Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/dc665ef5-7866-3242-a76c-103dcc34ac7c.roa
File:                     dc665ef5-7866-3242-a76c-103dcc34ac7c.roa (raw, json)
Hash identifier:          adXzr/IBygVNelJts2UpMvcRRotVSawPgPoONPUeqT0=
Subject key identifier:   D9:18:61:B3:3B:FF:F3:8E:E1:3E:EA:7B:BC:C9:FB:D2:5D:CB:9D:6B
Certificate issuer:       /CN=55a4d94f-b4d5-447a-9417-908a0f5a404e
Certificate serial:       010D0C9F4328584EF2E7701948F028390FEAA880
Authority key identifier: B5:F8:B7:36:93:7F:76:9E:25:D8:97:09:C9:60:7A:A6:D9:0E:3C:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/dc665ef5-7866-3242-a76c-103dcc34ac7c.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     394542
IP address blocks:        170.117.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:70:19:48:f0:28:39:0f:ea:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a4d94f-b4d5-447a-9417-908a0f5a404e
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=248dc31f-c56e-468a-9d90-35196364dcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:f4:61:23:e4:24:d8:bf:12:50:9c:2b:3e:
                    72:10:bc:49:cd:a7:d2:1b:87:29:bb:ab:5e:57:53:
                    47:5a:6f:20:b4:40:95:57:93:f7:b4:45:44:e3:e3:
                    df:96:6e:03:b0:90:94:f9:e1:b8:1e:3e:05:cd:2d:
                    2a:3a:d9:17:98:1e:1e:af:2d:40:35:9f:6f:f5:7f:
                    ec:48:f1:28:f3:b9:5d:f4:f7:43:9c:bc:23:61:83:
                    60:dc:66:2b:f5:0e:f2:4d:cf:dc:53:f1:f7:8d:cc:
                    be:d8:5c:b3:ee:7e:1b:23:41:0a:72:f2:39:f2:c0:
                    81:72:5a:f6:25:23:e2:6c:1a:2d:2a:55:70:ee:4d:
                    0f:09:e6:da:88:8d:88:1a:10:c0:98:ee:60:15:47:
                    27:08:6a:17:fd:27:9a:f8:a9:c1:ea:23:93:22:33:
                    9a:4f:80:a8:20:c3:a5:ce:27:c9:33:23:48:bc:9b:
                    9a:99:59:f8:31:b0:ee:af:ef:2c:fd:1a:bd:32:17:
                    ad:88:a7:cd:97:b1:d4:26:b6:f4:6e:6f:8e:c0:25:
                    47:90:62:d1:5d:c6:28:8e:97:af:20:dd:c4:c9:9b:
                    02:64:8a:d7:86:4a:38:72:19:f7:10:0d:3a:c3:08:
                    5b:d1:01:4f:d0:f5:ea:93:80:99:9c:88:4f:17:4d:
                    42:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:18:61:B3:3B:FF:F3:8E:E1:3E:EA:7B:BC:C9:FB:D2:5D:CB:9D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/dc665ef5-7866-3242-a76c-103dcc34ac7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F8:B7:36:93:7F:76:9E:25:D8:97:09:C9:60:7A:A6:D9:0E:3C:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.117.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f5:ce:05:77:aa:b7:79:58:d8:b4:d4:83:e3:b6:60:a6:a7:
         ed:c0:80:d0:90:78:c5:1b:95:c3:7e:39:0b:06:ff:70:9e:3a:
         34:48:a4:43:c6:99:c7:44:c6:c7:19:ed:c3:0d:be:27:ca:c7:
         cf:01:45:13:bb:bc:86:80:35:98:d8:e0:95:3a:35:c3:f7:0d:
         b5:df:a4:18:e5:86:dd:d3:7f:d2:8d:cb:1e:a1:3b:d9:77:02:
         9c:f8:2b:17:46:4b:63:c4:7f:6e:f2:95:29:3e:eb:e7:7d:ef:
         5d:74:6a:c7:c4:15:92:08:a5:48:af:51:d1:c2:77:d5:fa:52:
         6b:a3:f1:0f:c0:b9:42:bc:10:14:cc:5a:aa:8a:21:5d:38:1a:
         a2:7e:9f:1e:f0:28:0a:80:ad:a6:71:43:41:79:32:19:fc:b7:
         63:c1:aa:23:cb:6f:7a:d6:b9:99:96:ea:ca:1b:f1:e9:a1:95:
         bf:6e:76:23:fd:68:6a:99:5b:6e:a3:7a:f8:9b:7c:a1:46:2d:
         f2:10:fa:2d:14:cc:38:40:87:f5:e4:dc:3e:62:67:9b:60:ad:
         60:98:e9:31:49:63:b0:c0:f2:6b:17:ee:27:5e:41:47:2a:cd:
         73:01:cc:66:35:ff:34:4d:fd:5b:15:aa:09:7e:dc:0e:dd:39:
         37:7d:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 11:30:31 2026 by rpki-client