Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a1c1a5be-ceb1-346d-9c3e-9518cbc88ccb.roa
File:                     a1c1a5be-ceb1-346d-9c3e-9518cbc88ccb.roa (raw, json)
Hash identifier:          0xF/Sskw1xAViRsApxjGw/qraTbbCgzx9tGz8z2E5wQ=
Subject key identifier:   FA:EF:B4:CA:29:9C:1B:99:AF:42:E3:AA:29:59:E0:D5:27:DB:28:9F
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5CFD5040AA380BEBAD0889C0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a1c1a5be-ceb1-346d-9c3e-9518cbc88ccb.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     7203
IP address blocks:        172.255.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:50:40:aa:38:0b:eb:ad:08:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=a9d779bf-30ce-4208-b21f-5ccd5da2d60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:db:b1:86:fc:29:44:34:9b:2f:ee:f7:e5:
                    88:09:8e:9a:ea:d1:14:00:06:89:29:09:fe:2a:cc:
                    59:24:3e:a2:35:7c:d2:15:da:08:0d:e9:c3:9a:4d:
                    3a:31:44:a5:33:31:57:65:ca:39:06:18:78:dd:0f:
                    e4:b4:90:7f:59:bb:de:d7:c7:2b:04:a4:c4:c7:6e:
                    ca:3f:0e:56:96:f1:c1:b2:1d:a7:32:7c:af:14:83:
                    6a:34:c9:d3:c7:04:ff:d8:12:74:22:46:02:67:ff:
                    3a:8b:e0:3b:63:49:d7:b6:03:02:df:4c:ce:f0:57:
                    03:51:b8:d2:3d:cd:d0:87:c4:6a:ab:38:56:06:e4:
                    56:95:30:93:48:bc:45:5e:d5:36:8e:44:e4:03:28:
                    09:b6:3f:84:e0:99:b8:79:01:1c:b5:46:da:1e:f6:
                    31:05:e9:ae:d2:35:ed:94:d4:4b:ee:ee:f8:db:1e:
                    bf:65:87:99:c1:ca:c9:ff:05:8a:4d:a2:50:37:4c:
                    94:81:82:48:bc:f6:de:d3:dd:07:87:ff:f1:ad:f4:
                    f1:5e:c5:42:59:07:8c:f2:95:22:a9:e5:95:da:2b:
                    30:df:b1:57:6d:c8:b8:f1:c2:f4:89:1c:26:19:e4:
                    6a:52:53:45:23:af:53:87:51:46:ea:3c:f2:a2:1f:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EF:B4:CA:29:9C:1B:99:AF:42:E3:AA:29:59:E0:D5:27:DB:28:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a1c1a5be-ceb1-346d-9c3e-9518cbc88ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.255.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:bd:e5:a6:fe:08:0c:b7:7c:3a:23:5b:e0:21:8b:da:e6:09:
         a3:cb:45:77:3e:96:e0:fc:ee:4a:0a:38:92:95:ec:56:92:9d:
         05:52:8f:a6:4c:7e:8a:3f:a5:cc:db:f5:a3:b0:31:5f:92:e9:
         c2:d2:08:9c:ee:6a:43:3e:0f:58:42:32:c1:27:74:59:bc:c9:
         4f:48:a7:40:bb:4b:62:32:14:d7:22:1d:e0:88:ab:d3:ec:fc:
         2a:57:18:34:6e:74:92:a0:8f:89:64:77:c1:b1:1f:8e:26:dc:
         b8:a8:bd:51:db:7c:52:ee:2b:ed:08:ca:03:20:77:1b:a6:b9:
         8f:03:87:44:00:4c:0d:1d:4f:66:18:df:34:f3:e6:7d:89:e0:
         10:49:96:25:64:75:b8:7a:e9:76:d4:f2:3d:fa:f5:2a:d2:f0:
         75:08:d7:b2:c2:d4:ab:a0:6b:2e:b2:8a:7a:5d:92:f1:07:38:
         d2:04:a3:4b:f5:d2:ce:b0:50:f5:f3:48:38:34:d2:41:82:39:
         94:a2:95:82:aa:a1:d3:48:5a:84:df:9b:7a:13:c7:fc:7d:4b:
         c3:88:15:34:3b:dc:f8:de:a0:c1:96:12:5a:26:13:80:47:17:
         5d:5d:1a:0b:3e:19:ca:e8:1f:28:cb:81:2c:8c:f0:c1:ea:56:
         50:69:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 02:00:03 2026 by rpki-client