Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa
File:                     eb6bc177-0801-37e2-977d-c23f6a5ca132.roa (raw, json)
Hash identifier:          aA2/Vo33PsWl47BUZlPmBkj9qPXeZPz8QV3Y+BOSuCI=
Subject key identifier:   77:1A:51:8B:68:AF:21:D5:50:52:21:88:14:06:BD:19:B6:CB:B7:A2
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584F1B624B874092F6F320CCC120
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     398210
IP address blocks:        168.220.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:4b:87:40:92:f6:f3:20:cc:c1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=12168058-ffbb-47cb-b262-207083f09bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6a:3f:92:39:8c:5b:da:33:04:ff:85:cf:cf:
                    8f:f1:9c:5b:f8:49:ed:83:1a:9d:f3:8a:5f:6e:f6:
                    b6:45:ae:44:12:bd:ea:17:80:ff:6a:4b:fc:85:c5:
                    10:4e:a6:cb:8a:73:c5:c9:a4:79:d4:fd:23:b0:41:
                    a8:79:4e:49:c7:de:95:3c:6a:f4:75:16:cc:f0:c6:
                    9f:d9:fe:9e:f5:6f:e3:d4:fd:0b:e7:00:20:cd:ed:
                    d7:9c:d8:13:30:b0:9c:b8:cb:4d:da:c1:6c:e6:70:
                    78:15:7f:79:0d:e2:26:1b:45:5d:91:53:6c:40:c5:
                    56:27:1b:c3:cc:11:89:c8:ec:61:67:92:94:85:ba:
                    50:ff:a7:2b:54:b1:a8:a7:76:0a:4d:1c:0a:64:a8:
                    cb:a5:60:9d:b6:15:c1:41:cd:3f:90:3e:da:65:a1:
                    6a:0a:66:cb:d6:b0:7a:c1:07:7d:7e:ec:84:35:79:
                    9f:1d:44:5c:c0:6e:04:9d:62:6a:5e:e2:7f:be:59:
                    8e:dc:06:34:ac:8a:6d:d4:37:ef:7f:88:45:f7:87:
                    00:3e:d9:88:cf:bf:7e:55:01:57:14:df:3b:8b:ef:
                    2d:4e:19:cd:74:a8:dd:5d:92:7e:e7:5f:96:72:37:
                    a7:98:4a:35:e0:17:56:b0:b3:fc:d8:3b:4e:49:2d:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1A:51:8B:68:AF:21:D5:50:52:21:88:14:06:BD:19:B6:CB:B7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/eb6bc177-0801-37e2-977d-c23f6a5ca132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:51:c6:cd:5d:fa:27:77:0c:00:ef:6c:06:fc:4a:a9:b7:b5:
         2b:66:1a:2b:15:b5:03:8d:22:b7:00:16:52:a3:6a:4a:82:1c:
         06:70:66:cc:85:78:8c:34:d7:2f:97:dc:38:88:d8:3c:84:03:
         94:02:9e:ab:ea:8b:3f:33:b4:c0:a5:2f:2e:69:bc:fb:38:1e:
         a1:db:d4:43:f8:2a:bd:34:66:1c:20:8c:c0:9f:87:4f:0a:32:
         31:d2:86:d7:e7:f5:a4:c3:8f:ef:24:d7:66:42:09:40:eb:6c:
         62:59:cd:ae:c4:3b:b3:e3:a6:9e:e7:1f:27:1f:e5:28:ed:3d:
         71:92:4b:47:40:a4:86:e5:12:cc:8e:dc:d8:c9:de:35:dd:16:
         f5:8d:89:c6:e4:9a:4f:ba:3d:54:d0:2e:fb:47:73:54:72:eb:
         5d:9f:df:4f:9c:36:6f:30:33:e5:37:16:f0:08:ae:be:57:90:
         8f:15:ff:dd:45:3e:7d:d7:9e:92:05:c9:23:1b:0c:8e:aa:66:
         8c:73:ff:35:3d:25:fb:62:8d:ee:74:1d:80:01:ba:93:8a:2a:
         f3:bc:f8:56:2e:7c:98:ec:bd:15:f2:0d:45:41:5b:26:25:23:
         75:72:74:0f:19:42:be:90:19:9a:07:1f:5c:94:47:d8:c9:62:
         b0:87:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:08:09 2026 by rpki-client