Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/650bd1fe-bb28-3c2c-b0d9-d92b2e3b6280.roa
File:                     650bd1fe-bb28-3c2c-b0d9-d92b2e3b6280.roa (raw, json)
Hash identifier:          RCYOZcgjlbHrUyuX1/bp/nJcHsoRziYxAmqcOraAUMY=
Subject key identifier:   77:46:44:E3:CD:13:AA:A3:FC:AD:C2:AF:44:78:13:C9:88:48:21:97
Certificate issuer:       /CN=ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0
Certificate serial:       010D0C9F4328584F5767FA16E3FCBB121A9CF2AC
Authority key identifier: 52:7A:49:74:BA:82:82:68:ED:97:35:DC:BE:AB:72:D6:94:92:F6:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/650bd1fe-bb28-3c2c-b0d9-d92b2e3b6280.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        170.212.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:67:fa:16:e3:fc:bb:12:1a:9c:f2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=b2fde98c-9e97-4138-b8fb-3e29f6565116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:05:45:c3:99:d8:64:3a:0c:c4:7a:1d:e8:bd:
                    1d:ef:41:5d:46:d1:29:01:c7:0d:49:41:3c:30:f3:
                    fd:f2:8b:e3:1f:7f:a1:01:cd:5d:96:34:cf:b5:d3:
                    29:0d:22:1c:4d:4f:94:52:73:6b:dc:5d:5d:fb:69:
                    4e:cf:7b:7e:dd:87:4b:f5:82:b0:fa:e0:c8:34:1d:
                    ef:39:29:b5:1f:c4:fb:18:a4:3c:05:e6:a2:cb:6f:
                    cb:3b:ed:38:33:dc:9b:13:f9:0a:97:07:e5:fa:b2:
                    32:3e:60:b3:44:83:0f:37:e0:49:e1:5c:c0:21:de:
                    80:13:47:fd:c9:eb:bf:81:6d:52:f3:fa:7d:dc:e1:
                    e5:33:dd:34:ee:d8:75:4e:92:9f:19:99:32:32:1b:
                    e5:74:b5:13:f4:f9:b3:31:98:4c:6d:4d:5b:f2:34:
                    7f:7a:2a:cd:9a:5d:01:9f:39:7a:a3:b8:07:fb:78:
                    64:85:32:92:4a:a6:16:96:ed:8b:a1:8f:31:d8:d9:
                    c7:53:19:3d:e4:6d:24:72:b9:fa:b5:a9:c5:c2:1d:
                    05:0a:47:67:cb:40:97:f2:1b:79:b7:fa:d3:73:9c:
                    63:42:65:3f:e4:eb:3b:58:a0:f7:e5:f8:a6:45:d3:
                    b7:2d:29:bd:b8:6f:77:ac:15:18:3e:76:1e:d9:f6:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:46:44:E3:CD:13:AA:A3:FC:AD:C2:AF:44:78:13:C9:88:48:21:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/650bd1fe-bb28-3c2c-b0d9-d92b2e3b6280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.crl

            X509v3 Authority Key Identifier:
                keyid:52:7A:49:74:BA:82:82:68:ED:97:35:DC:BE:AB:72:D6:94:92:F6:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea4a52d6-46a4-42b5-b9ea-d44f5ba68df0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f4:de:76:3a:8e:62:a1:0c:87:0e:60:86:55:1d:09:d1:45:
         54:ef:fb:83:a3:ae:00:d5:b6:da:64:ff:a1:8d:ea:cc:a4:93:
         97:d1:af:3c:49:ad:b3:9b:7c:1b:f6:58:da:33:0e:63:24:b5:
         96:a8:0b:6e:3f:68:75:33:ed:d3:61:0a:61:5d:d7:c1:f7:57:
         ad:a9:52:b0:72:cf:78:fa:86:24:1d:78:80:30:89:d4:92:c2:
         9a:43:4f:2d:ed:e3:ec:d7:f0:fe:90:aa:bb:4e:3a:4d:ba:41:
         f6:8e:ac:b9:56:18:28:50:00:5e:14:1b:6a:d1:3c:a8:28:82:
         02:2e:89:98:ae:2a:a3:d2:13:73:9b:06:9a:f4:4a:91:ef:0a:
         a5:32:3b:c1:bb:56:16:69:b5:50:06:ec:39:39:31:fa:b4:b0:
         cb:30:03:23:35:44:9a:c8:4c:57:cf:fe:20:7a:39:19:d5:9f:
         98:1a:1a:96:eb:6a:f8:21:8a:f7:2a:d2:2b:35:66:04:eb:d9:
         f7:ca:9e:d8:d0:29:a3:d4:03:12:8a:60:a3:30:a4:f2:be:72:
         94:bf:f8:e9:29:fe:dc:59:20:42:31:75:7d:a9:bf:43:83:e6:
         78:ec:dd:7c:ea:1d:89:fc:01:a4:4d:13:56:9c:03:17:3e:98:
         a1:18:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:17:46 2026 by rpki-client