Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/fa949c4a-58a5-3a52-ae3f-c9f2cd0d542b.roa
File:                     fa949c4a-58a5-3a52-ae3f-c9f2cd0d542b.roa (raw, json)
Hash identifier:          XTkEDNMfxEvVRVxG/a+DgUxf6dppSeEuCT+YIdnV33s=
Subject key identifier:   54:11:19:35:D1:62:BD:4F:54:39:28:12:8C:7A:C9:52:3E:DA:38:B2
Certificate issuer:       /CN=0a44ddfe-6fde-4083-a1dd-cbb3707e1b70
Certificate serial:       010D0C9F4328584F28FD14DE946A5ABA0F940A00
Authority key identifier: EB:56:FA:99:FF:96:D9:62:22:6D:6B:6F:E3:00:10:08:BA:CA:A9:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/fa949c4a-58a5-3a52-ae3f-c9f2cd0d542b.roa
Signing time:             Sun 13 Sep 2026 09:57:43 +0000
ROA not before:           Sun 13 Sep 2026 09:57:43 +0000
ROA not after:            Sat 12 Dec 2026 10:57:43 +0000
asID:                     198949
IP address blocks:        132.177.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:28:fd:14:de:94:6a:5a:ba:0f:94:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a44ddfe-6fde-4083-a1dd-cbb3707e1b70
        Validity
            Not Before: Sep 13 09:57:43 2026 GMT
            Not After : Dec 12 10:57:43 2026 GMT
        Subject: CN=0e9975e1-79b6-4932-a650-7f17ea8cd6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:45:e6:c6:0a:dc:a1:23:05:23:cc:bd:f7:
                    7d:c7:c8:a4:34:de:ce:bf:31:2a:0f:49:ee:b2:9e:
                    b3:37:96:6c:ca:c8:00:c9:9d:a6:d6:10:b0:f3:ea:
                    1d:63:92:cf:14:b8:83:f2:54:70:e5:b2:76:09:69:
                    90:6b:3b:4a:a0:c7:35:5a:fc:8b:21:9c:8d:06:15:
                    1e:fe:1f:98:bb:2e:9b:34:8b:3a:32:27:77:c4:06:
                    1a:cf:b0:87:b1:3d:ee:82:29:8f:7a:04:8a:93:b3:
                    a6:d7:77:eb:2e:40:7f:55:22:6c:a4:88:ed:e3:db:
                    a0:6a:d5:e8:42:d7:c6:b7:b5:2e:44:66:77:ed:99:
                    29:15:98:ac:ec:9f:93:0a:02:40:3f:da:7a:34:dd:
                    f8:f0:08:c3:85:5d:e0:5c:0b:4d:44:f2:13:19:3b:
                    af:c0:56:1e:f8:5b:77:ab:ee:b1:f5:72:c6:01:51:
                    b3:ea:14:ea:c4:bd:c9:a1:1f:7c:cb:0f:63:1d:37:
                    8c:fd:82:65:fd:6d:1e:be:e4:60:19:23:1f:d4:b0:
                    75:d2:62:90:1f:8e:e9:a1:50:ae:9d:f2:2d:99:32:
                    21:cf:65:e9:22:c7:13:91:f1:a8:90:20:1e:8a:20:
                    d7:5e:85:b7:d8:2f:e3:aa:0a:4f:63:b3:02:8b:b0:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:11:19:35:D1:62:BD:4F:54:39:28:12:8C:7A:C9:52:3E:DA:38:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/fa949c4a-58a5-3a52-ae3f-c9f2cd0d542b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.crl

            X509v3 Authority Key Identifier:
                keyid:EB:56:FA:99:FF:96:D9:62:22:6D:6B:6F:E3:00:10:08:BA:CA:A9:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a0:04:6d:ad:90:19:5a:8a:c2:bf:8b:88:39:a4:0c:80:90:
         6c:03:29:ea:3f:7c:b2:18:05:07:fb:28:22:21:43:36:38:ac:
         e7:86:c6:22:93:f7:05:21:74:7d:3d:3b:08:45:8a:a7:29:ee:
         b6:db:60:6a:8b:a7:f1:78:1d:07:20:07:36:26:d4:0a:67:1a:
         e4:61:2d:4c:33:9b:a5:c6:7e:28:c5:8d:ab:2a:c6:a1:e1:7c:
         78:13:35:c8:90:ad:72:4c:6f:bf:f6:c2:19:50:e6:ef:9d:26:
         70:22:ed:30:cd:99:67:80:89:d8:05:ad:4f:1c:8a:ad:2d:78:
         b6:f6:2c:36:02:3d:f0:e4:57:af:05:6e:a7:d3:17:71:41:f5:
         54:de:8d:70:38:3f:f6:55:79:28:ce:3b:c6:52:19:0b:98:77:
         30:9b:d4:6d:41:69:d1:7f:9d:ca:6d:52:7f:71:a5:cc:30:cb:
         d5:c0:7b:44:3e:0e:ba:36:d2:7d:c4:3e:2c:a4:45:91:43:35:
         2e:28:4a:79:3b:15:6c:c1:e6:3c:6b:86:23:cc:d0:a3:a5:0c:
         76:8d:6f:86:ca:c1:4b:9c:c1:7b:85:00:46:f8:60:aa:5b:41:
         bc:2c:17:a9:ba:d5:f7:21:2e:34:c4:b6:f7:00:3c:64:45:9c:
         20:db:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:03:53 2026 by rpki-client