Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d660fa16-1872-3c56-8db7-dbd0c7a165c6.roa
File:                     d660fa16-1872-3c56-8db7-dbd0c7a165c6.roa (raw, json)
Hash identifier:          P07V/vWiRXpeyiJMey0+lQWG4tbErsvjHrqTMtoMVOo=
Subject key identifier:   2C:8C:6E:B6:13:7D:BD:13:EC:18:35:C7:2A:76:1E:12:4E:FF:4C:B6
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292B3C1A948E5B178D938C0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d660fa16-1872-3c56-8db7-dbd0c7a165c6.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396190
IP address blocks:        173.234.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b3:c1:a9:48:e5:b1:78:d9:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=8dc49d56-6ff6-48f8-99a2-735df84e8758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:36:3e:25:6a:17:2b:25:ea:b3:6a:aa:18:
                    d6:dd:48:bb:d0:36:59:44:51:aa:dc:e1:df:fc:bd:
                    20:04:85:89:e9:1d:2d:95:8a:8c:a7:a4:20:96:08:
                    86:c6:a2:74:01:95:5a:92:6b:91:f2:a4:13:13:5c:
                    68:e0:63:24:d0:31:d4:95:c1:6f:b0:c5:33:04:24:
                    8c:5f:51:88:01:27:f9:b2:4b:8f:59:17:88:3a:d5:
                    85:7a:02:10:ac:87:73:77:5c:b6:c0:c5:09:a2:16:
                    20:f4:b4:22:ca:44:65:3e:96:bd:de:40:c1:1b:b3:
                    d0:a9:bc:51:1e:04:ee:f7:e6:60:73:e3:fd:a2:4c:
                    0d:67:5e:d5:75:52:ee:c4:82:88:80:29:93:38:61:
                    63:a7:7b:0e:c2:b7:d4:1d:96:be:9a:8e:7b:16:64:
                    06:61:60:c1:89:b8:8e:39:41:6b:fd:e5:05:a8:d0:
                    0d:83:2a:7a:50:7a:c3:96:57:f3:1f:be:79:f9:a7:
                    c6:b5:cf:10:5e:6c:21:c9:19:e1:ec:f2:8f:86:42:
                    9f:44:3a:28:24:4e:5f:9c:26:4c:9f:1b:22:9d:f1:
                    99:8b:92:e9:61:46:f9:f5:e5:4a:d6:89:b3:cc:65:
                    1b:1f:bd:44:ad:bd:a1:60:2c:87:39:b5:65:8b:37:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8C:6E:B6:13:7D:BD:13:EC:18:35:C7:2A:76:1E:12:4E:FF:4C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d660fa16-1872-3c56-8db7-dbd0c7a165c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.234.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:a3:2c:ac:be:55:9e:cf:aa:5e:e3:cc:9d:8a:0c:0b:2c:
         77:5e:ca:78:c3:11:9f:9e:f6:c0:f8:55:96:bc:9d:27:05:5d:
         b4:4f:3c:06:38:03:34:a9:0c:e9:3f:e3:d4:22:15:ff:eb:b5:
         77:f1:07:c1:1e:1f:4b:32:46:17:c6:d5:8a:57:f9:79:18:d7:
         c6:10:71:85:55:4c:35:a1:28:1e:c1:d5:b2:f1:87:db:02:d0:
         d5:3f:b4:0a:4b:e0:d4:df:bf:53:f0:5a:bb:3e:f0:47:29:3b:
         8e:87:68:51:09:ea:4a:bd:3b:32:13:1e:36:f0:ba:76:9a:85:
         89:33:4c:bb:26:8a:89:8a:c9:ce:a3:a3:da:01:b7:46:ad:45:
         33:f2:4b:83:dc:0f:7e:57:f3:ed:a7:b2:b2:eb:a2:29:fd:0b:
         55:b9:18:78:be:e0:94:c7:76:2f:39:47:8b:a9:0f:7f:58:c2:
         ed:c7:d8:b1:b2:ce:99:bb:64:5d:a7:40:82:6c:60:00:e3:e5:
         02:09:ae:dd:af:ac:58:9f:73:0c:ce:5c:62:a5:57:c4:e2:12:
         41:0f:0f:6d:32:03:7d:c8:70:e4:5b:f0:e5:a1:49:38:3e:8a:
         7b:20:75:22:05:e7:56:8f:4f:4f:f5:15:e5:01:27:24:33:a0:
         be:72:4c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:54:58 2026 by rpki-client