Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/5722b247-9830-31ab-ae55-5307e2f72f2a.roa
File:                     5722b247-9830-31ab-ae55-5307e2f72f2a.roa (raw, json)
Hash identifier:          bjxis8Z3WwkMNBOiT5sLrwoflz6xVj24XihLdM7QCLE=
Subject key identifier:   E5:BE:D3:AB:21:6A:22:1B:56:82:12:2D:A0:39:9C:2F:15:6B:E2:BF
Certificate issuer:       /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Certificate serial:       010D0C9F4328584F49728B3C196BCD083752DD80
Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/5722b247-9830-31ab-ae55-5307e2f72f2a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13340
IP address blocks:        173.247.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:8b:3c:19:6b:cd:08:37:52:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4ff9980e-0430-4268-9071-67e35dd7a0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:9b:84:11:90:07:7e:2a:93:63:1d:d0:a3:
                    d5:24:ab:29:64:27:f0:8c:c3:17:2e:e0:a6:19:5f:
                    b6:97:08:77:7c:48:6d:ff:99:53:2f:4c:0c:1a:57:
                    71:33:33:7e:0e:72:dc:e1:de:df:0e:71:5b:1b:d9:
                    9e:a2:85:97:f3:e6:bc:0e:b7:11:5f:29:81:9a:33:
                    68:d3:f6:f5:e3:2f:5d:e6:23:46:20:5c:f0:9e:21:
                    8c:00:ef:ed:40:d1:d2:5c:ed:1d:3a:f4:86:9c:54:
                    a1:07:b4:07:f5:a1:22:1d:cf:9b:1a:29:82:74:d2:
                    90:d5:bb:bb:b3:9b:2f:30:5e:85:bf:f6:99:bd:13:
                    e7:c9:d9:b6:b3:a5:9b:2c:ed:45:74:82:2d:c4:aa:
                    b4:5a:c5:e0:bb:92:cb:27:17:de:08:77:d9:35:52:
                    d2:2b:62:31:46:9c:59:2c:76:33:a1:62:af:0a:57:
                    5e:0c:8c:40:7c:d7:f4:33:07:bd:42:d0:34:12:6c:
                    65:70:20:89:bf:8d:c5:e2:4d:14:1e:ca:5a:47:22:
                    3a:b5:88:87:5c:7e:1d:d2:0e:a2:0a:2f:37:f9:b3:
                    40:26:dd:58:f1:8a:6a:1c:6c:8f:a8:aa:f0:9e:a1:
                    ae:21:e7:32:ff:9c:e0:19:48:9a:ce:9b:03:10:11:
                    d1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BE:D3:AB:21:6A:22:1B:56:82:12:2D:A0:39:9C:2F:15:6B:E2:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/5722b247-9830-31ab-ae55-5307e2f72f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl

            X509v3 Authority Key Identifier:
                keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:17:b3:c9:31:58:dd:b8:f3:80:72:a5:d6:26:79:d4:87:79:
         49:53:49:cf:3a:17:c5:8f:17:00:22:3c:e4:97:b4:63:5a:05:
         ab:06:d1:84:cc:73:a2:0f:be:ae:6c:23:89:47:25:be:e3:f2:
         4d:f8:11:68:52:a1:e9:16:b7:e7:c4:7a:16:5b:1f:6f:91:50:
         3b:c5:42:de:94:00:8a:96:33:61:c3:8a:45:25:87:d6:94:63:
         e2:88:04:d4:3a:fc:87:43:4e:2f:28:38:88:0f:93:91:3c:ab:
         83:a2:de:8e:55:07:71:af:95:e2:d4:12:14:a0:74:3b:9f:93:
         c7:93:da:26:1b:39:fd:37:be:7a:0d:98:aa:e5:77:57:ab:12:
         eb:6d:e2:a9:0f:4d:ad:89:b1:43:13:1e:cd:ec:a1:69:0d:67:
         03:ab:4d:27:79:82:a4:cf:cd:e2:85:b1:11:64:fd:a6:b4:b3:
         2c:54:3d:9f:2a:a7:1a:12:b9:ae:82:21:a3:59:fa:a7:b6:04:
         cd:a4:46:e7:ae:c5:7e:34:6b:47:4b:c5:dc:5a:56:a6:fe:91:
         49:f1:92:04:f3:cb:8a:2a:5d:04:74:bd:97:eb:58:99:77:50:
         71:ee:5b:56:a2:ed:5a:a2:79:6c:f1:a6:d5:38:b7:1d:d8:22:
         f2:60:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:33:28 2026 by rpki-client