Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33/ee2ab095-ee72-3b54-a30f-261e3cf510a8.roa
File:                     ee2ab095-ee72-3b54-a30f-261e3cf510a8.roa (raw, json)
Hash identifier:          bT4KbaeohHb4y6pWOjJzmIy8PXnv+zGUeBbguVWGhX0=
Subject key identifier:   44:DA:DB:E0:5E:A0:A8:98:4E:3C:20:FD:35:AE:8C:63:BB:73:CE:A8
Certificate issuer:       /CN=b9301a9a-3a95-4fc1-a558-009c22466c33
Certificate serial:       010D0C9F4328584F708819ABB2AB88A47438F5C0
Authority key identifier: 9C:79:F0:C8:B9:BB:DC:C3:6F:67:A8:D8:2E:B6:7E:0E:B1:FE:D7:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33/ee2ab095-ee72-3b54-a30f-261e3cf510a8.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     399138
IP address blocks:        155.103.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33/b9301a9a-3a95-4fc1-a558-009c22466c33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33/b9301a9a-3a95-4fc1-a558-009c22466c33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:19:ab:b2:ab:88:a4:74:38:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9301a9a-3a95-4fc1-a558-009c22466c33
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=a8539fb0-4a14-41bf-959b-223b68d57edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c3:f5:cb:b0:6f:07:5e:f8:65:94:36:3d:93:
                    9c:60:84:59:a5:19:c4:b9:2e:9d:54:9b:2e:b3:39:
                    e2:64:ae:e7:1b:3b:d2:16:4a:2a:01:a0:e2:c6:ef:
                    43:3e:1f:06:57:80:2f:f9:86:cc:51:29:e1:21:39:
                    b2:e1:55:68:d6:40:09:5e:a2:25:65:4c:a1:c2:b9:
                    c1:67:a9:a9:be:c2:10:1f:07:b7:be:70:37:4e:09:
                    c7:ea:12:d0:f5:fa:51:6d:85:d5:64:b4:f2:1f:1e:
                    ac:fa:c6:88:30:58:03:b8:11:bf:c6:f4:e0:f2:f7:
                    45:e8:04:47:1e:81:17:12:27:09:65:37:62:72:d1:
                    f4:d9:1c:c4:07:d4:ba:10:79:01:d6:f5:e5:57:e6:
                    77:61:44:29:b9:2e:6e:e9:8e:e2:b8:9a:92:75:23:
                    c5:33:3c:81:ba:47:a9:b4:1a:5a:1a:cc:66:50:5a:
                    f5:46:f0:e3:6d:67:16:d2:24:4b:38:e8:d6:cd:b9:
                    c7:a9:bc:58:15:01:2c:0c:47:eb:d5:6d:12:e1:9c:
                    5e:ed:9e:b9:33:56:58:d3:89:75:a4:41:6e:73:53:
                    6f:cb:f9:44:cd:ef:84:57:bd:04:c5:81:5e:66:7e:
                    63:f0:d6:13:3c:57:63:51:80:26:f4:00:d2:2e:15:
                    26:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DA:DB:E0:5E:A0:A8:98:4E:3C:20:FD:35:AE:8C:63:BB:73:CE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33/ee2ab095-ee72-3b54-a30f-261e3cf510a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33/b9301a9a-3a95-4fc1-a558-009c22466c33.crl

            X509v3 Authority Key Identifier:
                keyid:9C:79:F0:C8:B9:BB:DC:C3:6F:67:A8:D8:2E:B6:7E:0E:B1:FE:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9301a9a-3a95-4fc1-a558-009c22466c33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:4f:aa:66:14:05:83:f9:8e:d1:89:63:d8:77:d4:c5:dd:2b:
         73:6f:c7:7e:b2:47:01:64:65:22:c7:1d:a4:7c:00:b4:90:a6:
         63:86:4a:2c:32:81:97:cd:5d:87:bc:ef:c5:0e:da:34:5f:52:
         4c:f0:b9:38:f6:d1:60:4d:33:ce:c2:26:cc:61:22:e7:f1:ec:
         18:37:e8:a4:77:ee:ea:9a:92:dc:7a:a8:40:02:bc:8d:33:cd:
         3d:9b:c7:0c:20:9c:f7:03:ad:8a:9a:5b:3d:52:87:b0:53:95:
         82:67:fe:47:e2:75:2d:56:56:64:81:64:4d:12:0c:07:4b:16:
         2e:0c:0d:f3:e4:32:ac:c1:44:ab:b2:d3:a1:59:82:e2:a7:f5:
         3c:6b:3f:72:26:c2:ef:28:4a:f6:f4:d6:ad:99:51:2f:e9:33:
         27:8b:f0:62:e1:83:72:93:b9:e6:31:89:c5:79:54:c1:99:a6:
         f7:25:fb:cb:a2:6b:5e:99:3a:85:ba:7b:d9:56:55:6b:c8:f7:
         8a:75:33:ac:03:21:a9:39:03:95:41:c5:d1:90:91:34:41:f7:
         63:a1:11:9d:8c:59:02:78:e6:12:ae:2b:54:40:81:a0:a8:61:
         33:77:42:80:89:6a:ef:61:67:45:a7:9a:a1:78:a1:6b:dc:9a:
         c0:1d:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:34:34 2026 by rpki-client