Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ba30c62d-095e-3d52-ad78-5f04dda4b928.roa
File:                     ba30c62d-095e-3d52-ad78-5f04dda4b928.roa (raw, json)
Hash identifier:          tQFQAcHftqRvJdnC1cb6UujpAM31KA4mJjSt0R8vq5w=
Subject key identifier:   6C:0A:E4:88:5F:35:1F:4A:FE:CB:64:02:93:6C:9F:48:BB:13:D1:87
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F37C873A0926290CE48C3D840
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ba30c62d-095e-3d52-ad78-5f04dda4b928.roa
Signing time:             Fri 18 Sep 2026 17:08:48 +0000
ROA not before:           Fri 18 Sep 2026 17:08:48 +0000
ROA not after:            Thu 17 Dec 2026 18:08:48 +0000
asID:                     54641
IP address blocks:        173.231.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:c8:73:a0:92:62:90:ce:48:c3:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep 18 17:08:48 2026 GMT
            Not After : Dec 17 18:08:48 2026 GMT
        Subject: CN=656e84d9-c8f9-408f-a8ca-8e8a99dd7609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b5:ce:a1:c9:a1:9f:79:7c:15:21:d4:f0:fe:
                    81:39:94:02:06:79:5a:8d:59:e0:80:96:ae:4a:8c:
                    07:0e:f6:f9:8a:ab:25:f3:0d:b5:74:14:87:32:cf:
                    ba:e7:50:73:88:03:96:6d:9f:db:c3:85:0f:f2:18:
                    eb:4a:d4:1b:86:e4:c2:b3:ab:fe:3a:0b:29:06:0a:
                    82:fe:07:ec:56:1c:cf:4b:2d:34:08:89:4c:81:ac:
                    c0:ca:9e:3c:20:aa:e7:6f:ac:5a:6c:5a:99:27:02:
                    79:0b:96:e6:95:4a:74:fe:60:72:b2:4e:aa:aa:6c:
                    36:90:98:36:a3:35:7f:b0:dd:67:03:d4:93:63:f5:
                    f5:e9:4c:01:16:8e:5b:67:a4:c4:2f:8f:27:2a:d4:
                    d6:8f:d5:6b:56:5a:50:01:db:e7:83:a0:dd:77:78:
                    6a:10:28:2d:e5:e7:ec:00:43:08:32:02:9a:f3:2e:
                    aa:3a:68:31:02:01:16:c6:74:cb:9c:7a:23:0a:69:
                    9b:a5:d3:1d:32:b8:30:df:40:3a:5c:2d:f7:b3:f4:
                    ec:1b:a8:ab:a0:87:62:d8:23:04:fc:be:df:98:9a:
                    f2:94:46:b1:cc:c2:aa:48:3a:0e:01:1f:cb:ec:de:
                    71:c5:fb:ff:47:f0:bb:47:66:4e:11:ac:e9:13:1f:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0A:E4:88:5F:35:1F:4A:FE:CB:64:02:93:6C:9F:48:BB:13:D1:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ba30c62d-095e-3d52-ad78-5f04dda4b928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.231.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e5:d2:34:81:84:3d:92:35:b2:0d:fa:08:63:75:e0:bc:3e:
         1e:d8:d5:65:9f:c0:c1:e4:3e:c0:df:21:43:bd:6d:aa:9b:54:
         8d:21:a2:0c:7f:80:1f:7f:d1:b7:3b:98:ad:49:df:25:3a:14:
         1c:9f:d4:51:79:1a:fc:e5:7c:de:64:76:d5:46:3b:07:74:4a:
         2e:f4:a1:4c:5a:96:da:7a:f5:5a:aa:f3:40:9f:97:87:8f:a9:
         3b:fe:7c:27:cc:63:09:b0:16:93:89:2b:0e:2f:8b:9b:54:05:
         96:bd:10:c7:d1:13:88:f9:b7:66:e7:82:08:fe:41:10:95:4c:
         21:fb:a3:1f:7d:af:07:ac:99:7a:f2:88:34:0d:e6:7d:e0:6a:
         de:1c:b8:46:50:3e:6b:3b:36:92:b9:7c:d9:eb:df:83:fc:ee:
         f0:89:c4:ed:ae:e1:28:49:92:cd:31:e5:1b:46:b6:50:81:62:
         fe:69:4b:d2:50:ed:89:5b:4f:cd:b4:a4:b2:1b:42:78:83:83:
         9e:ee:1d:98:bd:f1:26:df:2f:86:95:c0:50:43:d3:e8:61:f9:
         c0:d3:41:c5:e6:18:20:ce:a4:96:eb:6a:dd:d3:3c:fc:9e:84:
         cd:d0:cb:cb:16:e3:fa:e5:ef:72:af:8b:d6:64:2b:d7:30:a3:
         38:ce:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:35:13 2026 by rpki-client