Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7d032c21-d499-35be-b529-8dddf86b71b4.roa
File:                     7d032c21-d499-35be-b529-8dddf86b71b4.roa (raw, json)
Hash identifier:          XE3s1blb7199S+cXFPnmxVabpame6lfMBdmBbQ4m4v4=
Subject key identifier:   F6:98:4C:CF:87:43:DB:47:D1:C5:6E:FF:02:C4:59:87:50:14:E8:9D
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4D5FC71848EF3D2165D35180
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7d032c21-d499-35be-b529-8dddf86b71b4.roa
Signing time:             Sat 26 Sep 2026 10:45:40 +0000
ROA not before:           Sat 26 Sep 2026 10:45:40 +0000
ROA not after:            Fri 25 Dec 2026 11:45:40 +0000
asID:                     2914
IP address blocks:        170.130.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4d:5f:c7:18:48:ef:3d:21:65:d3:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 26 10:45:40 2026 GMT
            Not After : Dec 25 11:45:40 2026 GMT
        Subject: CN=c8f5c007-836f-4bf9-9db4-9753867fc652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4d:cb:3f:b0:2e:8c:c4:33:7a:9d:a0:d0:4b:
                    c3:35:2a:b4:b0:d4:22:7b:9a:12:86:00:c0:04:18:
                    30:98:c1:e0:78:28:c3:eb:70:9c:2c:80:64:bc:80:
                    df:c1:e0:85:1a:51:a6:87:7a:9d:6c:27:19:cc:d7:
                    44:6d:a4:ea:ab:17:85:5c:80:de:42:42:ef:31:88:
                    d8:81:3a:35:e6:e6:72:2f:c5:af:a5:50:d2:9b:d6:
                    08:cb:b0:d0:37:56:f0:d3:fc:90:20:20:ae:e5:c6:
                    a6:21:cd:8a:28:1c:05:39:a7:0a:4b:70:10:3a:fd:
                    37:b5:fe:a1:46:5a:73:f0:fa:75:14:01:2b:b5:d1:
                    7a:cf:e3:f5:bb:fb:c9:3f:b4:65:45:00:5c:7b:22:
                    0c:95:c4:96:70:1b:13:e1:ee:dd:7a:19:ad:4e:70:
                    61:44:0c:7a:cf:5a:15:19:3e:55:3e:ca:41:88:0a:
                    27:33:1b:02:6f:e7:76:f2:9f:7b:1e:66:0a:8b:47:
                    6b:d5:d4:45:6a:65:7c:8b:34:6a:1a:89:01:a3:cc:
                    50:96:44:6c:44:ab:85:0a:42:dc:52:64:67:af:e0:
                    20:82:05:ae:70:15:66:c2:25:5d:4a:eb:5b:43:dd:
                    11:cc:65:eb:60:ef:d5:08:d8:45:5b:00:c5:5a:52:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:98:4C:CF:87:43:DB:47:D1:C5:6E:FF:02:C4:59:87:50:14:E8:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7d032c21-d499-35be-b529-8dddf86b71b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:48:f8:74:14:be:4f:24:d0:47:16:28:1a:08:60:db:f3:95:
         11:10:36:b1:c9:9b:e8:03:5e:30:e9:7f:5c:2d:71:b1:e3:4a:
         60:d2:a0:af:1e:4d:70:4e:1a:be:d6:91:ed:19:c2:e4:4c:37:
         1a:f5:05:46:e4:0a:3b:0d:a2:7f:94:cb:95:04:04:55:53:10:
         16:65:4a:3f:59:25:16:c7:8e:d6:a2:20:97:a9:62:a0:85:b0:
         a8:cf:d1:08:35:f9:15:a9:e8:31:fb:62:0a:79:59:52:15:23:
         8d:2e:01:82:e5:4f:07:fb:85:3d:b0:67:e5:7b:70:88:c5:5c:
         16:cd:e0:e4:cf:0f:5a:12:b2:c0:be:0d:c7:eb:ec:69:77:f7:
         9e:af:a7:6e:7d:54:29:40:ae:19:8f:6f:60:c6:d5:7c:9b:6f:
         12:73:9d:7f:3f:9d:20:ac:18:b3:b4:83:44:c0:e6:be:15:ea:
         39:a6:7a:72:38:e1:ae:f8:01:6a:f2:23:2f:0f:28:f0:8a:19:
         bf:bf:80:e3:82:38:68:b5:47:fa:b8:59:08:a7:46:1f:89:97:
         cc:e8:ec:36:50:68:ec:cf:a7:e9:21:97:e0:89:e1:03:90:9f:
         92:c4:3c:cc:1c:20:ae:85:5d:74:a7:e1:bb:40:7a:0c:b7:a2:
         64:df:f5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:16:29 2026 by rpki-client