Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/1a456c20-ca9a-313f-8b1c-610261724796.roa
File:                     1a456c20-ca9a-313f-8b1c-610261724796.roa (raw, json)
Hash identifier:          I/cxjUyOu0TEpnP1Gex36zFf9wWoBrBjhiAq8zPfH4s=
Subject key identifier:   AD:9E:B9:60:57:B6:2B:CF:DB:CE:27:2B:97:16:00:5F:A2:46:7F:6C
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584F506D48C6CFBAEF42B3483610
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/1a456c20-ca9a-313f-8b1c-610261724796.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        162.210.70.0/24 maxlen: 24
                          162.222.225.0/24 maxlen: 24
                          162.222.226.0/23 maxlen: 24
                          162.251.80.0/24 maxlen: 24
                          162.251.85.0/24 maxlen: 24
                          199.79.62.0/23 maxlen: 23
                          204.11.58.0/23 maxlen: 23
                          207.174.212.0/22 maxlen: 24
                          208.91.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:48:c6:cf:ba:ef:42:b3:48:36:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=85739c83-a05c-4a05-9784-220875374310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:a8:76:ce:5d:13:99:86:74:b2:14:75:94:
                    e5:1b:32:ce:dc:d5:5d:05:3b:7c:2c:a7:b3:6d:7f:
                    03:f8:bb:3d:cf:a5:4f:57:bd:38:30:e3:b8:9f:33:
                    ce:89:89:01:05:92:c9:3c:6b:00:44:63:33:99:3d:
                    5b:2b:16:12:69:bb:af:8b:19:96:a1:93:f4:36:f8:
                    eb:c8:e0:1a:fa:98:4e:e6:8e:4a:26:22:a5:43:14:
                    06:bc:08:59:ee:45:95:66:61:40:7f:88:01:f9:1c:
                    5f:34:73:35:ac:ee:b0:da:a8:0c:9a:17:72:f7:fe:
                    8a:40:86:90:52:31:4c:15:57:94:bf:33:4a:fc:53:
                    bc:f3:54:d4:74:92:73:5f:cd:82:46:de:79:f3:78:
                    6b:2c:f3:88:f3:16:74:e0:a2:27:1b:7c:5e:b7:1d:
                    ee:2a:1f:40:10:9c:be:cc:0f:6a:8b:65:32:97:48:
                    d3:d8:be:17:e7:54:c4:a7:96:c5:f1:37:e3:c3:b1:
                    19:1d:fd:b5:01:5d:ed:53:c0:9f:8d:d5:17:b6:02:
                    75:74:d2:ff:c1:d3:b8:10:b3:ee:de:55:0d:a2:0c:
                    95:a9:fe:97:48:47:df:b3:06:ad:10:15:bb:88:65:
                    7f:c5:2f:99:85:f0:38:a6:6b:6d:01:f9:7d:94:ce:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9E:B9:60:57:B6:2B:CF:DB:CE:27:2B:97:16:00:5F:A2:46:7F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/1a456c20-ca9a-313f-8b1c-610261724796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.70.0/24
                  162.222.225.0-162.222.227.255
                  162.251.80.0/24
                  162.251.85.0/24
                  199.79.62.0/23
                  204.11.58.0/23
                  207.174.212.0/22
                  208.91.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:65:a3:69:e0:a3:34:f8:f8:50:53:b9:d6:a5:2b:ac:c3:ad:
         fb:0b:68:7d:d6:e0:28:90:79:1b:c3:e2:d5:79:02:fe:4e:7c:
         4e:19:c0:ca:a5:a0:da:be:2c:a2:53:81:e6:4a:be:54:67:c8:
         b4:bb:41:23:52:5e:3b:73:f0:f8:f8:d9:f9:20:48:b1:75:a1:
         f1:b1:15:a2:70:ce:2f:42:84:dc:29:f4:12:44:17:76:58:a5:
         30:e7:28:b8:7f:36:8e:cf:d2:0a:3e:07:c1:bb:37:98:cd:3d:
         ad:61:c1:76:be:bc:e8:97:d1:f4:f7:0d:cd:97:f6:0b:ec:12:
         bc:8c:77:77:c9:c0:98:1d:6f:fa:3c:1f:db:7f:cc:2c:f2:e1:
         6e:28:82:6f:da:9e:8f:68:69:f2:15:63:e7:e3:2c:5d:3f:56:
         24:72:38:bb:86:33:1e:84:9d:93:fe:44:95:5f:fe:f1:99:66:
         db:86:21:36:ad:df:97:65:ff:f8:d9:59:f2:23:3b:1f:18:02:
         91:07:81:f0:76:83:af:99:9c:da:6c:ec:b6:dd:6d:12:8a:bc:
         41:e2:4e:f5:45:9b:bb:a1:94:20:c3:f3:8c:e3:02:3d:2d:38:
         00:22:e6:20:50:80:d3:70:25:97:98:c7:25:b0:c7:05:87:14:
         15:de:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:35:16 2026 by rpki-client