Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa
File:                     ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa (raw, json)
Hash identifier:          7TqXig3v73LxluE9NpMjNGTsryRctSDKrVoWfR29lEQ=
Subject key identifier:   AF:71:89:1A:0F:EB:D8:46:35:4C:E2:23:1B:D5:61:27:D5:99:86:60
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584F093CDB6835E125293ADAF300
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     14061
IP address blocks:        157.245.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:db:68:35:e1:25:29:3a:da:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=483a28c6-d43d-418d-b539-53213a05ef69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:b9:d7:92:d2:76:ad:97:7b:b2:a7:8c:76:
                    76:69:4d:5d:75:d9:bf:35:d8:8a:e3:cd:05:42:30:
                    bd:ef:79:76:cd:9f:e3:85:16:77:b7:21:64:8a:15:
                    86:29:8c:a2:07:2f:13:28:f7:9a:3d:fd:7f:82:62:
                    01:15:4e:12:b0:d9:79:af:0a:e7:5c:0e:54:68:02:
                    6e:6d:6b:83:7e:95:ae:e2:20:8d:cb:9b:72:15:cd:
                    d9:3e:d6:d0:a3:84:50:0c:78:c9:c2:f5:4f:00:e6:
                    72:4b:64:b7:1e:f4:88:04:03:0d:98:a2:b1:74:c9:
                    b1:82:66:0c:98:cf:f6:ef:a7:ba:ab:4a:88:0f:66:
                    8c:f0:61:9c:c6:c7:53:3c:95:9e:bd:e5:a2:73:e3:
                    26:d0:4b:60:56:ef:5f:e9:d8:d7:68:74:7a:12:ca:
                    3c:19:a9:be:fc:f4:f0:e5:fd:af:41:01:82:69:28:
                    ab:75:b4:ee:ba:15:50:45:ea:b6:f2:67:e7:9b:c7:
                    d3:7e:da:ff:a7:9e:25:c8:c8:1b:f6:4e:dc:ba:98:
                    19:7c:10:b2:69:30:78:17:07:2c:13:0b:7d:d9:56:
                    45:35:61:d9:6f:1f:25:ab:3b:cb:01:b0:bc:5d:fb:
                    8e:69:71:54:32:ce:2b:e2:1c:03:1a:f0:81:d1:25:
                    1e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:71:89:1A:0F:EB:D8:46:35:4C:E2:23:1B:D5:61:27:D5:99:86:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.245.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:ce:09:52:51:4b:23:36:e3:80:92:42:ed:f1:1e:ac:b4:30:
         fd:c8:55:da:e1:af:d2:a9:98:8d:62:ef:49:20:44:a6:77:61:
         23:55:97:f7:da:f8:89:49:98:b5:52:ab:4a:cb:e0:81:a0:5c:
         95:f3:33:7e:a4:3b:fe:02:c7:6f:25:46:43:84:50:2b:4d:ea:
         97:e3:1d:c4:b4:56:ee:4c:f2:c8:e1:69:38:48:09:d9:ee:45:
         6d:8a:28:c2:48:94:63:a9:9a:39:a0:33:03:5c:37:51:36:cc:
         7a:ba:19:bb:96:dc:4c:c3:72:35:b7:57:7f:d9:c9:0d:75:e7:
         0e:a9:8c:f9:61:9e:ef:df:cc:a8:26:ba:eb:6d:cd:08:2b:40:
         b1:d8:c2:93:46:21:55:f6:26:04:fd:e0:cf:08:82:44:93:76:
         0e:89:33:57:a3:b0:62:aa:f9:ca:0c:33:77:5d:fe:dd:9b:41:
         97:b3:77:41:55:6a:fd:75:70:10:0e:09:ef:7f:ff:ed:06:d8:
         f8:29:f8:7d:a6:36:9e:4f:a2:9f:7b:af:16:cb:e2:4d:33:c3:
         d9:6d:9e:69:ac:4c:18:b4:ff:02:e0:58:d6:27:74:e3:f5:27:
         8b:a7:85:41:2c:d3:df:a3:67:2e:81:9c:7d:b7:59:8b:9d:be:
         e6:d8:41:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:58:31 2026 by rpki-client