Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/7f80c7e1-d879-357b-b391-b5a901c48fb2.roa
File:                     7f80c7e1-d879-357b-b391-b5a901c48fb2.roa (raw, json)
Hash identifier:          ZHANC6tR2Mt24E7w51l50WKbldPuUrNu64uzv51cqGI=
Subject key identifier:   25:C9:52:4C:44:70:B5:F2:23:28:F4:5D:6C:E6:61:01:E2:9F:63:6D
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584F34D1B422F8CFEB104121C4C0
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/7f80c7e1-d879-357b-b391-b5a901c48fb2.roa
Signing time:             Thu 17 Sep 2026 15:40:01 +0000
ROA not before:           Thu 17 Sep 2026 15:40:01 +0000
ROA not after:            Wed 16 Dec 2026 16:40:01 +0000
asID:                     62240
IP address blocks:        172.82.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:d1:b4:22:f8:cf:eb:10:41:21:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Sep 17 15:40:01 2026 GMT
            Not After : Dec 16 16:40:01 2026 GMT
        Subject: CN=96058dd7-c41c-470d-a6f8-9bdb060557f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:2d:81:8f:81:f2:33:83:97:d0:17:c7:a8:
                    65:24:42:ae:55:9e:f9:e9:f9:6e:de:c1:dd:28:ca:
                    12:bb:c4:75:35:7b:ca:92:0e:e7:9a:13:61:a3:7e:
                    06:fe:a2:30:ac:e1:bf:32:d2:0f:9d:9a:6f:64:b6:
                    e9:4d:e9:3f:14:ba:a1:58:eb:56:42:2d:45:e1:82:
                    91:7a:92:0c:7d:60:7d:d3:e8:d4:84:9d:f1:41:a7:
                    0f:51:ea:5f:ca:dd:2d:74:4a:5a:2d:e4:23:14:23:
                    c3:f6:4e:aa:ed:ff:53:4e:f2:4e:4a:fa:3c:87:40:
                    0a:4e:1c:f6:9f:e6:e9:1c:7d:ce:7d:6d:77:ef:24:
                    a0:b4:e8:20:15:98:83:56:49:88:8e:89:59:94:0d:
                    9b:c9:cc:f3:89:c2:88:03:a5:fd:96:91:00:a8:c5:
                    da:65:6d:2f:55:53:50:8b:b7:6e:0b:b1:83:bc:fd:
                    a4:8e:11:4a:b3:38:23:58:a2:ed:50:9d:6e:2a:64:
                    8b:d1:1b:51:bd:f8:48:f3:15:5a:49:a8:ff:af:83:
                    e9:3f:e2:ea:e2:52:7d:0c:b8:e3:d1:02:eb:3e:e2:
                    1d:97:be:27:14:52:60:dd:84:10:7a:9c:6b:af:8f:
                    1f:c9:53:e7:dd:57:91:e9:ae:ab:63:d0:03:73:d4:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C9:52:4C:44:70:B5:F2:23:28:F4:5D:6C:E6:61:01:E2:9F:63:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/7f80c7e1-d879-357b-b391-b5a901c48fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:1a:b0:50:6f:5b:62:f7:54:71:8d:80:37:81:a5:87:90:0a:
         09:eb:2d:7d:a9:fd:3c:48:75:52:a8:31:ff:16:a4:d8:b3:8d:
         88:61:26:98:e7:e4:66:bc:5a:29:55:f9:d1:39:a8:0b:c6:20:
         18:70:e1:d0:49:e8:b3:3d:9d:02:f7:a5:88:85:7f:9c:f2:a1:
         2e:36:7c:8d:38:03:d1:55:26:9f:aa:1e:c8:f9:12:34:1d:b0:
         01:f2:a6:8d:b7:5d:08:45:98:4b:79:4c:0c:df:27:80:c8:fd:
         23:77:4e:c5:c9:aa:b5:d2:1e:dc:d2:bf:1c:0b:db:90:69:51:
         ef:85:54:0d:3a:cb:ec:e6:5e:91:aa:66:2a:66:c6:8c:a8:06:
         55:19:9a:b9:dc:e8:be:08:6f:75:fb:0c:84:62:88:a2:a4:5c:
         e2:eb:9e:fb:01:c4:60:18:66:b2:2b:b6:57:8e:ed:4c:b6:00:
         32:ef:42:fa:fc:8d:d0:5e:8b:00:42:58:2c:1e:1f:bc:c6:56:
         b4:83:56:5a:cc:cb:71:bd:07:5c:30:2b:ba:6b:81:05:56:6a:
         cd:f1:79:c6:0b:e9:62:db:84:77:6f:54:f2:c0:74:d4:b1:17:
         d1:96:5d:37:68:fe:24:18:ea:2e:ba:fc:58:13:de:32:5f:3c:
         13:30:d7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:09:52 2026 by rpki-client