Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/13174fce-ad03-3b44-a7df-9575529bb4ab.roa
File:                     13174fce-ad03-3b44-a7df-9575529bb4ab.roa (raw, json)
Hash identifier:          Lv+L8TjgcUpuZoJuA06LWLEceCLf1T8VhdK3XE5z8lQ=
Subject key identifier:   0E:FE:C5:12:E1:00:A9:12:63:86:EE:D5:C3:42:76:60:CC:0A:B3:95
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F4328584F6F230F6435D58E7890B80300
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/13174fce-ad03-3b44-a7df-9575529bb4ab.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     140952
IP address blocks:        173.245.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:0f:64:35:d5:8e:78:90:b8:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=22b05f97-7f5b-4370-bd86-120f84ae05e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e6:e7:7b:df:dd:5c:2e:79:33:df:09:50:e6:
                    9e:bf:14:73:6e:86:56:aa:ba:b3:0b:23:d4:9b:cb:
                    cd:09:be:c4:ec:b8:b7:6e:c2:5a:9f:df:7d:43:c7:
                    6d:29:72:12:5c:be:39:b6:1a:89:57:fa:96:b6:a3:
                    52:2c:0b:2c:bd:f8:8a:43:d7:4f:88:30:3d:91:3a:
                    89:e9:a2:c2:d2:e8:e2:8d:cc:de:1a:24:7c:1d:18:
                    93:9e:60:23:5b:22:14:37:92:f9:ef:17:8e:6e:23:
                    0d:9e:bd:94:68:db:c6:00:bb:5c:24:47:a2:5d:2c:
                    cd:e4:0b:2d:07:ad:1a:b5:08:e2:9c:80:3e:b9:30:
                    55:87:9a:f8:74:18:89:a5:1d:e1:b2:02:d3:d0:c5:
                    68:d3:57:6e:75:e4:9c:b9:5a:60:3e:c6:3b:0c:61:
                    79:6e:f7:92:5f:d2:f3:b1:ba:55:a4:1d:ce:9a:eb:
                    bb:52:69:b5:08:b1:43:89:bd:df:7a:6a:a6:70:0f:
                    31:c4:48:a7:5f:53:b0:e9:19:20:1b:6f:d8:42:15:
                    8c:9f:8e:1c:93:6f:fb:9e:6e:88:05:2f:b2:43:4e:
                    00:64:90:bf:98:db:dd:79:b6:e4:0b:fc:24:c7:a0:
                    90:5b:e8:5f:85:a6:f6:1f:33:67:38:96:4b:b7:73:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FE:C5:12:E1:00:A9:12:63:86:EE:D5:C3:42:76:60:CC:0A:B3:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/13174fce-ad03-3b44-a7df-9575529bb4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2a:10:65:52:f7:7e:26:0a:a7:6c:74:52:1b:1c:fb:f7:10:
         c6:37:16:61:06:db:4b:09:31:fe:db:ce:37:cd:c7:f7:24:17:
         cf:1c:0b:6a:20:4e:97:4e:79:90:3d:dc:b5:6f:5a:93:0e:77:
         2b:d4:51:02:e5:fe:cd:21:1e:14:13:19:a4:ed:63:d9:62:c0:
         84:35:31:fe:cb:65:40:53:85:7f:d9:dd:c5:08:34:0e:7a:4b:
         c7:e8:0f:91:bc:30:c9:5a:c2:61:32:df:77:79:ed:e6:8e:25:
         40:ea:df:6b:b3:41:f0:7a:d8:c6:51:44:37:c5:fc:a3:39:44:
         e4:9e:d7:45:7a:37:7b:68:bf:dc:4e:48:dc:0c:49:30:97:40:
         b8:c0:62:92:01:07:a7:ce:59:24:82:25:6d:2c:ea:04:a2:ee:
         94:1f:40:74:06:a2:ab:b6:19:61:a0:9c:37:34:14:af:dd:2b:
         db:ae:2c:f5:96:45:49:36:37:a7:48:95:e5:1c:04:4b:ca:cf:
         75:10:3b:5a:b6:cd:de:fc:e2:04:72:97:ce:08:76:12:6a:29:
         4c:e5:1a:7a:36:91:f2:9b:8a:4d:c9:8d:04:84:78:1d:d6:f0:
         c1:46:8a:e8:36:f8:6d:51:8d:ad:ff:e3:a2:fc:89:56:fa:7c:
         ec:13:18:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:26:37 2026 by rpki-client