Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/9392be86-8bfa-344f-881f-16f7ca725ab3.roa
File:                     9392be86-8bfa-344f-881f-16f7ca725ab3.roa (raw, json)
Hash identifier:          kgFtvJsS8wRMQ2U9XDGwQ+gAm6226omLzQwnO7FxklQ=
Subject key identifier:   FC:FF:D3:A2:61:82:C1:14:C8:B7:EC:E0:53:84:CE:DF:C4:F5:F0:74
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584F5B5489DA0477BBFB2A532280
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/9392be86-8bfa-344f-881f-16f7ca725ab3.roa
Signing time:             Thu 01 Oct 2026 10:44:21 +0000
ROA not before:           Thu 01 Oct 2026 10:44:21 +0000
ROA not after:            Wed 30 Dec 2026 11:44:21 +0000
asID:                     11611
IP address blocks:        173.205.28.0/22 maxlen: 24
                          173.205.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:54:89:da:04:77:bb:fb:2a:53:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Oct  1 10:44:21 2026 GMT
            Not After : Dec 30 11:44:21 2026 GMT
        Subject: CN=4e22ef74-f18f-4424-9290-054df9211baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:81:88:ab:91:e6:1c:bc:b1:0e:3a:27:00:2c:
                    bf:07:2d:2e:14:60:b4:9e:29:98:c9:c2:0e:41:25:
                    a7:b5:6a:ad:b6:2e:6e:7a:b4:dc:67:c5:7a:9d:41:
                    f9:de:f5:fe:6c:8b:58:65:92:19:f9:a0:f4:5f:7b:
                    9a:8c:b8:fa:b3:75:94:ef:44:83:a6:ed:80:1f:ff:
                    32:94:e1:92:02:59:bd:dd:3c:f1:7a:b9:6b:29:cf:
                    82:d5:ef:98:74:47:ee:cc:40:83:16:34:d2:a3:9e:
                    b0:01:33:e5:52:c6:6a:57:20:a2:e1:bf:33:04:6c:
                    db:37:75:e0:4a:67:59:f1:1a:a7:2c:36:cc:29:a2:
                    f9:65:5c:04:b8:5d:9f:78:6f:8d:6f:fe:71:a6:31:
                    57:72:71:eb:4f:b5:9b:dd:5d:e6:3e:0e:74:72:a2:
                    16:5d:e9:96:d2:ef:c6:e6:28:b4:cd:fc:b8:8e:77:
                    39:e2:e0:68:3c:e7:da:30:8b:94:33:9e:04:ea:bb:
                    d1:d9:5d:bf:c9:98:5c:0d:bf:6d:5d:90:cf:49:f4:
                    a6:dd:0a:42:19:63:13:bd:b7:21:46:28:7c:93:b9:
                    64:9b:36:07:e8:aa:97:1a:4c:5f:85:87:d8:41:2a:
                    8b:09:90:08:70:52:f5:0d:76:b1:9b:e2:28:7b:8d:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FF:D3:A2:61:82:C1:14:C8:B7:EC:E0:53:84:CE:DF:C4:F5:F0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/9392be86-8bfa-344f-881f-16f7ca725ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.205.28.0/22
                  173.205.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:0a:f8:2e:0f:82:d8:36:c2:a9:dc:38:da:c0:bb:f1:e1:9e:
         2b:fb:f2:bd:9d:e2:cd:0e:93:59:97:d0:f8:32:38:f7:06:03:
         48:43:a7:2d:e7:24:09:32:cd:0f:24:b4:16:39:9b:55:e8:b9:
         b2:4e:d4:89:7f:a0:4f:2e:08:10:ab:7d:1d:65:8b:80:80:58:
         e8:85:47:1f:dd:40:11:46:27:bf:ff:a2:48:2a:5a:d3:69:d1:
         4e:df:4b:18:19:8d:50:3a:01:98:25:88:41:9a:50:21:cb:67:
         28:6c:47:1b:9f:c2:8b:ca:5e:ee:54:46:de:a8:56:db:6f:ec:
         ec:51:ce:13:14:6a:bb:ef:54:3c:ef:10:87:26:83:de:e1:19:
         5c:42:d4:61:dc:73:5a:95:b4:3f:6f:e1:5f:df:76:4f:20:d3:
         f1:ad:10:93:6d:df:a8:ee:5e:31:bc:76:1c:3a:f9:4c:29:88:
         da:da:8d:24:44:89:55:5c:25:39:ee:08:d0:78:14:05:b7:16:
         a3:fb:60:c3:98:28:69:c7:a5:ac:e8:fc:a5:66:99:3e:01:73:
         47:4f:13:ac:42:59:52:da:13:e2:27:20:d4:53:db:40:68:3a:
         e9:08:52:0e:d5:d7:1c:7d:8c:2b:2d:c9:44:19:87:17:29:be:
         23:6b:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:44 2026 by rpki-client