Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c8cc2f23-6ef4-3061-8389-a911f2bf39ba.roa
File:                     c8cc2f23-6ef4-3061-8389-a911f2bf39ba.roa (raw, json)
Hash identifier:          sSwTG+lmMh3TuDwPjPEvcR+KH+zuPrpnPor+K8WGx/E=
Subject key identifier:   C6:CB:7C:BA:9E:A7:C4:9A:E3:B1:64:C3:93:55:5E:10:42:07:FE:3B
Certificate issuer:       /CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a
Certificate serial:       010D0C9F4328584ECBD1D8E92DA47AC2878FF480
Authority key identifier: EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c8cc2f23-6ef4-3061-8389-a911f2bf39ba.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     395003
IP address blocks:        162.210.243.0/24 maxlen: 24
                          162.244.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d8:e9:2d:a4:7a:c2:87:8f:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=29dd7cca-d343-43eb-8661-557f0e31bd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:2b:06:75:44:c1:8d:7b:7a:76:21:d4:bc:
                    75:de:c4:c2:fe:6d:67:64:5b:76:42:da:70:7b:27:
                    22:68:03:d6:3b:36:0c:de:f4:ef:d8:3f:c5:0e:b4:
                    19:fa:c2:d0:e2:1b:7d:e2:a1:2d:da:eb:21:cb:85:
                    fd:5e:bc:91:1b:50:02:8f:7b:cb:d9:c8:10:1c:af:
                    d6:31:94:34:8f:78:6f:1c:21:66:95:68:c7:fc:ad:
                    39:9e:c5:cf:8c:b4:73:75:f2:66:79:8c:07:02:3b:
                    a3:d9:51:e9:07:34:ff:59:e5:7a:3c:49:73:54:68:
                    c3:de:2e:ca:0c:94:73:29:6a:6d:44:83:52:bf:26:
                    ce:a9:99:d0:75:15:f7:69:2b:b2:30:69:52:3a:94:
                    4e:e6:7d:f0:47:d1:74:d8:eb:95:d7:ba:36:c0:85:
                    0a:2d:fd:0f:68:3e:6d:4a:8a:33:5d:ba:34:67:12:
                    68:50:42:df:e4:fa:64:f1:2f:0d:3c:21:33:26:a0:
                    a4:4f:b4:f6:2b:2d:9f:52:9f:4a:fa:02:bb:c4:85:
                    95:2d:71:72:6b:65:d6:a5:97:ba:31:f6:fe:fe:e7:
                    ce:5c:fa:3f:3c:53:29:b9:49:26:12:ce:eb:6a:18:
                    83:ea:ee:71:8f:76:b3:1a:d9:5b:f9:69:f7:99:fe:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CB:7C:BA:9E:A7:C4:9A:E3:B1:64:C3:93:55:5E:10:42:07:FE:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c8cc2f23-6ef4-3061-8389-a911f2bf39ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl

            X509v3 Authority Key Identifier:
                keyid:EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.243.0/24
                  162.244.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:59:9c:c9:e0:39:83:17:83:15:4b:f2:57:0b:7d:35:52:50:
         f8:da:d4:00:2c:29:72:4e:9b:ff:9a:13:be:6f:4b:fb:4d:b2:
         58:0d:ee:cc:2d:92:25:3d:5b:de:c0:7a:3a:09:b7:3b:95:aa:
         fd:09:11:e0:04:c1:1b:99:ca:e1:b7:68:58:a8:63:09:75:11:
         f2:c9:d9:17:2c:8c:3e:5a:c2:fe:d8:3d:2a:4e:dc:69:24:9b:
         c8:da:62:3f:c4:01:d2:b5:40:bd:e5:23:12:a3:ee:52:e8:10:
         26:3f:64:d4:50:60:62:a1:c4:1f:ce:ea:10:d6:64:2b:dc:33:
         95:05:cc:e5:61:06:5f:0c:fa:23:1f:6c:80:da:2c:8b:33:4b:
         a0:6f:3f:be:c7:fe:61:fe:3e:c9:aa:3c:21:70:df:3c:b5:34:
         c7:09:71:ac:42:4f:c5:19:32:3a:7a:df:4e:5a:2b:82:2a:64:
         66:fd:3e:14:39:5d:a8:14:c5:76:12:05:45:69:5c:29:c8:fe:
         10:bd:92:32:8f:f3:da:34:72:c2:a2:a4:00:0e:4a:f4:62:47:
         78:6a:3a:c6:ce:24:71:33:18:f9:08:95:4d:ad:99:c9:44:20:
         04:fa:0b:52:98:fe:e7:c6:78:32:ea:b0:1e:7f:35:da:63:57:
         13:d5:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:51:48 2026 by rpki-client