Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/16699af0-ce09-3ab9-9da5-515174dfb7ac.roa
File:                     16699af0-ce09-3ab9-9da5-515174dfb7ac.roa (raw, json)
Hash identifier:          gB0chuOVuB1e1K26dLDY6w8BMsrvcH69sP2129lG10M=
Subject key identifier:   9D:F8:05:9A:26:AB:14:E0:0A:A3:D9:51:3F:8B:5E:11:01:DE:B4:18
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584F4974A0277280321A4F51B100
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/16699af0-ce09-3ab9-9da5-515174dfb7ac.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395201
IP address blocks:        151.123.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:a0:27:72:80:32:1a:4f:51:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9e1db405-43f5-4bc1-b935-564647390e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7e:17:36:14:d5:81:e3:bc:6a:a5:2a:2d:12:
                    98:61:51:a8:c4:59:b7:2b:28:2b:bd:a3:9f:59:9c:
                    cf:dd:2d:00:55:46:30:e5:1f:da:fb:a9:9c:a8:ef:
                    44:6a:7f:a5:33:e2:e5:69:b0:1e:be:77:15:54:00:
                    c7:2e:90:53:0d:2e:04:1b:57:b3:4a:c6:bc:27:64:
                    b8:99:c3:6a:16:06:89:a8:f3:c0:2e:3c:6e:7b:9e:
                    11:f4:87:2e:19:71:8d:7a:7f:68:a7:45:92:f5:61:
                    1f:43:93:95:20:c8:fb:2d:8d:6c:a1:98:88:17:db:
                    d6:4f:c9:e2:7e:38:9b:eb:7a:b9:c7:57:a5:81:68:
                    80:d0:86:11:7b:8a:b0:29:65:10:85:e2:03:8e:e9:
                    4b:0d:ea:c4:2f:85:28:49:11:86:40:3b:92:b2:de:
                    52:56:0b:c9:34:1c:f7:ce:dd:7d:7a:f9:11:a0:a6:
                    eb:0a:1b:3c:85:ad:f5:1c:6d:68:f4:c8:3e:dc:e6:
                    c3:4d:42:3c:10:af:a4:10:01:01:6e:bb:79:d4:ea:
                    3a:65:e0:3b:4f:56:1f:23:df:b8:1e:56:3b:84:a4:
                    f7:9d:be:ad:bc:43:d6:4c:ce:cd:63:bf:d4:cc:86:
                    0c:88:fd:0e:73:cd:4e:15:3d:09:74:3e:e8:30:94:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F8:05:9A:26:AB:14:E0:0A:A3:D9:51:3F:8B:5E:11:01:DE:B4:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/16699af0-ce09-3ab9-9da5-515174dfb7ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.123.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:4d:c9:d0:55:1d:f1:59:a2:81:13:96:5c:b7:0e:36:2f:37:
         8e:9d:52:22:af:23:a7:9f:86:01:2a:cf:6c:c2:90:7d:7e:a0:
         1c:19:b4:f4:dd:68:db:be:2c:5f:bb:42:76:37:87:8c:b4:74:
         5e:0e:2e:83:4c:c5:22:5f:fd:1c:1f:39:67:21:cf:fe:83:e8:
         2b:74:9f:2d:c1:1f:29:14:dd:17:bd:f3:6d:68:1b:dc:2c:5c:
         19:34:6b:56:5c:3f:c5:64:67:ac:46:1f:fe:71:f5:2a:9d:59:
         ab:58:d2:37:3f:66:06:cc:2b:bd:02:f2:1e:8b:84:ea:8c:50:
         97:bf:11:28:76:f2:53:29:50:cd:7b:18:08:54:d1:80:8c:02:
         b1:2a:eb:d3:18:92:48:ab:e8:11:5e:81:ce:20:23:a5:65:46:
         ee:77:ac:76:fe:e9:f6:0d:00:a1:79:f9:3d:87:4d:b4:14:93:
         45:7a:28:95:42:25:87:b8:b4:f8:d8:bb:e8:12:7a:a7:7e:f7:
         49:c5:9b:9e:78:48:da:e9:01:64:68:ae:30:65:cc:9d:df:85:
         ec:5c:7b:12:42:c6:6a:81:e6:d5:7e:fd:ac:a8:96:4d:06:cf:
         01:7e:9d:31:77:ad:7f:01:08:03:06:da:7e:a7:b2:c0:8b:8d:
         a6:68:27:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:12:24 2026 by rpki-client