Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2afd3532-2aab-3d1c-b012-043df572967d.roa
File:                     2afd3532-2aab-3d1c-b012-043df572967d.roa (raw, json)
Hash identifier:          pf1Ph+mcaE/y9rRo5ZSDxGo09j71oet3buIwCLsD1Ow=
Subject key identifier:   96:44:80:69:39:6C:EF:AA:F3:7F:B0:CB:73:E1:71:F5:E5:9F:25:95
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F0724214836C400935223E480
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2afd3532-2aab-3d1c-b012-043df572967d.roa
Signing time:             Tue 01 Sep 2026 06:58:54 +0000
ROA not before:           Tue 01 Sep 2026 06:58:54 +0000
ROA not after:            Mon 30 Nov 2026 07:58:54 +0000
asID:                     219182
IP address blocks:        170.130.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:24:21:48:36:c4:00:93:52:23:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  1 06:58:54 2026 GMT
            Not After : Nov 30 07:58:54 2026 GMT
        Subject: CN=a7967f68-b13c-4f2d-b609-799f9806c003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:b9:44:0e:4c:19:ae:b3:75:6f:f3:35:2a:
                    92:b8:b7:f5:30:49:d2:3d:60:f0:c6:46:3b:bc:64:
                    82:c6:e6:00:ac:e2:f8:f2:32:3a:98:63:10:fb:60:
                    05:11:cf:28:c5:1c:d9:29:de:e9:cb:cc:e4:7c:0e:
                    ec:ad:0b:f7:70:c2:0d:1b:cb:72:34:41:6c:32:47:
                    b8:21:76:f5:b5:21:4d:d5:2b:ce:cf:96:6a:5d:5d:
                    2b:9d:79:93:49:f0:d6:77:af:d9:8d:e4:49:6a:1b:
                    57:49:3d:2c:5b:ee:35:f8:97:25:a1:56:1a:93:b6:
                    b9:1f:b6:92:f4:66:4a:3b:4d:0c:8e:14:01:c4:2b:
                    74:25:7e:ef:98:26:85:1e:b5:c7:39:83:c7:7b:2a:
                    63:bb:e8:09:7b:fb:b3:c3:3b:ae:ab:b9:8a:b1:9f:
                    cc:9c:e2:fb:5d:8e:50:54:72:0c:17:45:3b:90:fc:
                    13:c2:92:bf:7c:a8:13:f6:cb:b4:86:9e:38:be:64:
                    fb:51:58:e0:91:be:04:d8:38:b1:92:f0:15:96:61:
                    41:00:1a:0f:3b:18:6d:0c:17:39:ec:32:95:50:e0:
                    b4:2e:5b:7e:1b:8f:ea:d8:15:1b:23:f4:5e:67:b4:
                    2b:74:c0:9e:57:c3:d1:d9:10:32:50:99:36:cb:b3:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:44:80:69:39:6C:EF:AA:F3:7F:B0:CB:73:E1:71:F5:E5:9F:25:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2afd3532-2aab-3d1c-b012-043df572967d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:37:d8:4b:10:9e:47:a3:b1:39:ee:67:75:0e:41:ea:08:12:
         64:d8:32:21:e1:30:6f:5a:26:01:b8:8e:fe:0b:59:1f:fd:6b:
         84:b0:de:42:e3:19:8f:5d:0e:44:68:8c:c6:8f:a8:a0:2b:e6:
         9e:03:40:f9:ac:05:0d:0f:e3:79:ec:09:41:64:f4:8c:e2:22:
         a9:4f:6b:e1:3e:f4:a6:7f:77:c8:ed:35:2d:f3:db:01:c3:f7:
         44:75:c1:04:56:0e:01:3d:56:fa:32:37:1a:4d:bb:3c:90:28:
         42:05:eb:af:fd:94:b0:67:b3:88:12:7b:44:72:d4:56:09:37:
         33:09:04:38:42:0b:bd:05:9e:bb:34:ac:bb:23:71:7b:4f:55:
         af:9a:d3:55:c2:bc:1e:22:3d:46:83:76:43:ed:23:58:17:66:
         ba:5b:a3:d3:5e:d3:e6:2b:bd:5f:02:d5:74:71:ec:de:b0:0f:
         d1:f5:76:9c:aa:50:ec:eb:e6:5a:d7:8d:45:4e:bd:39:cb:c3:
         b4:07:b6:f7:1f:e3:64:c3:47:bb:65:9f:7b:c7:08:7f:1f:7e:
         a0:ff:91:56:79:c4:9f:16:f7:7a:9a:d0:51:af:5d:b9:bf:84:
         90:12:87:47:8c:50:64:cd:17:32:46:26:aa:31:5b:43:20:8e:
         88:a5:fe:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:04:41 2026 by rpki-client