Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d101b106-245c-3770-9db3-7842b1423d8b.roa
File:                     d101b106-245c-3770-9db3-7842b1423d8b.roa (raw, json)
Hash identifier:          yfjJr7OZD5A8L0DU10On0pvrLxuhjUrjlWK5AbGaw/M=
Subject key identifier:   59:18:C8:75:43:E4:A7:BF:10:86:31:A2:AE:D7:0F:2E:E2:77:6B:38
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F4328584F49753BB263C7DDAC6503C740
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d101b106-245c-3770-9db3-7842b1423d8b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        173.195.225.0/24 maxlen: 24
                          173.195.226.0/24 maxlen: 24
                          173.195.227.0/24 maxlen: 24
                          173.195.228.0/24 maxlen: 24
                          173.195.229.0/24 maxlen: 24
                          173.195.230.0/24 maxlen: 24
                          173.195.231.0/24 maxlen: 24
                          173.195.232.0/24 maxlen: 24
                          173.195.233.0/24 maxlen: 24
                          173.195.234.0/24 maxlen: 24
                          173.195.235.0/24 maxlen: 24
                          173.195.236.0/24 maxlen: 24
                          173.195.237.0/24 maxlen: 24
                          173.195.238.0/24 maxlen: 24
                          173.195.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:3b:b2:63:c7:dd:ac:65:03:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=918c1fd7-02cc-4561-9888-bd5da10c777d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:e2:3e:c7:3e:2f:22:f2:8b:87:d7:57:2f:
                    95:ab:d7:62:25:93:a9:21:c3:af:b9:fe:9a:98:81:
                    86:38:29:5a:bf:77:38:da:a2:90:21:f3:a9:8b:16:
                    64:b2:f1:83:88:ea:f3:c5:d2:f1:da:43:21:a4:20:
                    58:2e:c5:2f:b8:33:36:f1:54:5d:e7:e2:fe:07:42:
                    bd:9d:71:ba:ee:88:99:d0:8e:c6:77:ba:8b:76:2e:
                    b9:7e:fd:0f:11:04:ba:f4:8f:22:cc:d4:71:a9:85:
                    c5:30:f9:4a:00:8c:e0:7d:5e:6e:c2:2a:ba:56:50:
                    38:09:df:ef:89:05:7b:e1:ad:5c:fa:01:2a:33:60:
                    f5:39:d8:3e:85:16:02:9a:2d:87:7d:e9:de:b6:41:
                    a3:73:77:04:57:a2:7b:fa:bd:b2:8c:ba:66:d0:46:
                    56:9f:a6:2d:cb:c2:73:18:01:3f:18:32:60:6b:f1:
                    68:e1:15:e8:a9:d9:73:71:29:88:03:1e:fb:32:6b:
                    9d:0f:ad:f7:c7:1e:25:55:e5:22:da:bb:70:ba:4f:
                    9a:4f:e8:2b:f1:f2:44:3c:b3:60:b3:5c:f9:d7:57:
                    b6:d2:39:62:21:56:f4:b6:16:f0:f5:7c:bc:88:e6:
                    eb:6f:9b:e8:0d:36:79:2c:4c:e1:1b:56:3c:cf:27:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:18:C8:75:43:E4:A7:BF:10:86:31:A2:AE:D7:0F:2E:E2:77:6B:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d101b106-245c-3770-9db3-7842b1423d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.225.0-173.195.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:70:55:bd:22:f4:af:da:2b:f6:2c:33:84:04:4a:6c:17:4a:
         be:9c:32:d3:b8:cb:87:c1:49:c4:c8:bb:e7:cb:66:81:09:a1:
         b9:6e:5f:af:44:ad:e2:e4:e1:c5:ab:04:28:86:3b:e6:bb:1f:
         37:cd:f4:ae:84:ee:b5:24:09:44:d1:b0:cd:56:14:5c:76:06:
         0e:a7:3d:9e:5d:9d:be:2d:de:94:55:0e:f9:ab:29:23:35:9a:
         24:9f:77:6c:53:bb:bd:94:e2:ab:6d:74:8e:fb:48:f9:b3:14:
         2c:e6:b9:86:bf:8f:25:c0:20:dc:0d:07:bc:ca:a3:de:b5:be:
         13:0d:b2:55:89:e4:5d:80:dc:4a:e7:8f:8e:88:13:84:a6:08:
         a8:45:c0:2f:fa:84:b9:be:36:86:83:0f:05:e9:3c:6e:26:03:
         2c:9d:be:7d:14:e6:e0:56:9b:61:2f:84:b5:4c:02:35:cc:a2:
         b4:11:e2:94:79:84:f8:03:7d:db:f8:45:9f:a8:0c:a7:f3:b9:
         3a:5a:40:8c:c2:30:87:f6:e7:3d:11:49:2d:c5:77:30:53:9e:
         b6:05:0e:bd:35:8d:39:23:37:ac:82:fd:ec:ed:2f:ce:11:7a:
         45:81:8a:94:53:e6:57:fe:df:81:c0:99:65:f3:ef:a6:5c:44:
         ff:aa:e6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:30:46 2026 by rpki-client