Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/245456e3-b7cb-3823-8080-71839df2fcd5.roa
File:                     245456e3-b7cb-3823-8080-71839df2fcd5.roa (raw, json)
Hash identifier:          H7lPYT1I9dv7pRzYgtLFGZhSwlcetCjHfsSuZ235k6s=
Subject key identifier:   B9:6C:52:82:4A:66:07:B2:9F:6F:57:A5:A1:DB:A5:32:2B:A0:E1:FC
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584F7A4D8AEFEC03BD7CF9090880
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/245456e3-b7cb-3823-8080-71839df2fcd5.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     54548
IP address blocks:        162.222.200.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:8a:ef:ec:03:bd:7c:f9:09:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=d003819b-bd36-49f8-8078-34dcae223fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:30:df:78:01:0b:1a:da:bd:dc:b7:93:02:
                    a7:70:a0:13:1a:1b:16:6c:a2:49:da:cf:5d:9f:e3:
                    81:f9:25:58:52:5d:49:85:95:3a:aa:28:94:73:32:
                    07:89:7d:29:5e:3a:9e:82:e4:72:51:ec:8f:5a:d8:
                    81:e1:f2:03:17:6b:16:8e:92:af:e4:6e:03:7b:5f:
                    e0:53:6e:e5:15:74:94:3f:2d:ef:49:df:e7:b7:78:
                    77:1c:6e:53:cb:0d:2b:22:16:e2:b8:1e:7a:fa:1b:
                    ab:52:cb:0f:a6:3d:e9:a2:e4:1f:51:ab:67:14:91:
                    79:73:22:d2:c6:9e:e9:e9:df:02:76:94:32:65:a0:
                    00:67:82:db:f8:e1:de:9f:ed:bf:36:07:da:15:a3:
                    ec:27:64:86:4a:02:5c:ed:f9:53:96:10:c5:2c:fd:
                    f3:a6:8b:bc:7c:e5:1b:cd:78:4f:08:cf:3e:14:20:
                    e9:e2:37:1d:b5:e0:e3:95:39:a0:76:1d:eb:61:20:
                    fe:fb:2f:b4:5f:50:64:b3:bd:24:61:17:69:92:1e:
                    ef:2d:a2:97:01:ab:1f:45:ca:0a:a7:58:12:dc:43:
                    ac:c9:a9:63:93:1a:df:18:f2:8e:4c:49:c8:d4:2d:
                    c7:68:74:9a:a4:97:fb:9a:4f:53:ca:3c:15:7f:9c:
                    5e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6C:52:82:4A:66:07:B2:9F:6F:57:A5:A1:DB:A5:32:2B:A0:E1:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/245456e3-b7cb-3823-8080-71839df2fcd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:74:9b:ae:50:ad:b2:96:02:9f:8d:f8:53:01:52:87:a8:e6:
         0e:e4:a1:52:af:32:be:b7:e0:80:08:13:cb:b5:f2:a6:f1:03:
         75:f5:d0:a5:09:87:dd:4e:04:95:4b:23:f4:e0:df:4e:f0:a7:
         ab:1e:a7:fe:48:6e:57:f5:00:1d:e6:b0:e6:8a:61:86:11:71:
         6f:44:37:fc:ca:86:96:d9:4a:43:d8:21:b7:1b:7b:5e:9b:0e:
         0e:e6:9f:c6:cb:b9:53:af:7b:2f:5b:73:ff:2b:85:58:2d:a2:
         70:93:6d:e8:07:3a:a8:86:78:e8:28:32:0e:31:88:b1:cb:00:
         97:9a:1e:80:3f:52:f0:87:86:ca:0f:f9:77:3e:59:02:4d:1c:
         40:35:a1:18:b2:dd:d9:28:66:2e:72:1c:d8:ad:f9:0c:b9:1e:
         cc:5c:2a:9d:c6:d6:03:7d:20:99:55:54:6a:3b:c5:06:56:0c:
         8a:91:08:50:f8:c5:bc:c3:ee:e7:a6:74:40:d8:19:85:5e:87:
         4b:81:7e:82:f5:b5:b0:46:6d:02:d8:a4:5a:ff:af:01:81:c1:
         e7:80:5a:ae:b5:6e:81:dd:39:94:8c:32:6b:6b:86:f1:b0:d3:
         bc:d9:0b:69:bf:49:c9:48:28:70:7a:f6:0c:40:03:58:f2:4e:
         41:ff:19:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:55:03 2026 by rpki-client