Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/a6c314bc-e889-3cce-9f69-ddacebb0d2a9.roa
File:                     a6c314bc-e889-3cce-9f69-ddacebb0d2a9.roa (raw, json)
Hash identifier:          4Pswq6+nXbt+92+E251WuAQjBW2Dm3QGdVsWrGMDxo0=
Subject key identifier:   2F:EC:71:7D:1D:58:6D:9B:5C:6D:FA:7F:07:66:D5:45:4A:66:F5:E1
Certificate issuer:       /CN=c1ca327a-71b9-47e5-b718-53788c38e86c
Certificate serial:       010D0C9F4328584F067222B9AC4308C2EE3395C0
Authority key identifier: CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/a6c314bc-e889-3cce-9f69-ddacebb0d2a9.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     399821
IP address blocks:        159.112.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:22:b9:ac:43:08:c2:ee:33:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ca327a-71b9-47e5-b718-53788c38e86c
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=b1feeecf-8040-4588-8a91-6f1e57d50523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b8:14:26:69:17:da:3a:b5:70:24:87:2f:5e:
                    a9:e1:a4:4c:25:aa:11:5d:7a:8d:24:c0:88:70:7b:
                    ce:82:09:62:5a:8f:4d:31:2b:dd:9d:f4:36:d9:a0:
                    e9:b2:38:db:54:67:f0:29:e8:ac:66:29:45:27:e3:
                    17:8f:cf:cd:27:c0:65:53:e3:a8:89:24:39:05:3e:
                    bb:c7:4c:6d:12:74:4a:5d:48:1b:06:4a:33:a9:66:
                    dd:66:23:d7:92:cf:ed:56:d7:0f:3e:0d:af:9e:55:
                    eb:a5:ad:18:dc:55:69:02:9b:19:cd:8b:ec:35:fc:
                    ed:f6:53:78:82:8c:f0:cc:e6:23:46:0a:e6:ce:cb:
                    fe:f4:41:02:6f:f5:6a:16:1b:f4:ad:34:f9:ae:7f:
                    7e:af:90:00:68:23:c2:02:1d:b9:44:dd:96:7d:f4:
                    fa:44:da:01:0b:20:fa:45:c1:6b:1a:db:0d:04:97:
                    45:7b:77:c1:fe:27:d7:29:78:c2:d3:c2:00:ce:cd:
                    58:f8:9b:9d:52:12:c8:62:7f:e4:4d:28:f9:16:2f:
                    64:e8:55:67:07:83:88:b3:0f:0f:42:9d:09:c9:70:
                    39:08:82:b2:c6:35:a6:15:90:52:33:11:69:9f:a5:
                    90:e3:5a:ab:40:7f:25:17:bf:e0:c5:56:68:b9:e0:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EC:71:7D:1D:58:6D:9B:5C:6D:FA:7F:07:66:D5:45:4A:66:F5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/a6c314bc-e889-3cce-9f69-ddacebb0d2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.crl

            X509v3 Authority Key Identifier:
                keyid:CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:97:4a:31:bf:12:95:56:db:ff:c1:86:a9:5a:05:27:45:d6:
         49:49:08:89:3c:00:0a:ab:84:e9:39:5b:07:a2:1e:be:9f:51:
         33:83:ee:91:93:66:82:28:5a:2f:4e:a1:2a:fc:2d:c4:7b:11:
         84:9c:c0:ac:97:43:bb:b2:0c:64:59:30:59:bf:2e:42:ff:6b:
         d3:b1:9e:d0:6b:db:5b:fd:ba:68:3b:50:4a:e7:8d:13:e1:bc:
         ca:e9:fb:8f:12:7f:02:03:85:01:5b:a6:69:a8:6b:e9:b5:cb:
         a5:27:70:fa:d4:de:38:63:7c:a8:5d:08:6a:b4:e8:6d:40:01:
         06:cd:41:9e:58:5a:8d:30:ba:7b:8a:9f:37:ee:24:0d:f9:bd:
         61:8c:86:10:ba:b1:c6:e3:db:86:18:a4:45:ca:d3:0a:b8:e6:
         95:3e:a0:44:35:73:ea:ad:ec:c2:bc:a2:d1:eb:7f:7a:0a:d5:
         70:17:01:57:74:a6:7d:78:b6:cd:77:6a:7a:bb:56:51:e0:e4:
         a2:35:84:d0:65:7e:96:b5:4c:c3:2e:9c:d9:04:7b:9c:87:34:
         2e:bc:4d:32:37:76:6e:37:cb:14:b5:b9:e8:a2:aa:d0:c9:a9:
         0e:2d:ff:a6:e6:1b:94:e4:40:52:0c:6d:94:8b:d6:a9:01:04:
         e7:7f:55:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:38:22 2026 by rpki-client