Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa
File:                     8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa (raw, json)
Hash identifier:          VQ19V7i9N5R6cpSQqF6N02bkkqcLeWL8uFcmtVUmiOM=
Subject key identifier:   94:35:15:FB:EE:CC:B8:A5:20:A9:91:F2:B3:54:92:23:86:00:05:E7
Certificate issuer:       /CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b
Certificate serial:       010D0C9F4328584EA788D4F95084CB83961C58C0
Authority key identifier: 35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40111
IP address blocks:        170.118.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d4:f9:50:84:cb:83:96:1c:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ff4c1539-19f2-4a97-8d54-64475afa9ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:c6:85:cf:5a:5d:89:20:76:fb:2e:b8:78:
                    65:3b:25:30:ea:c9:50:28:f1:96:ed:32:d7:28:82:
                    30:76:46:7f:b9:d7:8b:9f:92:0b:ee:b0:77:9e:a4:
                    23:2f:74:cf:f0:22:b7:ac:d6:50:dc:be:76:d6:a5:
                    f1:92:7b:1d:02:25:b5:8f:bd:3d:6b:14:d9:59:6d:
                    2c:e3:e7:85:16:f0:df:73:cb:1a:5b:84:33:86:7b:
                    13:cb:e0:2e:2e:3f:5f:ff:c2:98:c0:ae:24:4d:d3:
                    c3:dc:1c:24:6b:ad:11:3d:5d:fd:a1:b2:a5:a8:7e:
                    cc:62:06:df:4f:b3:a8:e6:97:8b:26:05:39:6e:41:
                    84:2e:60:f9:61:67:f7:52:eb:5e:7c:b0:57:f3:33:
                    cd:35:71:3b:0d:56:7d:89:02:ff:a3:37:eb:98:7e:
                    47:ad:0f:ec:32:12:49:68:76:56:63:22:9b:92:23:
                    86:f9:86:34:da:48:c7:3b:9b:d9:7b:07:45:4e:41:
                    96:e5:77:87:53:9d:33:32:c3:57:8c:a0:5c:40:ec:
                    9a:12:1a:94:dc:75:a0:d8:c8:e4:a2:14:2b:eb:76:
                    7e:d9:5d:2d:2a:f5:c1:05:02:86:92:a4:b7:bf:e8:
                    29:b5:8d:a9:79:f0:33:1b:aa:3d:56:db:89:01:c7:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:35:15:FB:EE:CC:B8:A5:20:A9:91:F2:B3:54:92:23:86:00:05:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/8913fb72-4b70-362e-b2bc-5b03af1cc39e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.crl

            X509v3 Authority Key Identifier:
                keyid:35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.118.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0a:62:da:0e:c5:25:f3:43:c8:b0:ca:88:0f:1d:b6:a9:35:
         7d:65:1f:54:c0:4d:ba:91:92:02:5a:f2:24:de:ad:af:5b:ce:
         71:f5:da:96:e0:aa:33:ad:09:be:37:8a:f0:4e:2b:8b:09:e7:
         02:79:aa:76:7b:1e:be:ac:a4:4b:07:5f:30:5f:75:ec:96:c8:
         34:5d:76:cc:5f:95:aa:46:55:4d:f8:69:5c:4b:78:1b:13:dd:
         55:be:7b:91:8a:a5:1b:c7:00:57:5a:10:2a:aa:fd:28:cf:4a:
         82:97:d1:dd:a4:73:52:a7:7a:49:1a:87:4e:62:cf:cd:73:6c:
         ad:f7:64:89:e4:8e:86:c6:b4:b4:9b:f2:ba:d8:f2:ef:a5:03:
         cf:13:e6:27:ca:aa:51:d0:69:6c:e5:e3:e7:0f:79:ad:e6:3b:
         ea:05:81:eb:04:3c:c1:ab:8d:ee:54:47:98:86:01:e3:01:b7:
         05:34:e1:d8:10:30:e3:73:d9:24:da:d1:e0:4f:fe:fa:58:0a:
         e1:18:ea:18:3c:f3:53:d8:e0:df:e0:ca:0c:a6:0a:04:0c:12:
         7e:4f:f9:20:06:8a:5b:83:4c:a3:03:76:85:c0:72:b1:be:46:
         92:2b:dc:25:cd:ba:05:fc:1f:aa:60:30:55:d8:11:8d:34:d8:
         5d:8c:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:47 2026 by rpki-client