Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/51b8ef0b-8919-3314-a4f8-108681407a0c.roa
File:                     51b8ef0b-8919-3314-a4f8-108681407a0c.roa (raw, json)
Hash identifier:          +WnwhfVmjc9kr9m9jjTAkVcnEqdfPlHtuT4ZxVXzL4k=
Subject key identifier:   3E:8B:50:88:21:88:8E:C7:C6:CC:E7:7F:DC:A9:6E:50:62:DE:6E:1C
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F31E722F27600810F407B9D00
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/51b8ef0b-8919-3314-a4f8-108681407a0c.roa
Signing time:             Wed 16 Sep 2026 14:35:46 +0000
ROA not before:           Wed 16 Sep 2026 14:35:46 +0000
ROA not after:            Tue 15 Dec 2026 15:35:46 +0000
asID:                     22611
IP address blocks:        173.247.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:e7:22:f2:76:00:81:0f:40:7b:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep 16 14:35:46 2026 GMT
            Not After : Dec 15 15:35:46 2026 GMT
        Subject: CN=d40cfa52-4dc4-44a3-b60d-421ff6d371a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:87:36:e5:7d:3f:8c:75:92:b6:95:e8:25:f9:
                    94:e3:0e:3b:1f:9b:b7:2b:4a:30:5d:6a:7a:dc:d3:
                    a4:de:4e:36:a1:8b:ad:c8:08:28:da:81:a4:4f:28:
                    64:18:47:5b:e3:7c:36:be:b7:c2:7d:3c:6e:99:6b:
                    56:6b:ac:b2:0d:c2:c9:48:e8:e4:1d:d9:f0:11:3a:
                    bc:53:96:ed:1c:7e:d8:5b:51:bc:4b:4f:1b:fa:92:
                    77:cf:72:94:42:81:d1:9b:28:1f:79:f9:ca:55:fb:
                    12:df:85:18:3a:1c:84:11:ef:75:7d:ab:26:d6:90:
                    96:52:59:0e:ab:31:70:b3:a8:19:cc:30:9b:aa:7c:
                    ea:12:ff:75:15:99:e7:06:83:5a:7c:ff:02:8a:7a:
                    c6:c1:c6:d8:1c:8f:15:e8:12:6e:c5:6e:f1:36:a0:
                    97:ed:a4:66:b7:18:4e:f4:8b:58:0c:3d:8e:fd:18:
                    21:68:e5:42:bf:ef:fc:6f:b7:ad:70:85:04:2a:15:
                    52:9c:38:f5:87:0b:e7:a8:fd:8a:7e:6c:25:c3:33:
                    94:24:ad:e2:f8:68:26:b2:8b:b2:6d:4d:54:7b:66:
                    fb:83:25:c5:dd:47:0d:57:2a:2a:ed:38:ec:d6:ce:
                    66:63:fa:6a:ca:02:30:0d:a3:3d:b5:53:b0:8b:9f:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8B:50:88:21:88:8E:C7:C6:CC:E7:7F:DC:A9:6E:50:62:DE:6E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/51b8ef0b-8919-3314-a4f8-108681407a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:49:4d:64:eb:a5:f2:9c:b5:f8:62:d8:85:b8:98:b3:9a:78:
         9d:bf:db:71:76:1e:70:c5:b9:29:9e:1f:0d:90:ba:df:3d:36:
         f2:06:2e:be:a4:be:51:b7:ab:77:1c:7a:ad:8c:89:77:5e:d1:
         5c:23:da:04:6b:46:54:cc:c8:0c:98:dc:1d:72:5f:c6:ee:46:
         ef:92:cf:22:0d:ff:29:f9:17:5d:95:29:9e:28:5d:76:a6:35:
         5b:7a:26:99:9f:4e:07:6c:80:f6:88:54:46:f8:cc:1e:3e:f5:
         a1:59:d5:83:f2:3f:37:c4:0f:6e:26:8a:9e:75:ea:b6:f5:80:
         f1:b6:29:31:88:d1:e7:c1:51:64:bc:5a:9e:8d:22:d4:27:e4:
         43:22:0c:8d:06:95:ed:2c:76:dc:06:f0:38:23:8b:b5:ff:73:
         e9:10:b2:8b:e4:2b:e7:1d:a0:1e:a8:b1:10:c5:3f:bd:f0:ca:
         e6:86:ad:ff:05:44:9a:bb:67:21:54:39:5f:61:f1:f9:83:32:
         21:d1:ff:8b:c3:6d:d6:9d:85:b1:39:db:a3:f3:c1:2b:88:44:
         3a:94:a6:91:1c:78:9c:da:d3:34:04:c8:fb:85:41:f2:b7:92:
         28:fa:5e:a8:1e:7f:59:bc:1e:e7:9d:ab:73:f9:b0:af:7b:18:
         bc:ce:01:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:31:45 2026 by rpki-client