Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb18405-10dd-3001-8e81-b4467c5fd67c.roa
File:                     3fb18405-10dd-3001-8e81-b4467c5fd67c.roa (raw, json)
Hash identifier:          +ZBxOSO5J8zT0hMH2kgVNUsT9E0pI47+WqGikGOxUJg=
Subject key identifier:   15:A6:3B:1E:D0:5D:91:0E:8F:A7:44:B0:20:43:38:52:24:C5:DC:99
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F71EDA943BC88517FB3AF6B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb18405-10dd-3001-8e81-b4467c5fd67c.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     36183
IP address blocks:        172.226.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:a9:43:bc:88:51:7f:b3:af:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=65725a01-0277-42db-998c-49b9858dfeac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:89:0c:a4:e3:fd:58:97:7a:30:d5:6e:7c:0c:
                    d6:eb:41:8b:7d:86:23:2a:97:ea:0f:ac:5c:39:31:
                    cf:8d:23:cb:be:b6:f1:e9:11:3c:31:7b:33:5e:17:
                    0c:2a:92:2b:a5:78:d1:3c:ee:af:84:b8:d5:5b:92:
                    f0:d1:7f:9b:98:57:87:f2:20:07:fa:95:64:cb:1a:
                    9c:f7:66:50:05:c6:2a:ef:71:77:87:90:8d:51:61:
                    b9:a0:b7:23:53:08:f5:61:28:f4:b8:0c:17:72:e8:
                    57:f0:ac:0e:4e:2d:4d:57:b0:4d:6f:85:6e:ce:47:
                    31:88:7c:ca:5a:31:c8:83:ee:b8:68:c2:30:5b:0e:
                    9b:b6:8a:d7:bc:59:53:e3:a6:31:cd:70:1b:af:63:
                    23:2a:45:48:0d:da:cb:0a:b2:17:38:8e:f0:d4:5e:
                    cf:52:05:e7:0b:67:6b:a5:ef:89:fa:5a:b0:b1:9a:
                    d6:d1:58:e0:d7:e9:00:34:28:b3:41:a1:8b:47:e2:
                    0b:82:54:1b:77:e3:d9:e0:50:1d:59:f4:97:43:b4:
                    2b:e9:bb:06:90:b4:96:a6:5a:eb:ba:57:63:3d:84:
                    20:f5:7b:10:b9:4b:e5:da:e1:48:95:0a:d0:38:7c:
                    b8:a1:56:44:10:db:c3:60:5f:c8:84:7b:c7:c3:c7:
                    8a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A6:3B:1E:D0:5D:91:0E:8F:A7:44:B0:20:43:38:52:24:C5:DC:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb18405-10dd-3001-8e81-b4467c5fd67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:9b:26:df:74:46:23:15:15:dd:03:fa:af:08:ee:dd:35:81:
         95:95:70:58:3f:93:22:a0:ed:e1:62:a7:9b:55:fa:08:ff:c6:
         ab:f2:a7:d1:db:3e:45:cb:a1:1d:43:ff:eb:a8:c3:e4:48:8f:
         74:f3:a3:b4:ca:fa:4a:cc:9a:0c:45:30:b8:a1:5b:e0:e4:5e:
         29:33:bd:07:36:b5:0f:86:19:91:fe:f2:40:f1:61:20:bf:06:
         1d:fb:c0:6c:c1:44:b1:d0:2a:44:1a:61:e0:4c:25:0a:c3:df:
         a9:8a:77:de:19:44:f2:66:85:ff:c0:92:8b:c4:38:17:7c:1f:
         b7:8b:b7:79:c9:6a:a3:2d:b3:35:6c:94:f4:47:6e:96:61:3c:
         27:64:03:62:2f:76:e5:0e:4e:3b:74:f3:b7:47:6f:d6:07:0f:
         ea:5c:97:ef:c8:97:0e:01:9b:19:ba:7e:0f:c2:15:86:1c:e6:
         2e:80:2a:ad:39:73:a2:f9:51:29:96:80:4f:c9:38:dc:63:59:
         db:d3:d8:aa:63:fb:ce:15:e9:23:44:ee:db:87:0a:88:13:cc:
         0f:f3:af:95:65:10:53:b4:25:fd:7d:fb:61:99:e6:82:a8:d2:
         2d:f6:aa:c9:d0:9b:a2:fa:f6:9e:02:0e:39:51:22:7f:c1:eb:
         a4:80:63:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 01:57:35 2026 by rpki-client