Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f/04cd989a-8f36-3ead-880d-8a9d220f7051.roa
File:                     04cd989a-8f36-3ead-880d-8a9d220f7051.roa (raw, json)
Hash identifier:          H1qbfNIIHLyWM94oWvZSUbX3PTCdJheS7KPzikjkY4s=
Subject key identifier:   26:E3:92:B8:3A:30:F1:93:56:61:00:6C:E5:D7:38:CC:6C:14:7E:6F
Certificate issuer:       /CN=d90b9318-a0f1-4fd8-8491-31114b330b9f
Certificate serial:       010D0C9F4328584F5980F5A299746DB9FBAC6880
Authority key identifier: 4A:72:BD:EF:07:54:3D:54:E7:0D:B0:94:46:0D:5D:A0:D6:0C:9A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f/04cd989a-8f36-3ead-880d-8a9d220f7051.roa
Signing time:             Wed 30 Sep 2026 19:02:14 +0000
ROA not before:           Wed 30 Sep 2026 19:02:14 +0000
ROA not after:            Tue 29 Dec 2026 20:02:14 +0000
asID:                     46790
IP address blocks:        170.173.0.0/21 maxlen: 21
                          170.173.7.0/24 maxlen: 24
                          170.173.22.0/24 maxlen: 24
                          170.173.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f/d90b9318-a0f1-4fd8-8491-31114b330b9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f/d90b9318-a0f1-4fd8-8491-31114b330b9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:80:f5:a2:99:74:6d:b9:fb:ac:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90b9318-a0f1-4fd8-8491-31114b330b9f
        Validity
            Not Before: Sep 30 19:02:14 2026 GMT
            Not After : Dec 29 20:02:14 2026 GMT
        Subject: CN=566b5100-7319-4bfd-805f-73220344de78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e0:63:16:f9:57:56:b6:bb:af:b1:d2:ba:5f:
                    84:8e:27:bd:a7:52:92:59:01:ab:e2:9d:13:d9:21:
                    49:18:af:17:45:dd:6e:41:df:47:e6:d4:29:69:19:
                    15:40:10:8d:05:6b:80:90:11:99:a1:e1:22:a1:12:
                    e8:20:88:d6:84:fa:5c:c5:e3:fa:fe:5c:e7:1b:2f:
                    b2:ef:71:f8:38:4e:71:47:2a:3f:0f:f9:2b:d4:f9:
                    32:89:c0:44:e3:cc:b2:46:69:6d:9f:49:78:df:33:
                    d7:22:76:40:27:ea:58:6f:e9:d9:56:4e:55:28:57:
                    05:f0:20:fa:9a:c6:74:93:65:7a:ab:2b:4a:26:27:
                    3c:e5:ea:3b:aa:f9:81:87:cc:b2:9b:a6:bc:0f:fe:
                    e9:2c:d3:b4:18:41:3f:0f:25:f4:55:85:25:bf:f9:
                    7f:82:e4:be:99:3d:f6:16:2b:02:84:63:93:3b:5d:
                    b3:5b:60:e7:71:cb:51:0e:20:1c:82:7f:f6:56:7d:
                    59:c2:70:5d:a5:2f:94:86:2d:ea:b4:b2:97:ff:bd:
                    3e:64:70:72:1f:0a:ee:19:af:21:b3:57:96:2d:2d:
                    5b:17:76:c9:a3:ab:8d:9c:03:be:09:f0:4b:61:2b:
                    1e:a4:06:b8:33:8d:05:5c:c2:c9:38:2b:d1:6f:8d:
                    a8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E3:92:B8:3A:30:F1:93:56:61:00:6C:E5:D7:38:CC:6C:14:7E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f/04cd989a-8f36-3ead-880d-8a9d220f7051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f/d90b9318-a0f1-4fd8-8491-31114b330b9f.crl

            X509v3 Authority Key Identifier:
                keyid:4A:72:BD:EF:07:54:3D:54:E7:0D:B0:94:46:0D:5D:A0:D6:0C:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.173.0.0/21
                  170.173.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:7d:b6:0a:63:05:af:90:63:2f:e5:6d:19:31:47:04:4d:ac:
         d4:58:63:52:3d:66:05:28:2f:a0:98:90:85:e7:5b:02:43:06:
         9d:1d:d3:76:1c:a5:db:99:74:04:a2:ba:88:7f:a3:5a:34:c2:
         73:42:81:53:75:3c:31:0d:a7:36:e1:e8:c3:ae:34:71:f2:ed:
         33:f1:2d:9e:11:59:a0:6f:c9:e5:87:af:53:a1:72:2b:57:c0:
         ed:70:3a:a3:d0:06:d2:f5:44:6b:85:ec:96:07:f8:a9:6c:1f:
         bf:7d:c4:39:f9:5f:8c:57:3a:14:9f:e3:ef:16:6a:c9:98:e5:
         37:b9:9d:15:e0:77:ad:ae:b4:8f:1a:c1:10:71:50:fa:f3:60:
         6f:ed:c9:2e:36:12:1f:59:42:53:52:5c:e0:39:8a:77:67:da:
         79:05:d7:af:d3:98:2a:35:bb:1a:02:45:f6:f7:48:3f:1a:5c:
         de:68:5d:7d:1c:0b:96:87:44:2b:8e:8e:bb:b2:26:ea:53:7c:
         62:30:41:e6:4f:65:74:0d:af:2e:c9:53:db:a8:13:20:7b:4a:
         24:45:c8:f9:6b:92:e7:36:df:31:bf:83:e5:2c:4c:e2:80:50:
         ab:b7:39:56:62:64:38:8e:91:48:7a:90:52:1c:d2:88:3e:95:
         5a:1d:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:04:33 2026 by rpki-client