Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e7dde7ff-c6bc-33be-ad66-4c77c91a4eb5.roa
File:                     e7dde7ff-c6bc-33be-ad66-4c77c91a4eb5.roa (raw, json)
Hash identifier:          ZTj9PYYu0GpqshpFTBiWgRc0rrXLmTMpPczMS8mEiWk=
Subject key identifier:   19:41:6A:D0:4F:BA:B0:D4:7B:A6:A6:90:A1:3F:62:FA:A4:9C:FE:B3
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584F51D2C6916453730C1C9FD280
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e7dde7ff-c6bc-33be-ad66-4c77c91a4eb5.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     18934
IP address blocks:        162.208.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:c6:91:64:53:73:0c:1c:9f:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=efe14d3e-6cda-43b7-b57b-6733886f33f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:56:27:5f:76:3d:1c:e5:77:d3:dc:f5:46:
                    f2:e9:00:10:3e:b4:db:24:aa:98:9f:e0:6f:82:39:
                    b4:1d:db:07:1e:02:1b:6d:e4:5c:9f:3d:1e:64:d3:
                    cf:5f:96:07:af:3e:27:5c:36:f6:2e:aa:d9:96:c8:
                    02:cf:25:98:5f:8f:57:d7:44:41:61:0c:13:5c:47:
                    d6:d1:d4:d6:63:73:49:e1:46:41:e4:28:39:5b:9c:
                    a3:bf:cd:80:e5:f8:c3:48:6c:d9:18:df:3e:53:b3:
                    b6:7b:69:a7:b2:88:b9:af:f6:65:32:a0:61:8d:34:
                    7b:44:45:62:fb:0c:0f:ff:4c:6b:8e:a4:eb:e6:3c:
                    6b:8d:5f:ff:ae:6a:1e:cc:aa:49:c9:b7:48:ca:dc:
                    d3:52:d9:0b:60:0c:1d:35:c0:01:ce:25:16:41:f8:
                    d0:10:1c:ed:eb:5a:21:42:ef:4b:8e:31:2e:3e:6c:
                    98:2d:6c:73:aa:e6:b1:5d:ea:79:71:69:a6:a2:9a:
                    7f:34:33:6f:f8:b7:8a:30:d8:2b:14:38:89:bf:35:
                    1b:48:53:8c:c4:05:cb:a9:13:64:83:82:d6:b8:8e:
                    95:67:70:8b:1e:5e:f9:24:6b:f3:64:fa:c7:dc:61:
                    d5:72:0a:f9:f6:60:43:ed:cc:4e:6b:31:c0:54:38:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:41:6A:D0:4F:BA:B0:D4:7B:A6:A6:90:A1:3F:62:FA:A4:9C:FE:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e7dde7ff-c6bc-33be-ad66-4c77c91a4eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:14:49:3a:ff:4e:09:58:a1:8d:11:c1:12:38:1b:8b:3b:f7:
         2b:7a:b7:50:62:cd:63:bb:d4:31:48:2a:ec:21:cf:79:b4:ea:
         7a:a3:2a:7f:d6:cf:b6:51:7e:63:df:76:fb:2d:9e:e1:5b:97:
         54:49:0c:2b:4a:10:c4:0b:e6:d5:8f:f6:1e:ff:3a:bc:9d:1c:
         14:19:4d:8f:e1:32:6c:76:9c:26:d5:10:90:d7:8e:d1:98:35:
         3e:14:04:06:5d:86:10:c7:12:62:ce:10:1a:20:37:87:eb:93:
         36:c7:95:f4:61:6c:f3:e1:af:dc:6c:eb:be:05:e9:57:74:1f:
         bc:18:39:86:de:a1:5a:6a:b5:d2:83:21:bf:48:35:3c:e6:94:
         76:02:a1:52:b4:5f:b2:1b:89:68:12:13:ca:7a:95:1e:0a:db:
         2a:56:aa:5b:3a:20:2d:1a:9c:f4:ec:74:4c:f6:e3:2f:9c:e0:
         5c:b5:65:75:05:c3:39:36:c3:e6:52:c8:a2:40:78:c6:02:bd:
         0d:8e:66:a1:c9:b8:91:57:a0:02:13:a4:5b:77:f9:0c:2d:e6:
         9e:57:32:7a:6c:1a:59:31:d5:72:64:f6:1b:14:9e:ce:8f:74:
         53:ca:5b:1f:36:ad:fe:f1:a5:35:71:e4:a1:d1:2f:f4:de:b7:
         6f:ad:b2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:48:49 2026 by rpki-client