Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/2c3c2262-ff6a-3008-9b9a-f2af95e87bbc.roa
File:                     2c3c2262-ff6a-3008-9b9a-f2af95e87bbc.roa (raw, json)
Hash identifier:          +igN29PLB7857bg4tmln5NH8z84z3dTDZFNY5Q0YdGo=
Subject key identifier:   12:A2:E4:B7:4C:F6:64:16:41:39:A2:1D:50:43:3B:E3:CB:1E:46:88
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584F7088299CA06C3B701936BFBC
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/2c3c2262-ff6a-3008-9b9a-f2af95e87bbc.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     2675
IP address blocks:        205.194.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:29:9c:a0:6c:3b:70:19:36:bf:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=de4d6bed-4a47-4606-bfa5-906a30e56964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:86:a4:7c:73:1a:b6:97:eb:0d:fb:e9:39:07:
                    74:54:dd:b4:f1:0a:db:26:77:5f:25:d5:1b:36:ec:
                    97:06:f1:e8:b0:df:cc:cc:8b:99:2c:a2:8d:a3:94:
                    8d:97:16:78:e6:3f:4c:67:49:3a:d2:72:8d:2e:7a:
                    f2:d5:f2:dc:bc:b4:2d:1a:98:e3:85:37:38:44:f1:
                    86:1f:b8:cc:5d:8a:ae:0e:ba:bd:75:ba:ed:f3:fe:
                    19:57:fe:6c:3a:e7:91:69:bd:de:9f:25:57:88:e5:
                    8e:ec:31:a9:62:22:68:de:17:2c:5a:89:0a:6c:17:
                    94:2c:d0:a4:94:bb:b3:f5:31:5f:16:43:e1:04:7d:
                    05:86:aa:02:f6:6c:8f:f6:04:ca:3b:4c:7a:74:db:
                    6c:25:c5:23:01:42:29:d0:cb:4a:4c:d6:b8:bb:37:
                    a6:08:cd:8e:94:d6:d7:73:b3:c7:86:4e:ca:f3:44:
                    9c:a2:dd:bb:35:9d:ef:61:27:06:03:c8:99:54:02:
                    62:c2:3c:85:34:ea:7d:37:7b:22:f2:af:82:61:25:
                    ad:8f:6d:4f:b0:bd:f2:f3:cc:40:e7:dc:20:7e:71:
                    53:bc:09:7e:d1:e5:ba:7d:8c:41:97:4e:fe:55:d8:
                    63:64:e8:c0:bd:cb:b6:8d:84:7c:b6:2a:68:8a:fd:
                    77:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A2:E4:B7:4C:F6:64:16:41:39:A2:1D:50:43:3B:E3:CB:1E:46:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/2c3c2262-ff6a-3008-9b9a-f2af95e87bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.194.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1e:d3:86:43:1a:50:a8:30:6b:cb:61:ef:1b:2e:ee:bf:fc:
         28:9a:99:84:26:51:b8:95:4f:fd:28:ce:04:05:a1:7c:0c:ac:
         be:d2:35:36:eb:ea:fc:70:f8:ba:50:6a:5a:ff:f4:ec:3e:5a:
         7c:8f:45:66:89:06:bb:d8:a4:d6:fc:91:a6:97:4f:c3:ae:77:
         6c:cf:4e:16:58:f4:76:8c:01:09:4f:ad:83:03:5e:bc:96:30:
         29:cc:8d:b9:ca:15:09:2d:9c:1f:e2:7b:2e:36:0e:a7:dd:5d:
         ca:64:7e:6b:f1:61:4b:33:8e:a7:ca:51:7b:0a:3f:d1:95:d7:
         a9:b9:97:22:82:67:36:47:80:c1:b3:3c:76:23:45:0c:17:70:
         fd:fe:ea:40:0c:42:db:04:28:91:9c:22:57:aa:03:e6:77:78:
         ef:75:f4:56:53:e4:98:9e:38:13:56:b8:f1:26:34:61:90:76:
         80:5f:93:05:ed:6d:50:2f:bb:8c:6e:72:82:1f:bf:c1:0e:14:
         07:e0:d9:c4:a8:df:80:83:f3:2c:9a:6a:7c:cc:c1:64:30:77:
         d7:cf:79:07:68:6e:80:b7:de:86:db:51:dd:e3:ab:b8:a6:cc:
         39:36:1f:48:15:fb:b6:7a:67:59:ea:92:bf:9e:11:58:a3:0f:
         8d:21:e7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:07:32 2026 by rpki-client