Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/255fd0e2-c0e8-3dbf-afc2-fbb57076182d.roa
File:                     255fd0e2-c0e8-3dbf-afc2-fbb57076182d.roa (raw, json)
Hash identifier:          vUBMxXqgzGgl8ekQct41zO1BC5MunPq9zoqf5zke5k0=
Subject key identifier:   B7:88:C1:25:8A:D0:30:3A:70:A0:73:6F:A9:C9:0E:C7:AF:FD:15:EB
Certificate issuer:       /CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
Certificate serial:       010D0C9F4328584F34826C60C88003E30387ED00
Authority key identifier: 87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/255fd0e2-c0e8-3dbf-afc2-fbb57076182d.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     25623
IP address blocks:        162.219.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:6c:60:c8:80:03:e3:03:87:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=cafd7ed8-9e0f-4360-9a65-c4da036d1b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:95:6d:13:86:97:f6:de:c9:41:10:8e:bf:57:
                    63:b1:a6:aa:3b:82:2b:cf:63:7b:2e:2d:81:32:ea:
                    d4:7e:34:c6:6d:49:03:2a:6b:a3:6c:7f:5f:51:72:
                    19:07:83:c9:17:06:ba:03:81:06:89:bd:b0:17:3a:
                    83:d0:ad:fc:d3:99:40:54:94:b4:5b:67:7d:2f:75:
                    f1:2f:89:8a:f8:17:84:2b:f6:4a:1f:95:20:eb:34:
                    2e:c2:1a:a5:06:97:44:9a:f2:93:a3:3c:ae:2b:47:
                    70:8e:74:36:8c:aa:6c:47:e8:a3:e4:fa:17:dd:4e:
                    bc:de:df:56:9d:dc:22:67:91:d5:3a:44:24:f8:cf:
                    36:40:56:c2:25:e4:3c:f4:82:3c:83:ee:97:78:03:
                    82:35:1d:88:26:dd:13:3e:fc:2d:01:b7:68:03:f6:
                    ee:a8:52:8f:d2:e2:86:fd:0a:1c:c2:0f:45:5d:70:
                    ed:35:ab:00:f7:76:7b:52:bb:d2:b6:43:83:9b:c2:
                    25:ae:6a:15:e0:81:d1:48:22:37:da:19:52:1c:66:
                    00:2e:1f:4d:6c:7a:4a:76:d4:68:ce:c8:70:52:e8:
                    85:e5:20:d5:7f:50:74:59:9c:1b:48:c0:36:93:09:
                    ac:c9:07:af:83:ec:94:c7:7c:1b:c3:7a:6a:dc:8b:
                    4e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:88:C1:25:8A:D0:30:3A:70:A0:73:6F:A9:C9:0E:C7:AF:FD:15:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/255fd0e2-c0e8-3dbf-afc2-fbb57076182d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl

            X509v3 Authority Key Identifier:
                keyid:87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:c9:e1:82:f9:c7:8b:11:83:70:4b:20:79:a3:eb:c2:bd:c3:
         93:40:c3:0a:99:b1:ff:9f:f9:3a:04:a2:7e:29:5c:ec:47:d5:
         ee:d2:9f:7e:66:15:10:76:dc:c0:52:0a:59:c8:53:a4:87:1e:
         e0:8e:42:ef:1e:c1:53:56:9f:c8:7e:f2:ee:14:a5:40:cb:4d:
         64:3f:71:f5:2e:2e:20:f6:ac:6e:53:fe:d8:45:d0:30:df:9b:
         0d:97:16:33:3d:f8:ae:ef:d4:48:cc:13:05:da:6b:3c:d8:59:
         ae:fc:b7:d3:a2:05:10:48:0b:a8:40:73:f1:66:12:91:4f:10:
         5e:de:88:97:78:f9:b1:38:a7:3e:03:69:b9:8c:c5:9a:68:67:
         33:6f:eb:20:31:c3:14:48:e1:98:50:d7:21:d1:59:ec:a8:ef:
         d2:3f:d7:fe:97:68:12:52:57:07:f9:95:9c:2b:67:44:72:da:
         23:e1:08:5a:91:bb:3d:27:0e:53:4e:0c:0a:fb:43:8f:27:59:
         eb:be:45:6f:79:9b:99:af:76:a3:2f:83:72:a0:25:e1:31:c4:
         0e:b6:ac:61:02:cc:4b:13:09:37:83:69:e4:43:72:eb:32:51:
         6d:b1:c9:8c:7b:38:d9:df:e3:25:da:10:98:50:5b:ff:f9:ac:
         bb:e4:c2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:22:00 2026 by rpki-client