Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40f9723f-b110-4f5d-b985-c94f8c56c0da/0621c201-7039-3eee-b8c0-4eeb3df3a85e.roa
File:                     0621c201-7039-3eee-b8c0-4eeb3df3a85e.roa (raw, json)
Hash identifier:          2ut1ZAOtXepOEWRc4hnS72Fknoixc4Gn5rg/WWXWpZo=
Subject key identifier:   DE:AA:77:EB:5F:74:D0:12:4D:19:85:F7:3C:FD:32:C0:75:3B:96:CC
Certificate issuer:       /CN=40f9723f-b110-4f5d-b985-c94f8c56c0da
Certificate serial:       010D0C9F4328584F89A8475832B76B83687625C0
Authority key identifier: 09:A6:9E:B3:DD:A4:17:14:C4:4D:6A:D5:62:D7:D8:5A:F2:8B:E9:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40f9723f-b110-4f5d-b985-c94f8c56c0da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40f9723f-b110-4f5d-b985-c94f8c56c0da/0621c201-7039-3eee-b8c0-4eeb3df3a85e.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     51722
IP address blocks:        155.103.70.0/24 maxlen: 24
                          155.103.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40f9723f-b110-4f5d-b985-c94f8c56c0da/40f9723f-b110-4f5d-b985-c94f8c56c0da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40f9723f-b110-4f5d-b985-c94f8c56c0da/40f9723f-b110-4f5d-b985-c94f8c56c0da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40f9723f-b110-4f5d-b985-c94f8c56c0da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:47:58:32:b7:6b:83:68:76:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f9723f-b110-4f5d-b985-c94f8c56c0da
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=e513f7bd-a66c-482d-bfd3-b99597348506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:18:87:ee:79:28:93:67:e5:d1:f7:7f:09:
                    bb:e6:a4:06:e0:83:12:61:71:0f:3b:d3:e1:b2:3b:
                    56:59:57:65:d9:1b:2f:17:bf:7a:ab:e9:0c:be:c1:
                    90:a2:98:c2:be:c1:d2:6a:33:ee:24:99:32:4d:23:
                    a6:75:7c:3a:7f:33:31:cd:68:9f:ba:3e:3a:6d:e7:
                    a1:10:26:15:08:5a:3b:24:83:74:2a:fc:b8:75:7e:
                    f6:d4:ee:89:08:02:57:c3:62:80:aa:8a:9d:18:27:
                    d3:c8:a4:27:83:ab:c3:96:6d:a2:5c:68:f4:84:3c:
                    d6:12:5e:dd:25:cb:3c:2f:7c:68:ab:f3:d7:a9:92:
                    6c:6c:73:b1:9c:b3:05:ca:a9:15:ba:02:0a:90:04:
                    17:ae:07:b4:3e:03:80:b3:55:b7:cb:32:e9:fc:c6:
                    5f:a6:f0:a0:01:be:94:16:fe:59:2b:63:82:74:26:
                    3e:c5:70:2f:e0:5d:b9:56:78:a5:4d:8c:3e:85:a6:
                    71:ea:64:72:76:3c:ff:75:c7:fc:54:ed:ae:d8:bb:
                    60:5b:de:07:ed:55:c8:30:22:de:b0:b4:1f:08:bd:
                    ad:1f:27:19:e2:ba:6c:0a:60:21:f8:87:89:40:87:
                    d1:01:a1:7b:ee:72:cd:e3:13:25:bd:db:f2:60:fa:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AA:77:EB:5F:74:D0:12:4D:19:85:F7:3C:FD:32:C0:75:3B:96:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40f9723f-b110-4f5d-b985-c94f8c56c0da/0621c201-7039-3eee-b8c0-4eeb3df3a85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40f9723f-b110-4f5d-b985-c94f8c56c0da/40f9723f-b110-4f5d-b985-c94f8c56c0da.crl

            X509v3 Authority Key Identifier:
                keyid:09:A6:9E:B3:DD:A4:17:14:C4:4D:6A:D5:62:D7:D8:5A:F2:8B:E9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40f9723f-b110-4f5d-b985-c94f8c56c0da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:04:16:17:95:63:8d:65:a2:f2:97:41:8f:58:8d:40:e1:f8:
         b7:06:c1:ba:41:ed:83:ec:eb:95:ae:fd:03:aa:4c:11:1e:98:
         6b:94:d8:5c:e4:42:1a:b1:a6:fe:15:1c:0a:d9:52:02:70:8f:
         14:2e:3f:d5:6d:08:31:47:d4:b0:80:66:7f:27:7c:c5:9a:b8:
         89:44:76:bc:d2:ac:d6:d2:91:c1:a9:66:41:55:cb:da:f8:91:
         27:18:9e:4f:5a:af:18:4b:a0:c5:39:2f:cd:fb:c2:77:69:e1:
         b6:70:c4:54:80:41:a6:69:d2:5c:fe:6c:38:95:d2:bc:52:37:
         b8:43:29:6e:ec:e7:35:57:3f:07:55:0f:bf:38:aa:7d:61:44:
         03:a5:68:05:55:a1:9d:4b:d5:27:49:50:47:cc:b0:bb:6b:f0:
         11:e4:23:b0:5d:4d:12:e1:2a:e1:85:ed:8d:d4:a5:71:88:d4:
         72:52:e6:00:c5:b2:70:25:0c:92:a6:36:5f:ea:1b:91:46:9c:
         ed:13:e8:c1:de:ef:e7:9d:bc:f5:28:c7:5c:60:39:50:3e:ea:
         6d:d3:4c:86:89:7b:73:6b:8c:30:1d:52:79:ef:3c:27:96:fc:
         d9:3d:eb:63:bb:88:df:be:78:a9:7b:12:b2:54:50:d1:4c:2d:
         28:f5:30:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 12:00:40 2026 by rpki-client