Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01/473cf4b2-e305-37d9-81a3-4b1b87587364.roa
File:                     473cf4b2-e305-37d9-81a3-4b1b87587364.roa (raw, json)
Hash identifier:          GW9PuK2nRNm+WsyqHyEGDPLyM/r3fUSG/Rmt3k6w2YY=
Subject key identifier:   FB:49:62:1D:72:B9:A0:D8:E8:A0:05:B9:DB:B4:BD:E8:7E:AF:87:77
Certificate issuer:       /CN=0a4ef796-0acb-47b9-8949-94de08469d01
Certificate serial:       010D0C9F4328584F49879FE0629D6344DEEFFE40
Authority key identifier: 43:4E:A4:D7:B9:67:22:E1:5B:43:D0:F6:8B:32:A3:44:BF:58:A9:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01/473cf4b2-e305-37d9-81a3-4b1b87587364.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13614
IP address blocks:        162.216.116.0/22 maxlen: 24
                          206.217.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01/0a4ef796-0acb-47b9-8949-94de08469d01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01/0a4ef796-0acb-47b9-8949-94de08469d01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:9f:e0:62:9d:63:44:de:ef:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4ef796-0acb-47b9-8949-94de08469d01
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=976657ab-b8a5-4123-ad9f-81ef24fe2984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:18:39:d1:9d:ed:28:70:3e:43:4d:ae:8a:
                    a5:fe:ef:50:74:fa:8e:a9:a8:4c:e9:f8:3f:1b:f3:
                    24:11:c1:f0:ab:5a:d1:2d:28:19:21:5b:8c:b0:dd:
                    98:29:14:29:37:20:38:55:ec:9a:1d:56:49:a5:2f:
                    37:32:f7:f3:99:58:a7:bf:8e:11:fd:92:11:80:8e:
                    13:d0:cc:b2:92:8a:f6:4f:de:46:d8:9d:df:c2:17:
                    f8:95:f8:dd:43:e0:48:66:eb:7a:3f:13:8f:da:dd:
                    24:a2:db:89:2f:6a:09:81:1f:bc:be:3e:9a:12:da:
                    f0:69:72:bb:6a:6e:6e:4c:e7:fc:74:87:74:36:42:
                    ab:ad:4e:2c:ae:a7:a7:ac:f1:f0:1a:8c:29:1e:1a:
                    db:89:26:bb:78:98:42:27:85:c5:bd:f4:7e:e2:01:
                    50:fa:99:38:94:2f:1c:d3:49:bc:bf:4b:0a:a7:97:
                    2e:e2:43:40:60:9d:cd:c1:3e:d4:c6:8a:6e:25:a3:
                    38:27:7e:7e:0b:66:48:27:86:56:ab:ea:42:a5:f8:
                    22:f8:4a:a1:25:95:0f:f5:a0:bd:2e:79:a3:f5:3d:
                    e1:a5:88:83:bc:ab:ac:76:ba:38:41:92:38:06:80:
                    1f:64:dd:2a:b4:45:2d:c2:c2:fd:08:a3:94:64:8e:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:49:62:1D:72:B9:A0:D8:E8:A0:05:B9:DB:B4:BD:E8:7E:AF:87:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01/473cf4b2-e305-37d9-81a3-4b1b87587364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01/0a4ef796-0acb-47b9-8949-94de08469d01.crl

            X509v3 Authority Key Identifier:
                keyid:43:4E:A4:D7:B9:67:22:E1:5B:43:D0:F6:8B:32:A3:44:BF:58:A9:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a4ef796-0acb-47b9-8949-94de08469d01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.116.0/22
                  206.217.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f6:63:59:f5:f7:c2:d5:43:cf:92:c3:36:58:32:54:37:43:
         07:43:c4:6f:d3:d0:1b:01:b8:c1:b3:d2:67:f5:a8:bd:d7:16:
         05:fc:87:00:15:af:9d:95:9d:1d:6e:ae:5f:33:ef:77:87:ce:
         5a:02:7a:d4:c3:94:45:e5:ac:2c:9d:2b:0e:6d:3c:09:7c:b5:
         bf:87:8a:f5:0c:51:15:ae:78:79:76:e7:4e:52:8f:94:ac:3b:
         c4:1d:3e:79:ab:c9:24:a0:4d:6d:70:6a:99:fc:a1:6c:1c:55:
         df:55:80:7e:e0:ca:ca:a4:4c:f4:2c:c7:ee:07:9e:e8:a6:4d:
         bf:c8:65:d7:f1:ba:df:1d:b9:c1:4d:7c:f7:81:d7:fd:ac:fa:
         9a:cb:ae:6c:d0:a8:54:32:66:51:41:7d:fb:47:4e:8d:e4:62:
         67:ab:8d:24:db:a5:92:c3:97:cf:f6:37:ef:11:af:8c:d6:9e:
         74:bb:af:74:e9:57:d4:8c:ab:95:8f:04:dc:d1:fb:57:bc:28:
         9e:cc:37:21:a1:69:1d:31:bf:55:4b:9d:25:fe:35:c4:da:1c:
         ed:c0:15:76:b6:08:a2:38:c3:fa:98:c4:7a:88:84:75:14:1c:
         e4:8f:ea:6f:19:1e:31:e9:31:9d:db:8e:ad:a9:8b:83:ec:3b:
         f7:d4:fc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:05:18 2026 by rpki-client