Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8/460d493b-ded9-384b-9186-8dce6b3b1c52.roa
File:                     460d493b-ded9-384b-9186-8dce6b3b1c52.roa (raw, json)
Hash identifier:          apDg4JL7JwhCGax9eJmzKUfsReMwNUa6bEXpf3Qm0Lg=
Subject key identifier:   97:9C:72:18:B6:9E:F3:6E:6B:EC:35:FE:F4:90:15:6D:21:C2:68:F9
Certificate issuer:       /CN=8e894247-f145-41e0-8385-49772b1534b8
Certificate serial:       010D0C9F4328584EA79D394031FA1DB7CB7E5E80
Authority key identifier: 7F:9D:99:60:F3:89:49:12:9D:CD:A2:A6:ED:C8:45:6C:11:F0:08:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8/460d493b-ded9-384b-9186-8dce6b3b1c52.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22575
IP address blocks:        170.6.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8/8e894247-f145-41e0-8385-49772b1534b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8/8e894247-f145-41e0-8385-49772b1534b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:39:40:31:fa:1d:b7:cb:7e:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e894247-f145-41e0-8385-49772b1534b8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=357b9933-c50d-40f3-8044-eb74236e7e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:14:19:30:e2:1c:58:a1:d9:09:b2:30:3d:
                    18:51:4c:ce:ac:7d:5b:45:3b:fe:8e:7e:33:6c:bf:
                    f8:24:5b:31:8f:5b:13:71:b7:00:b9:fe:ec:c5:7d:
                    b7:62:59:72:c0:a7:0e:aa:e8:96:f6:d4:75:ce:80:
                    36:95:96:8a:1c:8c:f6:fa:47:7c:db:ea:2b:b9:1f:
                    57:0e:0d:38:76:b7:fd:37:e5:7e:1b:0e:3a:3f:58:
                    0d:2e:68:a2:a5:0b:42:4c:bf:30:b0:ce:5f:02:f6:
                    b4:83:39:23:2a:44:c4:f8:cd:c4:50:88:40:32:d0:
                    6d:90:89:65:70:6f:d1:08:57:b1:e7:f7:64:11:7a:
                    81:df:57:23:74:df:7a:32:82:e7:c9:c2:30:dc:01:
                    16:fc:b2:c4:5a:43:7b:7b:aa:b7:b9:56:d3:12:58:
                    74:6a:22:de:f9:43:16:0d:51:0c:af:52:56:dd:c3:
                    71:3b:91:a6:5c:e5:06:ef:6d:4f:c8:f8:10:a9:e4:
                    a3:21:62:30:a8:be:37:1e:e9:01:84:e7:ee:0b:08:
                    f0:47:e7:3c:04:ab:db:cb:10:d2:ff:2c:44:62:0f:
                    10:57:b8:50:5d:9f:06:2c:3e:7a:2b:ae:5a:98:14:
                    77:8c:55:da:3c:fd:2a:8c:de:4d:1b:92:85:95:5b:
                    fd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9C:72:18:B6:9E:F3:6E:6B:EC:35:FE:F4:90:15:6D:21:C2:68:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8/460d493b-ded9-384b-9186-8dce6b3b1c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8/8e894247-f145-41e0-8385-49772b1534b8.crl

            X509v3 Authority Key Identifier:
                keyid:7F:9D:99:60:F3:89:49:12:9D:CD:A2:A6:ED:C8:45:6C:11:F0:08:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.6.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:91:0e:de:30:80:4c:89:11:7a:0c:6d:da:fb:09:3a:d4:35:
         97:3e:44:ae:b7:a9:97:e0:10:37:bf:93:05:f5:28:40:05:2e:
         20:19:7b:37:4c:57:da:7c:1f:13:71:78:26:cc:de:54:df:65:
         45:a4:91:8d:1d:dd:46:ac:6b:07:1c:1d:8d:2c:50:43:af:65:
         fb:e3:61:20:fe:6e:83:ea:4c:b4:29:a9:6e:9d:ab:cc:1e:fd:
         3b:5f:c4:20:28:6d:4b:b2:10:e6:16:09:1e:71:4c:21:01:ea:
         f9:6b:7b:7f:96:de:9f:05:36:a7:3d:59:7c:b7:b5:63:d8:40:
         90:3e:f0:df:ba:ae:db:10:34:06:2b:95:a0:2c:70:b5:d6:5f:
         19:ab:0c:6c:b3:ec:5c:47:25:8a:6b:5b:fb:91:13:88:e1:07:
         26:13:e9:42:64:77:4e:8e:e9:07:29:f3:e5:46:ae:aa:e5:a6:
         06:cd:fe:a9:0e:3f:e4:be:d1:9f:c1:1f:c9:3b:14:91:38:98:
         38:03:72:ba:b4:17:85:5b:25:fa:c6:2c:4e:0c:31:7b:85:a3:
         eb:e1:f1:41:b2:c2:0a:5c:d2:ba:18:bb:58:79:b0:19:37:a7:
         6b:bf:aa:81:6c:b1:9b:42:51:a7:96:d4:18:63:24:e6:0d:5c:
         a1:90:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:38:39 2026 by rpki-client