Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/2e5c83c0-ed6c-3094-af72-435ce5ab9766.roa
File:                     2e5c83c0-ed6c-3094-af72-435ce5ab9766.roa (raw, json)
Hash identifier:          1AP3Yyw+IqYc9rizo7qgHjHDRjM8WYhZ7ZNasfQRsXY=
Subject key identifier:   33:66:0C:B6:47:58:21:BA:11:D4:C1:2E:B2:5C:17:CB:25:0D:C0:C3
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584F0D6CDADE9DBFDAF77D095400
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/2e5c83c0-ed6c-3094-af72-435ce5ab9766.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        85.113.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:da:de:9d:bf:da:f7:7d:09:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=271c91c6-ed3b-41f0-8d24-7d163cc47b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:07:c9:9e:8f:34:e3:5c:9a:0a:a2:dc:68:
                    ee:e2:c4:56:a8:ec:ea:99:f9:6a:d9:ef:eb:68:9a:
                    38:09:ae:6e:04:00:51:67:42:96:63:bb:3b:69:29:
                    75:1f:2d:0a:d1:74:13:5b:1e:54:c1:3a:c0:ca:2d:
                    a4:9b:ae:e9:9a:e5:44:65:e9:de:37:d7:53:bb:71:
                    d3:61:fb:7d:8e:ce:e2:45:ea:0c:ee:5f:4f:ac:74:
                    c1:44:37:f4:c2:c8:f3:88:56:bd:f1:39:a6:67:af:
                    15:a4:cd:26:37:7e:62:33:37:0f:90:79:f7:d5:4f:
                    a9:78:e2:65:1d:72:02:85:43:3c:d1:32:5d:11:88:
                    18:1e:89:e9:25:b9:a6:85:d9:da:79:86:cb:12:bd:
                    93:a5:eb:f9:c6:a4:95:e7:14:5a:fe:da:dc:63:55:
                    88:46:d1:b5:42:b8:43:c1:fe:3f:86:2d:ca:48:a4:
                    1c:b7:80:73:f3:94:51:1e:b0:a3:3d:f1:fd:94:94:
                    62:96:0c:16:83:56:99:1c:b4:67:85:13:11:9b:a7:
                    51:50:75:40:d8:46:de:1b:19:c7:c0:ca:eb:2d:4f:
                    8b:21:07:0d:fd:c2:14:f8:ae:de:0b:d2:9e:bb:4b:
                    cd:40:f3:e9:c0:53:96:ae:90:1a:60:6b:b2:74:b3:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:66:0C:B6:47:58:21:BA:11:D4:C1:2E:B2:5C:17:CB:25:0D:C0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/2e5c83c0-ed6c-3094-af72-435ce5ab9766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:08:63:28:4a:ab:06:25:db:8b:c5:9b:fb:91:e1:b2:d9:
         61:46:1a:14:c7:a4:7c:28:b7:1c:04:e4:8e:96:fb:4d:50:02:
         99:ea:a2:44:6f:00:b6:af:79:07:ea:65:e1:61:56:70:c8:09:
         9b:f5:ec:cc:05:69:26:0b:6b:71:6e:df:5e:fa:f1:ed:91:aa:
         06:c0:0e:34:c4:16:f8:ec:ee:10:10:ef:6c:e2:6b:3a:cc:7e:
         dc:4b:ff:72:81:fb:4a:b0:73:d6:00:0a:7f:32:0c:de:9b:2c:
         b5:cd:09:d6:20:75:81:a3:ce:19:83:67:ef:8e:b5:41:9e:0e:
         cf:f2:72:d4:c6:7e:b7:93:db:22:52:e0:2c:89:e4:43:82:a3:
         93:de:fb:38:55:fe:1e:68:e1:f8:9f:a4:79:11:11:32:a9:b1:
         26:fb:64:bd:e8:98:a5:01:4b:b4:e6:a3:2b:f0:85:d0:b0:f5:
         fc:c5:bb:86:52:2e:6b:3d:de:5f:0f:43:06:de:f5:82:e7:e0:
         e1:66:60:af:16:64:e5:d6:54:b0:97:b1:0b:5b:a6:d4:6d:ce:
         3b:1f:35:d7:8d:94:1c:16:46:5d:a6:7d:c6:9e:75:98:91:43:
         64:96:af:ed:ac:81:ca:69:76:d8:94:01:bd:1f:c6:43:c3:e2:
         4e:b5:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:05:54 2026 by rpki-client