Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
File:                     0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa (raw, json)
Hash identifier:          XLsiLXax3PD1IANRVteG43cBYJ011kbptnIdZqCnqPY=
Subject key identifier:   D0:1A:60:32:E7:CE:DA:9B:16:29:13:62:8F:9B:9F:63:45:FA:0D:6B
Certificate issuer:       /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial:       010D0C9F4328584F497635973710E25814623E80
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26356
IP address blocks:        91.106.220.0/22 maxlen: 24
                          204.52.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:35:97:37:10:e2:58:14:62:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=16367bc0-a966-4941-bac1-7554c6468e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:69:98:95:0b:4d:0f:54:02:1e:65:c1:94:
                    97:61:ed:ce:3a:3c:57:fc:3e:5f:3b:cc:e4:02:42:
                    2c:3f:61:c0:72:a1:b0:5f:31:4d:f1:75:d5:88:04:
                    f8:a3:a9:aa:63:c5:30:6a:cc:fb:9c:3c:8d:fd:40:
                    7c:d2:c1:34:ed:85:ea:78:b7:30:d7:58:b1:15:a3:
                    51:db:e2:77:17:b3:c7:4c:da:92:88:4d:ba:c2:96:
                    3d:7f:07:e2:e6:86:38:ad:29:ae:03:68:ae:bf:8c:
                    6c:30:aa:e3:d7:a3:41:38:dc:38:2a:b0:68:f3:53:
                    7d:11:63:dd:e0:a0:6f:e8:63:e4:e4:2d:0c:5b:21:
                    b8:23:e9:ae:ef:aa:ff:1b:5e:38:cc:6c:c5:b2:b6:
                    81:4f:0d:c3:2e:af:be:75:f5:7a:98:33:6b:8d:80:
                    b4:48:1c:cb:27:c6:28:af:68:58:4c:8c:3a:15:a7:
                    63:d9:60:29:07:4b:dd:88:0b:41:7e:2a:85:64:69:
                    d2:95:7f:3c:67:12:5f:84:f1:b6:41:b6:6a:c3:5f:
                    48:b2:b5:a1:9a:c1:ca:c2:ca:db:c1:e6:08:78:d9:
                    9e:0c:72:82:cc:cc:fd:55:67:d5:f2:1d:3c:82:0d:
                    52:cb:5b:81:c8:a4:89:e0:08:35:5d:93:8f:ea:0c:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1A:60:32:E7:CE:DA:9B:16:29:13:62:8F:9B:9F:63:45:FA:0D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl

            X509v3 Authority Key Identifier:
                keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.106.220.0/22
                  204.52.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e9:20:76:98:00:7f:7b:23:f4:03:6e:b3:59:55:38:1d:90:
         c4:b8:ce:94:1b:df:19:09:36:89:87:28:0f:16:32:65:3b:08:
         17:07:d6:3e:d9:0a:a4:33:96:c3:bf:32:d5:c1:9c:d1:68:85:
         e1:a4:88:47:94:c8:73:8b:a1:e3:a0:84:e6:94:81:1f:0f:20:
         36:bb:5e:71:13:e4:92:42:34:e7:75:e1:3a:42:3a:7f:35:37:
         35:91:a1:1a:c0:c7:6b:71:d0:39:c3:df:71:38:23:b8:bd:d9:
         0d:8f:b9:20:48:fb:aa:47:36:91:8c:1d:8e:95:f3:1b:84:80:
         34:fe:ab:7c:87:c1:87:f4:09:a8:1b:57:33:dc:07:45:3b:47:
         75:54:0f:06:2b:a9:b1:98:05:18:77:51:46:6d:5b:52:d0:62:
         66:f3:f7:33:66:f9:62:c6:8c:50:7c:ed:b8:82:0d:20:a7:7e:
         1f:40:52:3f:84:97:b7:08:4d:89:20:67:d1:4a:d6:c2:7b:d2:
         64:fa:0b:e4:09:01:ad:c4:30:c4:da:98:7c:bb:8e:38:24:11:
         37:a5:3c:3c:ec:97:1a:9b:0a:fc:14:c4:07:7b:c9:6b:b7:c4:
         fa:29:c8:5f:03:9c:3d:ed:fa:34:d8:0b:bf:9e:b3:b8:dd:81:
         35:56:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 23:20:05 2026 by rpki-client