Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/de6c70ae-5e6a-34c1-ba32-0805f3d94f0c.roa
File:                     de6c70ae-5e6a-34c1-ba32-0805f3d94f0c.roa (raw, json)
Hash identifier:          9B/OJsRlNnmoJSFDJg3t8ZxtF7FqY3vSDwNJhz5SauU=
Subject key identifier:   21:64:7E:58:E7:68:E8:F2:42:C2:71:55:E7:39:12:69:6B:05:77:6C
Certificate issuer:       /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial:       010D0C9F4328584F1E2CF6C3703BE796D4D951C0
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/de6c70ae-5e6a-34c1-ba32-0805f3d94f0c.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     797
IP address blocks:        144.160.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:f6:c3:70:3b:e7:96:d4:d9:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=e09f4616-040e-4cbb-9f01-cf4d3ee33335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:22:b5:e8:f0:64:85:97:0e:41:e2:18:f2:
                    2d:16:72:19:c4:52:a1:c9:f6:0b:82:17:f8:81:d8:
                    bf:b6:a9:2e:ac:f9:0f:e1:64:bc:db:11:a2:94:27:
                    15:e8:a9:00:88:fe:ab:22:ef:43:1f:f2:b1:ed:2f:
                    a5:b4:17:31:21:c8:9a:88:e8:3a:c7:bc:46:f2:2a:
                    15:16:c2:2a:c2:6c:64:66:0c:cf:a9:ef:42:1a:b1:
                    76:e8:6a:29:58:98:d4:9e:6b:d1:5b:f1:33:d0:dc:
                    a3:ea:74:38:db:90:95:d0:44:e8:3f:12:d9:17:6c:
                    0d:e0:1b:1e:15:47:21:9b:bc:f5:1d:30:76:be:09:
                    06:c6:05:9f:76:54:4e:38:5a:51:d7:af:80:5b:ec:
                    18:6c:98:4f:41:de:7c:9e:c6:30:7f:51:ef:c4:62:
                    d2:e0:3c:52:4f:5e:6d:9b:0c:d4:62:46:83:63:af:
                    7a:03:57:58:fd:0d:42:a1:53:de:cb:7c:d4:15:a1:
                    fe:bd:4d:d7:7e:3f:e4:37:3a:bf:5d:c7:2c:3e:34:
                    2a:27:b5:63:99:87:32:14:b7:5c:8b:8f:a2:52:69:
                    1d:41:11:5b:c1:c4:24:95:a1:52:12:a0:8f:2b:84:
                    22:81:a0:b3:db:3c:dc:ee:01:f6:23:69:74:1c:6e:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:64:7E:58:E7:68:E8:F2:42:C2:71:55:E7:39:12:69:6B:05:77:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/de6c70ae-5e6a-34c1-ba32-0805f3d94f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl

            X509v3 Authority Key Identifier:
                keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.160.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b4:1b:08:43:a2:65:85:9a:a2:28:c3:2a:27:7b:a1:e3:aa:
         55:98:13:91:84:50:18:ed:e6:7f:80:c0:19:46:ed:ff:bc:00:
         e8:ab:5e:69:7a:ad:a5:4f:76:a8:cd:fc:71:ba:83:95:38:c6:
         bb:c7:50:01:b8:58:46:cb:d7:ae:90:59:22:56:ad:31:59:a3:
         7f:99:95:bc:fd:d0:b7:99:ca:74:5c:31:5e:71:63:15:0e:02:
         72:88:7a:18:ff:20:fa:f8:43:cb:5a:ce:ac:fd:17:19:cc:bb:
         3b:de:d8:23:1d:21:86:e2:08:d5:ae:b5:08:61:4f:d2:12:b3:
         70:95:8b:63:e3:91:70:e0:ac:63:f0:3b:9e:bf:13:e2:02:59:
         58:5c:e9:f3:93:b2:77:f7:c3:5e:8a:8c:6f:eb:bc:7d:6c:a6:
         81:9b:db:d1:dc:2b:0a:60:5c:87:81:e7:d1:95:4e:45:e4:5f:
         cd:2f:04:33:aa:8b:21:ed:f1:c7:44:00:72:4f:f8:be:98:f0:
         e8:75:4a:ae:4b:e2:c5:75:69:be:11:90:fe:79:ff:55:e6:04:
         7c:f2:c3:0c:c3:28:05:fc:59:9f:1e:38:84:d7:3a:37:6b:d7:
         af:35:03:4d:3e:ee:5a:a9:5e:61:06:b0:56:5a:a8:6c:a6:be:
         29:35:22:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:55:59 2026 by rpki-client