Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa
File:                     ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa (raw, json)
Hash identifier:          T5gL2mAAYv2UyJ9GFyCklUHaQ2ML+WE/fv4bmg+5bgg=
Subject key identifier:   05:10:99:BE:FD:9E:32:FC:2C:F4:6C:CB:4A:C1:40:28:50:4E:FC:92
Certificate issuer:       /CN=db3852ba-10a2-4ef3-a92e-5bb8970f2b66
Certificate serial:       010D0C9F4328584F66C2BC72825865ED2BB467A0
Authority key identifier: 0A:B9:F7:D3:A2:3D:3B:A8:BE:E8:1B:71:20:B4:E2:D1:F8:D0:EB:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     46582
IP address blocks:        198.175.172.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:bc:72:82:58:65:ed:2b:b4:67:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db3852ba-10a2-4ef3-a92e-5bb8970f2b66
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=475e227c-f287-49f5-a9d4-4287a9dac48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:da:5d:20:02:ee:c7:d0:53:d0:1b:6b:e3:
                    8a:27:53:c9:79:ab:26:ab:18:9c:4c:21:22:12:55:
                    70:ec:fa:66:88:b2:3d:ae:56:2e:af:64:02:56:cc:
                    d9:a6:47:4f:a3:e9:58:d6:24:ad:20:04:1a:7d:5e:
                    c6:98:59:b5:b2:4b:1a:46:97:ac:27:16:87:62:11:
                    ef:2f:38:d9:0a:84:2f:61:96:77:3a:b1:26:41:f6:
                    8a:ad:05:f3:12:35:6a:e0:fe:60:4d:87:70:28:a1:
                    47:ab:80:a9:b9:0c:33:6f:78:af:3b:4f:a1:07:da:
                    29:cc:c6:29:68:92:ef:84:15:c1:34:c8:b6:5e:d5:
                    0c:35:8a:42:61:5e:2c:cf:43:c0:87:c2:24:53:9d:
                    a6:88:00:ab:45:48:46:2e:c0:62:76:9a:83:82:a0:
                    02:26:6d:3d:9a:3c:4f:32:39:7b:6e:f6:e2:b9:b2:
                    82:9f:9d:af:c1:cf:cb:d8:cd:1a:94:69:a8:0b:e3:
                    dc:4f:e1:1d:98:df:7d:36:96:d4:b8:e3:2d:f8:ef:
                    f7:94:58:78:f3:33:5e:c0:2a:7d:81:df:49:c0:c0:
                    3e:76:97:14:5b:8d:3c:ae:d8:ec:42:76:23:e4:86:
                    16:f1:ef:e8:88:e5:3b:b0:41:f0:20:07:00:25:10:
                    0c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:10:99:BE:FD:9E:32:FC:2C:F4:6C:CB:4A:C1:40:28:50:4E:FC:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B9:F7:D3:A2:3D:3B:A8:BE:E8:1B:71:20:B4:E2:D1:F8:D0:EB:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:86:20:04:a4:22:70:37:b1:30:e1:4a:f3:88:1f:df:f5:5d:
         8b:47:5a:18:e1:be:4b:65:80:34:af:9d:17:3b:d5:44:37:b6:
         74:da:7a:5b:dd:38:e3:6b:b1:ce:25:e5:99:ed:72:3d:f6:51:
         bc:eb:30:3e:e2:d3:dd:be:e4:29:f4:17:97:74:4c:d1:fb:e6:
         12:39:c6:5f:30:44:49:55:dc:a7:d6:bc:78:65:01:5c:31:53:
         a3:25:45:c6:23:be:12:b6:cd:33:3c:bf:dd:34:fd:e8:9d:72:
         e3:4c:70:fa:63:7f:69:5e:3d:3a:1f:1f:63:04:88:7f:9e:e1:
         49:f7:17:cd:be:b3:2f:da:ef:e1:c0:4b:64:b9:85:ac:65:9f:
         a5:77:ef:f1:55:34:f3:8c:95:62:b7:c1:bf:5e:27:4e:aa:3c:
         a2:95:c1:e1:77:3b:e3:28:25:c9:20:07:22:18:b6:3c:a5:e9:
         7d:01:33:ee:15:8d:6a:98:22:31:b8:ad:9c:81:73:ae:09:2c:
         1f:53:2f:e3:fd:76:fe:03:60:91:e2:15:c8:0f:01:93:af:8e:
         b4:46:b0:5e:00:2c:d4:f7:26:18:4f:58:8c:17:1d:e8:03:72:
         93:37:90:24:14:fb:5d:42:9f:08:c2:2c:af:0c:2c:e9:70:16:
         0b:d1:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:25:16 2026 by rpki-client