Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/acd6507c-4f88-3ba8-a356-fe09ba417a69.roa
File:                     acd6507c-4f88-3ba8-a356-fe09ba417a69.roa (raw, json)
Hash identifier:          pwKhfQpYGHj5eyBAVZ5Vu0/9JNbMAW/Mk9s53Fe1fMk=
Subject key identifier:   A4:D9:B1:7F:33:54:2F:91:D3:E1:52:89:3C:DB:F0:46:C6:17:40:13
Certificate issuer:       /CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
Certificate serial:       010D0C9F4328584F2D87BA55227D391C3AF6A400
Authority key identifier: B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/acd6507c-4f88-3ba8-a356-fe09ba417a69.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     40755
IP address blocks:        172.98.4.0/24 maxlen: 24
                          174.136.252.0/24 maxlen: 24
                          2606:3040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:ba:55:22:7d:39:1c:3a:f6:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=eabc4d38-0f92-47d7-a922-62f1c6b0b054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:e5:bb:b6:98:57:30:8a:a4:da:c5:03:f9:
                    f9:e0:55:34:63:7f:1b:68:ff:79:12:72:f5:cb:05:
                    20:b4:1c:2c:33:e5:49:03:75:7e:78:3b:c4:d6:78:
                    fa:77:c9:84:59:57:48:45:6f:f6:4d:54:55:d2:be:
                    cf:f7:30:92:c1:fa:5e:70:91:ff:02:8d:04:28:ed:
                    20:46:bd:f3:d6:f3:65:2b:67:b1:6c:fb:53:a9:15:
                    ba:de:43:56:4b:7b:ff:c2:c6:1a:57:7c:79:2e:4b:
                    76:76:0d:ff:a5:4f:35:30:bd:db:84:84:2f:a8:24:
                    d2:99:d8:ae:a6:de:63:ab:47:01:93:63:89:69:d2:
                    7d:6b:ad:19:cf:70:1b:99:83:73:07:8b:3d:fd:a7:
                    03:18:09:95:e2:3f:55:9c:0e:48:e0:4e:d6:d3:0f:
                    d2:70:32:60:31:e2:70:16:28:b7:40:b5:43:52:95:
                    2a:9d:66:91:d1:45:dc:7a:a7:14:a0:bf:63:96:7e:
                    a2:45:0a:65:44:5b:5c:b1:9f:c4:3e:cc:a4:bd:08:
                    07:cc:06:33:04:ed:17:11:62:fb:ad:88:0a:c5:1c:
                    3e:a7:1f:c9:b6:ee:44:a5:b0:7c:db:af:ca:19:26:
                    fd:53:23:2f:23:3a:86:9b:70:23:b5:4a:77:5e:a6:
                    c4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D9:B1:7F:33:54:2F:91:D3:E1:52:89:3C:DB:F0:46:C6:17:40:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/acd6507c-4f88-3ba8-a356-fe09ba417a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.4.0/24
                  174.136.252.0/24
                IPv6:
                  2606:3040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:84:d4:2a:40:c7:e9:12:a1:30:bc:28:55:56:bd:d1:8d:9d:
         fd:37:65:82:53:f3:84:03:a0:63:3f:a5:db:e1:e1:32:2e:58:
         1b:90:27:5d:5d:ab:1e:0e:bb:f8:fa:dd:52:8d:c7:79:1a:42:
         8e:e4:bf:a9:25:04:03:c9:0a:8d:bf:26:a1:cc:e9:6c:16:22:
         46:c8:05:11:82:67:51:9a:25:06:9f:50:39:ef:44:fa:43:71:
         e9:ae:86:9c:98:fe:b7:c5:63:63:d7:fe:bf:fe:2d:ac:7b:6a:
         4e:e2:28:98:07:08:65:91:1f:f3:c5:45:55:16:a2:0a:db:47:
         8c:14:2b:62:f1:4f:5f:6d:ef:4c:a6:57:e3:9b:70:e3:a0:f7:
         30:67:bb:2f:67:21:33:df:a3:d7:70:37:d3:21:7d:7d:5f:52:
         03:07:5d:98:7e:52:7a:ab:9d:89:e2:40:21:a1:ad:c3:88:c5:
         ab:bd:7c:90:2a:1e:8a:dd:1d:69:52:d9:ff:8d:7c:44:25:66:
         4e:d9:ae:e0:68:4c:4f:22:0b:67:19:d2:ba:29:c4:2e:c0:1d:
         a2:67:65:d3:e4:6e:fe:ec:3f:00:bd:64:e0:79:ff:eb:1f:98:
         01:8e:17:d6:f4:c1:c6:72:95:8d:97:23:a7:01:66:c3:2b:b2:
         ce:20:56:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:45:13 2026 by rpki-client