Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5bda8be8-add7-3bce-9d6c-5d3bd3a5971c.roa
File:                     5bda8be8-add7-3bce-9d6c-5d3bd3a5971c.roa (raw, json)
Hash identifier:          6QknJZHBtOH4rDtzElcUB7K8tYV3U/mCxNWsEl3f2F0=
Subject key identifier:   70:3E:FC:B8:4B:2A:1C:6F:CA:B3:64:63:C5:7B:20:30:DF:A2:F4:07
Certificate issuer:       /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial:       010D0C9F4328584EFE1227E4CFBA8004133D9AC0
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5bda8be8-add7-3bce-9d6c-5d3bd3a5971c.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     22135
IP address blocks:        173.242.12.0/24 maxlen: 24
                          173.242.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:27:e4:cf:ba:80:04:13:3d:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=cfede268-8226-404b-91c2-77e06848cd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:2f:a9:46:d6:d5:13:2d:8a:72:ac:0c:cf:
                    de:ea:bb:d1:ec:c3:74:27:77:6e:ef:2c:01:9c:89:
                    fb:51:2b:e1:e6:b6:21:4d:89:d2:b9:ee:9a:45:f0:
                    e0:3a:72:ee:7a:f8:b2:3d:19:6a:f1:45:44:2e:8d:
                    05:2b:dd:b4:ff:c2:0f:f5:1b:c9:7e:4e:07:9d:58:
                    1a:92:5f:fe:31:cd:c0:49:7c:7d:26:d5:9b:93:6f:
                    02:4f:3b:5c:ce:90:41:62:5f:a2:04:bb:ba:94:2d:
                    1e:e2:db:d7:ef:4c:e1:ff:b9:8b:1d:f6:c7:31:df:
                    aa:6e:1e:37:a5:fb:9a:c8:0b:78:3e:a2:b0:0b:b1:
                    bb:8d:36:89:7d:50:8c:98:22:3c:62:95:c6:23:56:
                    68:ca:2b:4d:bf:09:50:ad:11:ff:6c:94:b0:8f:07:
                    51:a4:ff:ab:df:f6:57:2f:67:0d:b7:77:b6:8a:ff:
                    71:9b:3e:91:46:0b:99:23:19:53:02:dd:74:97:c2:
                    56:a5:a8:9e:d9:91:f8:c9:43:c7:5b:53:3b:f1:6e:
                    f7:73:16:aa:0f:af:97:f6:2c:ce:21:fb:2b:9b:85:
                    d2:ca:9d:60:a4:8d:cf:df:9a:e8:40:b6:9c:e9:a9:
                    0c:3d:6d:c5:68:e3:78:e0:4f:b3:fb:65:92:b8:df:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3E:FC:B8:4B:2A:1C:6F:CA:B3:64:63:C5:7B:20:30:DF:A2:F4:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5bda8be8-add7-3bce-9d6c-5d3bd3a5971c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl

            X509v3 Authority Key Identifier:
                keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:c4:82:bc:38:4a:94:bb:2a:9c:8c:66:e9:e0:3a:eb:41:
         17:b2:aa:45:c0:5d:6b:3b:27:69:9a:de:fc:ae:0a:cf:ae:5d:
         d0:07:04:6d:c0:16:8b:67:29:31:d7:90:68:73:9c:ed:38:47:
         3d:7f:61:5e:0c:f7:e8:02:05:db:bd:a3:1b:a7:ae:7e:3b:42:
         46:80:fb:11:b5:b0:c2:92:9d:81:65:3f:23:20:38:64:7f:7f:
         df:bc:18:79:aa:4c:14:b7:e1:ae:5e:64:dd:32:03:84:ac:8c:
         ea:f1:c8:6e:4d:de:c7:ec:79:b3:20:af:08:d1:2f:cf:ff:b1:
         e6:e5:cc:f2:93:81:a8:1a:73:9a:42:cf:e4:24:71:8a:33:e1:
         a4:85:60:58:1a:95:d2:df:0a:a0:a3:d3:d2:bc:7b:a2:7a:1c:
         3c:51:58:7a:bc:2c:85:cc:da:4c:aa:ac:63:18:35:ed:ef:7a:
         77:1b:ed:3e:62:4c:5e:33:f6:ea:b0:b9:34:d7:85:59:c2:67:
         50:6b:7b:95:b9:b1:d7:1e:f1:9a:c4:57:15:34:d0:ea:b9:cb:
         89:09:35:cb:06:dc:52:3d:54:b0:e9:8d:9b:b0:4b:23:ed:35:
         b5:e5:c3:d2:36:f6:c2:9b:a5:eb:bf:f0:a5:5b:e3:a8:9d:12:
         b8:7e:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:46:02 2026 by rpki-client