Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7cff44e6-d0f1-3c26-9014-26f5bb427316.roa
File:                     7cff44e6-d0f1-3c26-9014-26f5bb427316.roa (raw, json)
Hash identifier:          Gu0yaI3xweYt863KkjQxx+4y1lUo/6o8qEEZWkcsoFw=
Subject key identifier:   AA:D7:F1:7E:50:95:DA:44:75:D0:26:FB:5F:69:82:A3:C3:6C:6C:A6
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F6F22CCB231851E9E8DEB8AA0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7cff44e6-d0f1-3c26-9014-26f5bb427316.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     2914
IP address blocks:        173.44.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:cc:b2:31:85:1e:9e:8d:eb:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=c89919d0-4709-42a4-9324-71344f5fe04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:52:98:c2:8e:62:18:eb:8c:b8:cb:4a:27:
                    fb:69:10:e9:16:ed:1f:9e:55:3c:84:25:04:67:93:
                    61:a1:07:4f:5c:40:8a:e5:38:b3:f8:41:9a:78:61:
                    67:7b:cc:93:91:40:84:d9:f5:e5:3c:aa:0b:8d:81:
                    f3:7d:b3:99:44:2f:20:59:ab:f0:3e:fe:1e:ae:f4:
                    60:99:bf:0a:ff:87:5f:d3:f9:7e:ed:25:24:11:12:
                    17:0e:25:16:6d:59:7c:79:f9:04:e8:cc:ae:60:75:
                    66:99:dd:ff:7f:d1:28:76:0f:6a:e4:ef:f4:5d:c0:
                    38:9a:86:98:5e:09:6c:79:27:02:6b:93:95:7e:2c:
                    04:86:32:8a:5a:f0:00:85:4e:6d:70:bf:6d:3d:b9:
                    49:03:4e:cf:c2:a0:4f:62:c3:23:d4:45:68:b1:fa:
                    98:8a:62:04:26:fb:46:48:de:5d:28:81:d6:b2:8a:
                    09:83:07:5a:79:a0:d4:95:a4:58:9f:6a:84:32:62:
                    cf:80:ee:8f:eb:f1:e0:02:8b:de:67:c5:0d:db:45:
                    5c:29:5b:aa:16:87:ba:34:07:05:d6:84:89:37:22:
                    a7:23:ca:83:8e:e8:1c:3e:32:89:43:a6:f3:8e:98:
                    a9:c7:6d:77:4d:53:6e:da:2e:e5:7a:6b:63:db:1a:
                    82:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D7:F1:7E:50:95:DA:44:75:D0:26:FB:5F:69:82:A3:C3:6C:6C:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7cff44e6-d0f1-3c26-9014-26f5bb427316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:34:c3:87:e6:27:ef:11:ae:4c:e0:99:af:69:92:f0:cc:a2:
         57:fd:5c:9d:7c:a4:f3:4e:66:d4:d1:d9:a4:f1:c6:41:1c:22:
         51:d2:97:0f:f4:80:85:ac:9e:1e:53:a9:8a:b4:01:24:c1:9d:
         a7:55:8d:ad:98:24:76:ac:17:38:10:2b:1c:52:fd:52:b3:52:
         2c:6b:de:ed:a5:fb:3d:cf:e5:42:99:0f:23:6b:9e:b0:63:86:
         5c:61:c0:c1:31:de:2e:0e:a1:26:75:88:75:1e:dd:d2:09:ab:
         3b:d4:d1:c7:fb:fa:46:a6:61:1f:cf:3e:e5:b5:bc:f6:54:33:
         78:43:39:3d:b4:05:1f:62:55:64:bf:5a:e3:6d:29:b7:66:7c:
         35:18:f5:84:d2:2e:ff:41:88:88:f0:7c:85:57:12:cb:9b:69:
         37:05:8a:d8:bf:e4:04:ef:03:43:08:a0:0d:d2:cc:63:46:a8:
         2a:5e:cc:0d:92:24:f6:f7:b1:f5:86:28:e1:7a:0f:01:5f:45:
         9a:ae:b4:b6:3f:0b:54:5a:3c:69:7b:a4:5d:2f:0e:4c:a2:a9:
         78:1b:26:91:02:2c:1f:22:43:ed:07:e0:2e:f5:80:c4:24:c8:
         2e:9f:9f:d0:2a:d7:7e:83:4d:11:c5:1c:b5:e9:fd:cb:7b:ba:
         3a:97:be:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:22:41 2026 by rpki-client