Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b53eb26d-9d66-3d47-855d-235fa554a86c.roa
File:                     b53eb26d-9d66-3d47-855d-235fa554a86c.roa (raw, json)
Hash identifier:          87Efeds3oc9O610h+/Z0/mKbJ4re3yuwM3sWLoVsZPw=
Subject key identifier:   5F:DF:98:97:16:25:A6:4F:77:43:A9:D9:F0:0F:27:C4:C1:00:E2:48
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F3138F7430478B2CE9009C5A0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b53eb26d-9d66-3d47-855d-235fa554a86c.roa
Signing time:             Wed 16 Sep 2026 08:44:50 +0000
ROA not before:           Wed 16 Sep 2026 08:44:50 +0000
ROA not after:            Tue 15 Dec 2026 09:44:50 +0000
asID:                     218797
IP address blocks:        170.130.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:38:f7:43:04:78:b2:ce:90:09:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 16 08:44:50 2026 GMT
            Not After : Dec 15 09:44:50 2026 GMT
        Subject: CN=7ca2b561-cb02-487a-9598-8b9cdbd3b6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:9b:c9:52:de:17:1f:c9:80:1f:f4:f4:67:
                    c3:41:09:b7:44:8b:8a:47:3b:72:b9:57:21:7c:b6:
                    c2:aa:34:90:b0:65:b3:d0:f2:70:12:e0:19:45:66:
                    0e:08:98:2f:ad:d2:05:a5:3f:2f:83:3d:f8:f3:8d:
                    a3:ba:81:2d:92:28:5b:2b:26:53:32:9f:8d:a6:66:
                    9b:79:97:c1:05:41:92:9c:25:8c:e5:66:c9:ca:e6:
                    6a:57:b3:a8:c1:41:c2:8d:23:c1:8e:48:f9:20:0a:
                    db:19:b0:0f:44:58:e0:5b:00:17:33:a1:5c:64:df:
                    a1:c0:ed:aa:c9:57:be:da:7a:ed:73:48:36:cc:9d:
                    3b:87:dd:b5:70:f7:26:08:a6:b8:71:6b:18:b6:63:
                    4d:68:8f:8b:9d:1f:eb:15:2c:cf:b9:ca:1f:d6:e7:
                    6d:2b:26:2a:e1:e0:e9:b7:dd:c6:62:42:3c:d8:78:
                    1c:1c:59:83:df:ce:cd:41:6f:a4:48:36:20:03:c4:
                    97:f2:b0:35:99:82:23:2d:80:e6:25:d6:13:57:30:
                    1e:02:6a:08:48:ad:1e:0d:44:d7:4d:f4:ca:16:f6:
                    a5:6a:a5:30:7c:f6:d9:a5:00:90:91:ba:95:93:46:
                    fd:62:c7:52:cc:b1:e7:3c:5e:d3:a1:b5:01:52:dc:
                    ea:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DF:98:97:16:25:A6:4F:77:43:A9:D9:F0:0F:27:C4:C1:00:E2:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b53eb26d-9d66-3d47-855d-235fa554a86c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8c:fc:11:ad:01:cd:2a:43:d6:c0:81:5a:7b:a7:e0:10:db:
         f4:5c:4d:26:d7:cc:51:6c:ad:74:3c:d5:8f:f3:17:eb:f3:23:
         e5:2a:c1:ff:f8:c1:09:aa:93:6d:34:25:09:7c:0c:b4:f2:f4:
         db:12:6d:eb:64:10:f3:29:dc:db:55:4c:7d:0f:0f:a1:c6:b0:
         01:a3:51:80:54:ab:19:c1:1f:25:ad:79:5c:ef:e2:e6:cc:80:
         c8:39:c5:f4:9b:26:16:60:43:a8:9c:f0:3a:a4:24:c2:72:f9:
         9f:96:27:9d:de:9b:73:fd:df:57:3b:08:43:4f:e4:2e:a4:cf:
         3d:55:4c:9b:22:71:ca:bb:8a:84:37:1b:f9:c6:92:df:91:cf:
         3b:db:49:a8:fb:83:1b:d0:28:27:48:bc:4e:59:79:7b:14:89:
         25:2a:2a:4e:84:33:a8:03:3e:42:2d:8c:4b:13:37:fd:52:5a:
         65:4a:66:c9:8a:1b:a1:32:b4:a9:f4:23:c6:59:89:ac:49:3b:
         d7:f9:6d:7d:d6:72:64:89:4a:78:fd:71:c2:c1:0a:77:71:ae:
         3f:e0:b7:d3:25:c7:7d:cd:ba:34:02:8b:a8:d1:fb:25:7a:e7:
         18:da:a5:4e:a6:3a:d5:3f:33:35:7f:36:8a:f9:a8:ca:f2:91:
         94:09:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:26:13 2026 by rpki-client