Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e987f728-699b-3838-bdfa-09a58919a9be.roa
File:                     e987f728-699b-3838-bdfa-09a58919a9be.roa (raw, json)
Hash identifier:          W5DFaFd1vJutaPZZ9byvNIlQr8tjtW2AP+HHgkoSRqQ=
Subject key identifier:   00:C7:D3:47:8F:31:D7:9C:EC:49:D9:69:71:C8:62:8E:2E:40:CC:1C
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F49747C5A2730CBF4B101C800
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e987f728-699b-3838-bdfa-09a58919a9be.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        204.155.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:7c:5a:27:30:cb:f4:b1:01:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=91308e78-294c-448a-b13c-55d3cb1d0851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:db:81:e1:60:b3:bb:6e:53:95:58:f6:ce:
                    c6:19:c0:62:ce:6d:68:18:7e:b8:ba:9b:bb:b7:43:
                    6a:7e:2f:d6:29:dc:e4:ab:48:51:b0:0e:a1:a0:5f:
                    99:89:7d:01:55:c1:57:74:7e:76:19:7d:be:97:37:
                    8e:07:85:cc:37:8b:69:d7:64:49:07:b7:60:5c:6f:
                    f9:3f:0c:ca:9c:6f:c5:88:a3:90:a3:81:74:b8:7a:
                    e8:08:d4:3b:9d:22:47:c6:0a:93:fc:4c:96:bb:06:
                    75:00:ea:48:55:48:5d:eb:a6:57:db:e1:3d:54:3c:
                    0f:f9:0d:16:e3:51:b7:90:f8:b6:1d:c6:8c:98:ca:
                    f0:9d:54:2a:90:4d:38:1b:ff:17:32:a9:ab:62:7f:
                    7e:62:5b:af:d8:fb:f5:7a:ea:00:42:fe:9d:73:75:
                    43:d3:2c:ee:8d:74:89:c8:7a:d0:ad:ce:ce:e1:64:
                    a2:ef:02:d3:cf:78:46:33:55:b0:df:84:23:c8:35:
                    6d:6d:a3:4c:07:3f:de:41:68:c0:e9:be:52:84:c1:
                    c6:08:d5:40:d3:c4:1b:d5:ae:18:ac:21:bc:72:bb:
                    31:bb:87:62:a2:bd:28:9f:86:f9:25:f9:7b:d0:bd:
                    68:27:ef:b7:53:a3:85:c5:f3:9e:a3:0b:b4:b1:0c:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C7:D3:47:8F:31:D7:9C:EC:49:D9:69:71:C8:62:8E:2E:40:CC:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e987f728-699b-3838-bdfa-09a58919a9be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:9d:3f:96:ce:f8:e4:0f:50:58:71:7a:3b:b4:ca:e9:8b:df:
         ed:73:c7:25:55:42:59:bf:85:ec:a0:40:b3:55:27:9c:da:07:
         ff:47:35:ba:11:46:13:5b:7b:fb:64:b8:a2:e8:40:33:76:3b:
         68:60:73:57:42:72:6c:e9:af:ae:c0:61:db:5e:6c:8f:08:92:
         bc:d9:77:26:fc:e9:94:99:16:ac:1a:cd:c0:5c:88:e6:6f:54:
         4c:3e:f5:44:c2:43:42:f8:fb:b5:82:b2:8a:6d:5f:04:82:87:
         ce:de:2a:8e:6d:34:d1:80:f9:28:49:22:f4:30:a1:d7:e5:99:
         b6:76:f8:c2:cd:d2:c6:1c:07:a4:40:fc:ce:98:2d:ae:cc:9e:
         d4:e6:e0:88:23:c3:19:4d:e2:96:43:75:e8:91:f1:6c:4c:44:
         69:5a:af:ec:fc:5d:94:39:ea:61:95:9a:a4:b9:21:43:86:68:
         3f:0e:d2:ad:71:6d:60:fe:38:19:a1:ec:08:7c:36:33:a8:00:
         62:d9:2a:38:fb:aa:73:c2:a2:1a:99:6e:98:69:ce:9f:6c:fb:
         f3:69:06:c7:d2:e4:0a:a0:8b:60:c5:13:f4:97:89:e8:f0:44:
         43:a3:db:67:53:33:c6:6f:a2:86:1b:7a:5b:0a:5b:40:2c:b7:
         be:b8:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:13:34 2026 by rpki-client