Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/025c0e7d-73d8-3a22-89e3-9f16cab0e4c2.roa
File:                     025c0e7d-73d8-3a22-89e3-9f16cab0e4c2.roa (raw, json)
Hash identifier:          2k1ALg2MVZ75ICARzMSlqQ1fz/CyMNfeZ12y7a48TPQ=
Subject key identifier:   91:C7:A2:61:39:EF:EC:F2:55:35:6C:CC:06:D5:52:CC:6B:C8:D2:15
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F325E2014D963EFDC5F752980
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/025c0e7d-73d8-3a22-89e3-9f16cab0e4c2.roa
Signing time:             Wed 16 Sep 2026 18:35:31 +0000
ROA not before:           Wed 16 Sep 2026 18:35:31 +0000
ROA not after:            Tue 15 Dec 2026 19:35:31 +0000
asID:                     54641
IP address blocks:        168.235.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:5e:20:14:d9:63:ef:dc:5f:75:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep 16 18:35:31 2026 GMT
            Not After : Dec 15 19:35:31 2026 GMT
        Subject: CN=5ffccd77-8c31-46ef-913c-83b8ce8c7421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cd:5b:c7:99:7b:51:ce:ec:dc:5a:07:57:81:
                    9f:8c:68:42:63:24:c3:71:89:3c:6d:24:a2:f4:51:
                    67:5f:32:57:50:02:22:d1:65:e3:e4:d6:9e:f0:90:
                    eb:c4:f2:52:a5:0c:e5:6e:b3:19:27:34:19:3c:9a:
                    29:ce:cc:0a:5f:5a:35:4e:1e:19:ef:fc:65:67:3e:
                    fb:1b:c3:b1:79:b2:ac:f5:09:5a:ae:15:02:46:49:
                    a2:f9:0c:eb:50:c9:b3:ed:7d:ab:c2:05:43:ab:53:
                    d9:b8:da:2d:30:96:45:a3:5b:dc:0f:80:18:62:c8:
                    60:d3:bf:1a:a3:43:38:5d:6d:9a:2f:eb:a7:ef:28:
                    01:7e:fb:37:62:38:92:e3:72:b4:b2:ab:82:57:90:
                    59:f6:e7:2a:d4:2e:dc:d4:d6:af:de:8a:f9:17:ae:
                    ca:0b:8f:ff:91:5c:85:52:85:f2:16:db:e6:f8:c1:
                    ff:9c:e0:d2:94:8b:f0:66:e7:2b:00:30:d4:8c:bb:
                    a9:b7:f4:a0:74:39:ec:be:33:0c:21:95:fa:c8:9b:
                    3c:ec:5a:28:3e:58:53:a9:fd:45:ce:6f:b8:6d:5f:
                    94:bc:18:52:2a:72:ae:d8:55:f2:f1:9f:ef:b2:17:
                    5a:b9:ec:48:f0:34:c0:be:b9:d2:ce:30:e0:47:80:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C7:A2:61:39:EF:EC:F2:55:35:6C:CC:06:D5:52:CC:6B:C8:D2:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/025c0e7d-73d8-3a22-89e3-9f16cab0e4c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.235.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:85:76:63:44:f6:1e:33:55:b1:b1:da:fc:9d:91:db:6d:55:
         a6:c1:42:40:af:3b:43:c2:ab:f9:e6:2a:ee:2e:38:a0:88:95:
         e9:36:6b:3e:64:80:6e:02:c8:c7:97:28:de:94:2d:99:c1:23:
         4b:0a:e9:f1:2c:83:83:45:f5:11:00:25:b7:aa:9e:15:3a:36:
         e9:52:b6:93:1b:ac:36:c4:8c:0e:7c:1e:5f:32:30:e6:5f:01:
         69:f1:31:6c:dc:75:10:be:bd:0f:0d:40:14:ca:11:6f:a2:6a:
         41:57:00:b6:1c:41:e3:fe:9e:90:42:7a:40:2b:5b:04:88:2e:
         df:1c:8e:8b:2e:9e:bb:dd:6e:8a:7e:b7:24:52:56:bc:2a:04:
         6e:60:61:7c:9b:60:9b:b5:60:e8:31:30:e9:a6:34:49:bd:ad:
         bd:45:6f:f8:9b:67:b7:fe:56:4f:e8:1e:97:c1:e4:30:c6:c7:
         8a:98:4c:f3:25:14:21:34:ce:2e:e7:7c:b9:af:82:bf:cb:b2:
         60:0d:70:4c:53:8e:a0:4f:c4:09:59:df:d4:d9:b6:32:c5:3f:
         0d:77:80:28:e4:68:13:e5:b2:5e:09:df:4f:36:1f:74:f5:8b:
         b9:c9:45:18:2d:72:70:fe:5a:ce:40:8e:6e:5b:f2:48:d4:9e:
         68:df:b7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:16:41 2026 by rpki-client