Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa
File:                     4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa (raw, json)
Hash identifier:          1cewqAnf6RBwGKUU6chunqziFzOdJSJz6URhKLFvYKY=
Subject key identifier:   FC:40:BE:A4:84:6A:2E:95:67:79:2A:C7:5A:84:74:F6:06:0F:6D:0A
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F4328584F4987A1C9EA873EAC21B9AF80
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26342
IP address blocks:        170.194.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:a1:c9:ea:87:3e:ac:21:b9:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=37d913ac-4d5e-4f2e-bc93-e11a064ff2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:ca:01:0e:74:cd:5a:33:06:8e:97:88:d0:
                    27:36:53:bc:90:3e:ff:88:05:84:c4:c4:40:78:51:
                    bb:b6:44:a0:32:9d:ec:84:fa:f9:7d:5a:33:6a:14:
                    60:08:cc:88:61:cb:c4:9d:a6:16:0b:69:de:5b:5b:
                    f9:53:9b:8b:d5:93:d7:e1:12:56:bb:9f:99:d7:31:
                    16:49:e1:eb:c1:7e:4a:88:4b:1f:5d:c0:41:24:02:
                    74:b7:a5:67:46:1e:14:e7:e7:3c:4d:cf:62:f2:35:
                    d2:54:d4:88:3e:e2:99:eb:37:c7:de:a8:64:e0:b8:
                    63:d1:82:94:91:e5:42:3d:db:7d:88:14:4e:5a:36:
                    6b:c7:86:64:62:f9:aa:7d:0e:b6:45:30:30:a1:36:
                    18:09:6d:e1:2c:9c:e7:1e:4d:f7:18:2d:6f:c1:f6:
                    4f:8d:4e:25:ae:97:ae:22:12:11:61:40:c9:02:0e:
                    b3:ca:d3:ef:4e:fd:74:ba:5c:dd:67:f6:f4:15:69:
                    db:f3:a8:fc:1b:5e:1d:23:74:fa:8b:74:67:4b:64:
                    e7:13:cf:1a:a1:fa:db:c5:99:fe:73:af:74:ff:07:
                    51:27:aa:ec:65:52:a0:f5:cf:90:82:cd:75:28:77:
                    19:4c:bb:7d:7c:bb:da:c1:c7:71:e5:d8:2d:0a:b8:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:40:BE:A4:84:6A:2E:95:67:79:2A:C7:5A:84:74:F6:06:0F:6D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c9:06:d1:96:12:59:63:29:20:37:5e:f8:da:d0:a0:39:d4:
         fe:50:41:2f:7d:24:11:ca:7d:04:0e:f5:85:6c:1a:d3:dc:c4:
         40:a2:bd:18:dd:2b:e6:fd:3e:4a:06:93:70:2e:7a:87:8e:b8:
         f6:37:b9:00:65:3b:cc:6c:e5:4f:30:32:2d:b9:d4:60:22:3f:
         f8:73:fb:25:9a:d9:05:aa:1d:06:12:e5:4c:cd:17:e8:6c:7a:
         05:1f:7c:e4:d9:5a:0a:0f:5e:9f:33:69:b8:d3:d3:b7:e1:5b:
         3f:82:c1:c8:07:21:54:c6:43:fd:ea:82:46:1c:5e:fd:f6:52:
         1e:a1:8d:7f:bc:ec:9d:4a:4c:73:b9:a9:d8:0c:28:6c:6a:ca:
         7b:f7:db:ed:33:37:46:1f:bd:c8:8f:89:13:85:68:18:39:70:
         66:70:fd:84:0a:c7:70:73:e4:73:3c:dc:03:e3:a3:d3:51:0d:
         ea:2e:ca:14:5b:65:40:66:4a:69:8e:ab:66:ff:4e:a4:10:27:
         6c:67:d8:85:ad:69:0c:0b:73:dc:37:d9:e5:0f:00:bb:5e:2c:
         d3:ba:c8:76:2d:23:92:42:ca:6e:29:31:59:2e:5f:57:f0:a6:
         7f:09:24:53:74:99:66:82:80:b6:59:af:53:fd:a2:b3:19:5b:
         c8:ad:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:29:02 2026 by rpki-client