4:92:bf:f9:
         e5:63:96:df:8f:f0:6b:d1:79:65:04:8a:ba:19:17:43:8d:1f:
         67:4f:2b:97:24:97:4a:e2:40:af:c8:52:47:78:fa:4e:c0:d2:
         c5:55:55:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:06 2026 by rpki-client