Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ae13747-341b-3adc-907a-625b8c3bc8ef.roa
File:                     9ae13747-341b-3adc-907a-625b8c3bc8ef.roa (raw, json)
Hash identifier:          iPAa/ZL8qJdHqtZf2hMXvcCmGeeIDcI0HihGfKu0JC0=
Subject key identifier:   8A:82:32:79:05:6C:C3:56:BB:C2:94:E8:C9:06:4B:0E:9A:1F:B7:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980BD93699E9518F22FA980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ae13747-341b-3adc-907a-625b8c3bc8ef.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33489
IP address blocks:        173.10.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:bd:93:69:9e:95:18:f2:2f:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b7c50945-987a-410e-b2f9-8b128dc0e5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:39:20:18:9b:2e:b8:17:6e:1c:0e:a7:16:
                    69:c9:02:32:ba:90:f5:db:a0:c7:1c:a3:32:02:91:
                    3e:72:fb:28:bf:20:ae:49:26:b8:13:d9:a5:d9:16:
                    d1:1d:6b:47:4e:79:cd:f4:42:a5:a3:31:2e:6a:0f:
                    70:60:65:2d:64:b9:17:2f:9a:1b:a5:be:aa:bb:2f:
                    cd:fb:78:bb:8a:18:f2:93:61:60:44:17:b9:59:f2:
                    7d:6f:5e:3d:f5:bd:64:5d:c8:0b:13:50:f6:e1:d6:
                    46:a6:2d:02:73:9d:1a:de:4b:a2:3b:c1:df:d7:14:
                    c9:12:01:6d:d1:c8:8c:fe:ea:6d:04:28:3c:8d:9f:
                    b7:2c:90:bb:40:a6:de:85:8f:1b:04:63:61:05:44:
                    bf:9c:f6:89:4d:e7:8d:84:60:98:7b:c2:05:d8:96:
                    07:33:01:b4:0e:91:a4:f4:13:8f:ba:32:15:5f:63:
                    b2:dd:0c:8b:83:0d:87:54:6c:a2:02:19:ce:31:ba:
                    e2:d4:30:9d:d7:23:3c:30:8c:12:91:0d:42:27:6a:
                    2f:34:bd:38:92:68:72:8f:8d:79:bd:92:05:7a:4b:
                    92:26:22:84:3d:f8:5f:76:0d:17:3d:cd:cc:5f:87:
                    c3:51:d4:0c:7e:ad:00:bb:d7:71:39:3c:e2:ba:78:
                    2e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:82:32:79:05:6C:C3:56:BB:C2:94:E8:C9:06:4B:0E:9A:1F:B7:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ae13747-341b-3adc-907a-625b8c3bc8ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.10.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:26:04:9c:e3:6e:5d:b2:65:c4:14:ee:2b:3a:63:74:0a:ec:
         1e:9f:d5:de:36:9d:d7:9d:4b:b2:9a:00:30:97:f8:0c:99:2e:
         c6:4e:da:a9:3e:7c:0b:2a:86:f1:e9:85:12:c7:00:d1:44:3f:
         63:42:9a:f2:ed:1e:d0:2e:9e:bc:d4:c2:48:ff:cf:a1:19:f7:
         2a:76:a3:0d:6a:aa:04:7f:55:91:2e:0e:c7:90:58:9a:45:00:
         44:1a:8a:82:43:9c:e5:a9:a9:e7:33:d8:8f:ab:8b:cf:d5:eb:
         58:25:ab:74:86:52:2e:7f:d5:4d:17:38:87:b3:16:b6:48:52:
         4d:cd:37:a1:f3:8c:33:11:0b:5e:5a:b8:15:61:53:17:50:31:
         c9:55:3b:e3:ee:e6:95:3d:8f:9d:c1:57:ee:ee:4a:5f:e9:fb:
         37:ac:c8:01:a2:26:b1:b4:bb:00:f3:1b:ed:c3:2b:aa:a4:cf:
         3e:2f:fa:72:65:c1:48:fb:81:d9:1d:16:f7:dc:2c:dc:eb:3a:
         ea:60:68:14:29:7c:e2:4b:32:9a:fc:f8:9f:c2:40:71:cd:2e:
         70:d1:33:e5:a5:2a:de:1e:f5:6d:ec:b1:eb:c7:3d:d2:0f:81:
         5d:02:be:58:73:e7:96:ad:3f:6f:87:94:62:ca:6b:b3:7a:37:
         84:c0:7b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:50:02 2026 by rpki-client