Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/b3510d97-452f-34a5-bbf6-2566111278d5.roa
File:                     b3510d97-452f-34a5-bbf6-2566111278d5.roa (raw, json)
Hash identifier:          I7qF8OQanZLbF4cIWfJdWPAtMXYiUVgd08rtHLBj8u0=
Subject key identifier:   B5:C9:42:49:68:73:A0:50:DD:AB:82:2C:46:99:F8:5F:72:D9:3C:58
Certificate issuer:       /CN=1e1775ba-ce9e-4791-8e12-e05afbb9713e
Certificate serial:       010D0C9F4328584F2ABD1A9CE4E6319CB29DAA00
Authority key identifier: DD:A2:87:E5:BF:D3:2F:D1:0F:AC:E8:2C:49:1E:FA:B1:2E:C7:82:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/b3510d97-452f-34a5-bbf6-2566111278d5.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     27359
IP address blocks:        173.195.112.0/20 maxlen: 22
                          2607:5005::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/1e1775ba-ce9e-4791-8e12-e05afbb9713e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/1e1775ba-ce9e-4791-8e12-e05afbb9713e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:1a:9c:e4:e6:31:9c:b2:9d:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e1775ba-ce9e-4791-8e12-e05afbb9713e
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=9be8d4a9-c0ee-4f7d-8d50-175ec2f98c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:5c:e9:95:5b:71:26:3e:d8:18:23:6e:e1:
                    73:41:9d:94:b3:18:df:69:c0:49:9d:23:78:1b:69:
                    de:f0:7e:6d:42:b2:87:e4:1c:e1:77:99:f7:50:ed:
                    a7:63:98:57:d3:7d:e0:25:f1:5e:e6:e4:30:1d:81:
                    ed:fe:e5:3c:56:20:b6:b2:ec:57:66:3d:b5:23:17:
                    21:4a:98:74:d0:32:d4:29:be:63:f6:96:0c:85:61:
                    c8:32:41:1e:62:72:a5:3c:0f:72:d5:fa:43:3c:0f:
                    5c:8e:36:f3:59:be:23:b4:7e:7d:31:41:21:9a:7b:
                    56:b7:19:f0:30:c6:9f:aa:8f:e2:5f:a4:ec:62:f0:
                    05:ef:3d:8e:17:8e:d4:ee:06:26:ad:71:af:36:af:
                    89:ec:50:49:c1:17:c3:75:10:58:10:6a:38:0b:06:
                    2d:44:33:03:4a:3e:96:b8:a5:93:9a:11:9c:d9:86:
                    3c:7f:a3:3a:c8:83:10:24:ae:d5:73:1e:05:5c:af:
                    27:71:95:3c:cf:68:c1:7e:4b:3f:ba:fb:03:5c:84:
                    10:c5:fe:66:9e:32:31:d5:65:93:62:5e:9c:22:bf:
                    e2:ca:6a:d6:05:df:fc:5e:3f:23:ce:fc:97:d3:ea:
                    47:ca:4e:af:9c:00:8d:ae:cb:f4:1e:94:5e:54:15:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C9:42:49:68:73:A0:50:DD:AB:82:2C:46:99:F8:5F:72:D9:3C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/b3510d97-452f-34a5-bbf6-2566111278d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/1e1775ba-ce9e-4791-8e12-e05afbb9713e.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A2:87:E5:BF:D3:2F:D1:0F:AC:E8:2C:49:1E:FA:B1:2E:C7:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.112.0/20
                IPv6:
                  2607:5005::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0b:ec:96:50:c2:f1:a9:75:70:bb:67:6e:ab:25:63:e4:f3:
         13:27:b5:ef:c9:86:53:21:7d:f6:bf:61:e9:fe:9d:31:6d:49:
         f9:f3:b8:16:21:92:04:98:cc:b8:67:3b:9e:63:77:7f:5d:9b:
         a3:fa:ee:e0:ed:90:65:b8:8a:00:0f:e5:81:78:f9:4d:67:c2:
         d6:5e:5c:46:68:a0:76:da:8d:22:d8:29:e9:78:08:af:a0:d5:
         48:df:f1:2e:48:3c:e4:ea:f4:2a:40:c9:76:84:09:c4:07:1d:
         83:92:51:84:37:9d:85:8d:1b:9a:a5:48:43:c8:8b:e9:e9:65:
         11:f7:f4:6a:10:0b:a4:c0:bb:a8:3d:d3:3b:a1:70:67:23:05:
         2f:d6:af:24:8a:e6:08:55:39:4a:75:c0:6a:e0:1e:a3:c8:97:
         57:07:c3:5e:22:26:90:0d:fc:89:48:55:dc:24:68:b9:71:bb:
         8d:02:40:09:24:45:9f:61:b7:fa:dc:6c:ea:2e:b0:fd:a7:54:
         8a:14:d5:f3:94:fc:55:8c:2d:cb:b9:87:72:0a:1a:ee:4b:47:
         6e:a8:36:1b:c4:c5:92:a8:f4:8e:2d:89:74:c9:67:7e:d5:8f:
         b9:98:09:03:a1:cd:70:f1:82:78:97:2f:69:d3:2a:e5:23:9b:
         c3:57:33:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:01:53 2026 by rpki-client