Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/ce2757a3-5b67-326d-b200-12e94dccea02.roa
File:                     ce2757a3-5b67-326d-b200-12e94dccea02.roa (raw, json)
Hash identifier:          piI4uj+6c5ex1C6qaJH9WG5N9FK0ao+EH6LYIftlQ/0=
Subject key identifier:   47:F9:45:46:71:2C:EA:9F:F6:40:61:B6:BB:74:11:CE:C3:05:59:83
Certificate issuer:       /CN=978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9
Certificate serial:       010D0C9F4328584FCCC6817096F06995B4B0BC40
Authority key identifier: 4D:27:EF:33:4D:07:6A:91:5D:C7:56:79:D0:3B:B7:A2:B5:40:56:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/ce2757a3-5b67-326d-b200-12e94dccea02.roa
Signing time:             Wed 11 Nov 2026 02:00:12 +0000
ROA not before:           Wed 11 Nov 2026 02:00:12 +0000
ROA not after:            Tue 09 Feb 2027 02:00:12 +0000
asID:                     396982
IP address blocks:        162.216.248.0/24 maxlen: 24
                          162.216.249.0/24 maxlen: 24
                          162.216.250.0/24 maxlen: 24
                          162.216.251.0/24 maxlen: 24
                          162.216.252.0/24 maxlen: 24
                          162.216.253.0/24 maxlen: 24
                          162.216.254.0/24 maxlen: 24
                          162.216.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:cc:c6:81:70:96:f0:69:95:b4:b0:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9
        Validity
            Not Before: Nov 11 02:00:12 2026 GMT
            Not After : Feb  9 02:00:12 2027 GMT
        Subject: CN=e9f1f709-a433-418a-be62-985b64820f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:07:50:bb:ed:9f:0c:2a:26:fa:3d:c6:52:44:
                    19:d6:1a:de:f2:fc:d2:ba:d8:76:f5:f5:c4:6d:02:
                    08:48:b4:8a:26:80:73:c2:87:a3:c3:7f:37:fa:32:
                    08:9a:0d:70:2a:aa:b9:e4:35:67:ee:b7:cf:33:e4:
                    52:15:14:16:68:f3:d4:49:8b:eb:1b:35:99:eb:85:
                    38:de:85:92:e4:58:29:7b:5f:1b:e9:b0:c4:69:c5:
                    0c:aa:4b:cd:81:f6:b6:ea:6b:99:d8:03:70:d3:ff:
                    37:13:4c:b4:53:42:5c:d2:32:bc:7b:9e:25:c4:43:
                    2e:db:eb:ed:5c:1c:07:78:95:4f:fd:67:c5:2e:f2:
                    7c:34:06:68:dc:bd:fa:b6:70:d8:32:f4:3b:c5:37:
                    18:7f:ed:4d:e3:ff:4a:ea:5f:36:d0:42:59:54:80:
                    47:ac:e4:5e:9b:e0:42:aa:d1:8d:53:a9:bb:7e:98:
                    e4:1a:84:05:8f:32:b8:23:be:36:b0:63:e5:6a:f1:
                    c6:f4:64:5e:11:90:28:ca:e5:ed:8a:c7:31:03:54:
                    c0:c4:da:75:af:d9:f8:3c:b0:a8:22:ee:fb:16:e3:
                    bf:59:f1:38:41:38:d1:86:08:d5:97:eb:06:3a:86:
                    43:f0:b9:00:8f:77:e1:03:82:cc:d4:d5:77:65:c0:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F9:45:46:71:2C:EA:9F:F6:40:61:B6:BB:74:11:CE:C3:05:59:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/ce2757a3-5b67-326d-b200-12e94dccea02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:27:EF:33:4D:07:6A:91:5D:C7:56:79:D0:3B:B7:A2:B5:40:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a6:5c:8b:11:d1:64:e6:36:23:70:10:a5:bb:6f:7c:8b:55:
         72:33:31:52:b8:45:19:c5:37:60:28:39:6a:ee:72:c3:06:80:
         60:c9:63:78:f1:1a:87:af:6b:00:3c:e9:da:64:67:5b:cc:f8:
         29:2f:a1:a4:3b:7c:25:da:ad:93:03:0e:11:b3:24:ea:90:e8:
         1f:fb:26:fd:99:9c:c3:a0:1c:f6:db:9b:40:d6:bb:d7:f0:e2:
         92:6e:20:40:a5:9e:0e:74:56:d9:01:7a:22:01:09:84:3c:28:
         5b:ad:6e:bb:04:5a:f3:6b:5f:60:b3:0f:12:14:30:94:ed:b2:
         10:20:91:6a:34:a2:ed:84:d3:7a:50:30:33:8e:91:41:b0:20:
         da:0c:48:c8:f0:90:6a:cd:8b:98:64:c8:e4:d0:be:40:6b:0d:
         3f:e3:d6:8b:bd:05:be:64:9c:e3:f0:57:94:99:b1:a3:f4:36:
         df:b6:0e:35:67:bd:01:ae:30:b9:4c:39:86:e4:6c:80:dd:89:
         f3:93:cb:41:40:6a:7a:46:6c:89:ce:37:9b:1e:d4:90:16:b6:
         12:c2:74:f0:91:2d:64:04:ca:ae:af:94:8a:04:9b:77:a7:77:
         a5:3b:b9:55:b7:e7:7b:05:43:c3:aa:11:58:8d:10:04:d7:6b:
         58:56:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:36:09 2026 by rpki-client