Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/b3a343da-d267-3e5a-ad11-e1cd417c2011.roa
File:                     b3a343da-d267-3e5a-ad11-e1cd417c2011.roa (raw, json)
Hash identifier:          Tp8BRIxYozQLyrs80iWRHA8gYu3Hm3WP2AkJ5JEcIHw=
Subject key identifier:   BC:43:5F:65:23:9E:5F:4E:EC:9C:DC:E7:34:06:C4:FE:6D:D4:10:39
Certificate issuer:       /CN=7997a51b-ca8d-4bb7-a3e4-7db0ea68690f
Certificate serial:       010D0C9F4328584F9A6862F00F77D5AFCE48B880
Authority key identifier: 53:A6:C1:14:E6:5F:FD:B6:57:2D:DC:BA:8A:87:9B:51:E7:03:67:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/b3a343da-d267-3e5a-ad11-e1cd417c2011.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     1239
IP address blocks:        167.14.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:62:f0:0f:77:d5:af:ce:48:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997a51b-ca8d-4bb7-a3e4-7db0ea68690f
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=c5e88d82-ffcd-4ad9-8bca-7554ef8c5101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:6a:1b:5f:f6:a1:73:56:70:4b:cb:30:d5:
                    87:3b:ce:99:58:59:c1:cf:d7:65:ae:be:0c:55:f0:
                    a1:63:ae:70:8f:0b:c9:cc:43:f8:04:ac:90:0a:3d:
                    53:11:ab:01:91:49:7f:fb:11:da:a3:54:c8:79:b8:
                    f9:0a:c6:8d:43:b3:3e:fd:0a:9f:ac:46:a9:7f:14:
                    52:21:f8:e9:b5:1a:c5:39:4f:96:1a:38:c8:52:ab:
                    ee:a4:1a:63:68:20:c2:04:48:da:4e:a8:14:4e:e2:
                    b7:70:f5:43:a1:87:67:7e:a1:8b:75:34:92:b3:52:
                    23:53:fa:8c:7f:56:e2:fd:a1:3a:dc:a3:cb:cb:fe:
                    70:ca:a4:0f:29:1a:ce:b6:0a:7c:ff:df:a7:a9:13:
                    e1:3d:ec:b2:90:4c:57:ae:a0:47:83:fb:a4:1a:a8:
                    9e:da:81:77:24:06:84:0b:3c:c4:61:67:83:e7:c7:
                    b6:8b:e3:eb:32:d1:94:4e:57:ca:89:c3:65:1a:98:
                    9e:c5:ac:b4:f3:4a:6e:24:c8:30:52:0d:23:26:e3:
                    4c:41:0f:a7:f5:63:dc:ff:ef:31:04:21:b8:19:d7:
                    1d:c7:02:39:fa:0f:17:96:2f:fa:07:59:31:8f:08:
                    7c:1a:4f:d5:8d:96:ad:1c:2e:ac:d3:c7:30:ec:3c:
                    6a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:43:5F:65:23:9E:5F:4E:EC:9C:DC:E7:34:06:C4:FE:6D:D4:10:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/b3a343da-d267-3e5a-ad11-e1cd417c2011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.crl

            X509v3 Authority Key Identifier:
                keyid:53:A6:C1:14:E6:5F:FD:B6:57:2D:DC:BA:8A:87:9B:51:E7:03:67:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.14.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:56:43:20:ba:e3:69:f2:e3:c5:85:e4:20:a5:0c:9b:36:26:
         e6:92:68:97:84:84:56:ee:df:60:5c:5a:6d:95:66:36:30:1c:
         28:76:79:41:49:b8:77:f5:8b:3d:66:bc:57:fe:b5:ac:8a:5c:
         03:2c:55:dd:1d:17:33:b5:ef:12:ce:76:12:3b:60:34:fa:b7:
         8c:06:1e:9d:6e:54:b4:56:42:65:04:b5:44:f2:72:74:90:ac:
         da:bd:d5:3c:3a:b8:98:96:ab:23:7e:8f:2b:95:99:24:56:67:
         56:d3:f9:5c:9b:21:43:4a:a3:2c:13:e8:5b:90:07:77:58:0b:
         3d:e8:ae:9d:51:92:1e:86:4d:a6:ac:e5:0e:86:00:41:0b:2e:
         df:53:95:b8:40:05:da:d6:e3:cd:f3:e5:9e:22:f9:e7:f8:29:
         07:8f:c2:29:b8:80:ce:6e:aa:d8:12:d2:25:cd:99:a4:90:b9:
         c2:b0:ad:9b:01:9b:89:60:88:1b:4b:ec:18:4c:c0:2a:2d:6c:
         37:bc:bd:1c:88:5b:c1:5f:65:b6:95:64:01:2e:b6:c0:1e:3e:
         f2:78:2c:7f:c2:ff:5f:82:97:42:3a:a8:a4:57:2a:d5:c4:22:
         38:bc:b6:73:b2:c1:2c:b6:d7:8f:e7:0c:aa:b5:1f:af:2c:61:
         2c:4b:72:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:31:11 2026 by rpki-client