Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d6ce1cc8-4ebe-33cd-b7d7-6dca45f342dc.roa
File:                     d6ce1cc8-4ebe-33cd-b7d7-6dca45f342dc.roa (raw, json)
Hash identifier:          hccLjW5DbZX/5goiKiPwKCB2ulPjaIcnnNsgg7DLSLU=
Subject key identifier:   A0:B2:A0:C8:C9:A5:4D:BE:66:AC:1E:23:7E:3D:A0:49:41:78:EB:F0
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F31B7BA0A694D5B36F6E1B600
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d6ce1cc8-4ebe-33cd-b7d7-6dca45f342dc.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     63023
IP address blocks:        170.101.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:ba:0a:69:4d:5b:36:f6:e1:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=46bad4d1-4feb-4726-8f5f-fbf19eb7de7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:19:40:d2:a5:3d:02:13:98:d1:6a:da:4e:
                    c4:bf:51:bf:e4:d3:1a:c1:83:26:98:96:59:60:7d:
                    5b:e2:f2:50:76:88:4e:89:3a:20:e9:6e:e6:ff:b6:
                    b4:d5:89:3e:dd:3a:29:28:fb:03:39:f0:d1:73:05:
                    fb:d3:ac:92:2f:8a:31:1d:d9:0a:18:40:2f:16:23:
                    92:2a:a1:9a:2c:0f:10:97:3b:88:1e:67:bc:f2:c8:
                    f2:ac:85:54:76:da:af:78:8f:f5:18:55:b2:c0:4a:
                    e9:a2:5d:6c:24:2b:ed:29:d4:df:07:9c:39:ea:04:
                    1b:ad:6e:6b:79:01:d5:57:65:20:c6:4c:9b:a6:1a:
                    6c:67:dd:60:5f:32:fb:c8:a4:0a:ea:2d:70:39:e4:
                    1c:eb:c2:17:3b:f8:0a:60:29:3a:40:06:84:56:5d:
                    9b:d2:48:53:a6:9a:a7:5b:2e:b4:4e:41:34:19:4d:
                    1b:5a:1f:01:87:4b:f6:e9:4a:b3:a4:31:57:f7:81:
                    64:66:7c:29:96:22:b0:98:8d:82:c2:05:86:90:38:
                    15:e1:d6:ae:44:4c:77:a2:4d:6e:1c:05:b0:2c:7d:
                    1e:c4:a8:1e:25:32:be:b2:3e:4b:8b:17:55:dc:ca:
                    72:0a:e5:e7:1b:06:78:bd:3a:97:15:60:d5:0f:bb:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B2:A0:C8:C9:A5:4D:BE:66:AC:1E:23:7E:3D:A0:49:41:78:EB:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d6ce1cc8-4ebe-33cd-b7d7-6dca45f342dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.101.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:7c:73:f9:3d:10:0d:f8:35:1d:84:04:18:9d:d8:ac:9b:
         08:27:06:32:dd:52:1d:ff:e5:d0:a6:a3:a4:f8:76:f6:00:df:
         34:c5:c8:e5:3f:f0:87:72:55:4f:53:0a:dc:88:e5:c3:6d:db:
         23:65:47:30:7c:f6:54:bb:2f:8b:97:f7:a3:d5:7a:9a:7d:73:
         ad:65:46:77:01:9c:e3:43:71:e2:16:3b:c8:86:89:bc:36:ee:
         e5:d1:b7:d6:24:0c:3c:aa:e7:72:73:20:02:fb:c4:9b:fd:3e:
         f1:58:3e:f8:09:7a:3e:2f:c0:09:38:97:1d:e2:1e:d8:49:30:
         d8:86:14:6d:ce:a2:bd:41:bb:8e:16:da:ee:96:52:18:9b:b7:
         45:2a:e4:4f:ae:5a:d8:00:0e:2a:39:4c:9f:c7:38:50:96:2c:
         3d:73:84:4f:8d:e1:b5:07:31:fc:a7:28:ff:46:ed:f3:08:40:
         d8:81:00:cb:63:a8:fd:27:2d:a6:5d:27:e0:24:8c:03:a0:eb:
         1f:7d:9b:91:40:af:d6:71:e8:28:b4:2d:38:77:62:ad:a4:af:
         ba:38:20:a3:4d:8f:bf:b7:53:e0:d7:e7:7b:94:45:f7:01:7f:
         19:9d:af:61:7c:59:dc:7c:30:12:06:f0:39:60:f5:93:d0:43:
         1a:14:f2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:53:36 2026 by rpki-client