Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/2637e85b-16c6-3325-aa72-fca3520f6c83.roa
File:                     2637e85b-16c6-3325-aa72-fca3520f6c83.roa (raw, json)
Hash identifier:          yr48A1HdT3qQOn7sS9mfxvh3C63eFvqHLynyMr+GcTU=
Subject key identifier:   B8:89:24:23:F8:CC:4B:DC:35:8D:84:12:71:03:65:D5:76:CB:19:E9
Certificate issuer:       /CN=fc35b16c-01db-45a7-859c-93dd80a44805
Certificate serial:       010D0C9F4328584F49871506D471D457686EC900
Authority key identifier: 0D:A5:89:D3:B2:5F:09:29:8B:4A:47:DD:A2:B0:1D:82:4D:5D:D5:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/2637e85b-16c6-3325-aa72-fca3520f6c83.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        192.170.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/fc35b16c-01db-45a7-859c-93dd80a44805.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/fc35b16c-01db-45a7-859c-93dd80a44805.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:15:06:d4:71:d4:57:68:6e:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc35b16c-01db-45a7-859c-93dd80a44805
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=56a7ccf0-7f1e-460e-8d09-9982ee9b7e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:92:42:30:f9:39:2c:33:26:a1:cc:42:a8:d8:
                    03:66:86:92:01:ae:e4:05:4c:2f:af:a6:db:bb:a9:
                    52:f5:c8:02:bd:e2:a3:fa:b5:b8:20:9d:c0:f8:7f:
                    91:4a:cb:aa:2a:43:3d:6b:02:20:24:8e:6e:76:e0:
                    37:99:1b:60:22:84:38:ff:9f:9b:31:d8:ae:e6:fb:
                    bb:7f:1d:67:06:cf:90:66:ca:8b:5f:dc:a4:c8:92:
                    13:a0:3b:96:04:8b:21:b8:0b:9b:25:f5:f1:32:2b:
                    5a:4e:5d:48:82:10:46:ac:82:07:4c:0f:66:e2:85:
                    ea:38:7c:dd:af:80:75:d6:30:15:3d:c6:e1:29:68:
                    52:3f:7f:36:77:ec:ce:cb:b1:c9:8e:57:8e:94:17:
                    6c:3c:ae:91:22:1c:22:05:f5:81:a3:12:db:9d:6d:
                    35:d0:f7:02:b6:df:0a:32:a5:b3:38:0b:45:82:87:
                    93:30:c0:30:90:b2:53:ae:36:6c:08:87:92:fe:22:
                    6c:4c:8f:ae:c4:1f:30:b2:26:31:45:b9:fa:85:4e:
                    75:35:9f:a4:4f:7c:8a:aa:b6:81:db:ce:b8:b6:34:
                    b9:22:fa:c0:ca:a9:8b:49:f1:cc:af:f7:e1:08:2a:
                    2d:0c:e5:55:3f:d3:76:ed:40:e9:0f:d8:fa:6a:c1:
                    b5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:89:24:23:F8:CC:4B:DC:35:8D:84:12:71:03:65:D5:76:CB:19:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/2637e85b-16c6-3325-aa72-fca3520f6c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/fc35b16c-01db-45a7-859c-93dd80a44805.crl

            X509v3 Authority Key Identifier:
                keyid:0D:A5:89:D3:B2:5F:09:29:8B:4A:47:DD:A2:B0:1D:82:4D:5D:D5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.170.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:97:ca:2f:0d:69:b7:fc:25:00:0b:68:b7:0d:ba:57:3e:a1:
         b5:ba:46:a9:1f:4d:01:78:70:65:f7:a1:0a:a3:d6:fe:f2:8e:
         37:eb:43:63:21:81:db:99:57:11:09:05:b3:3f:ca:51:98:a3:
         fa:73:f3:6c:1a:a4:01:71:eb:10:53:f4:f8:77:9b:16:06:10:
         f8:2b:0c:1f:58:74:50:09:2a:a0:09:37:f7:06:fd:a0:b0:f4:
         65:be:a7:2a:4b:18:13:78:6f:2b:a2:1f:98:36:b4:78:b3:f7:
         30:9b:4d:48:a8:da:4d:f7:b3:c2:e8:1e:14:bc:2d:7a:ba:b4:
         07:90:30:c2:7d:a9:ce:77:f9:72:26:0f:3b:f2:70:a8:4b:b1:
         02:e8:ab:02:4b:88:71:69:02:f8:6a:82:f4:f2:ef:ea:aa:c8:
         02:b8:59:2c:96:52:8d:e9:b1:97:bf:81:96:a9:c4:0b:ff:72:
         3b:e2:24:31:22:a3:7c:69:93:a4:d7:b6:7f:e2:d9:14:55:93:
         d7:fe:ea:4b:cc:03:bc:90:cd:95:c1:91:35:88:c4:0b:b3:10:
         d3:da:13:5e:e2:3b:b4:93:10:33:cc:02:92:26:bc:31:ca:68:
         0d:e3:69:07:88:3e:49:24:8e:18:6f:8f:30:b7:e6:24:47:6a:
         58:f5:d6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:37:11 2026 by rpki-client