Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cc770a75-1357-30e6-a3f4-ffc0adc3cb24.roa
File:                     cc770a75-1357-30e6-a3f4-ffc0adc3cb24.roa (raw, json)
Hash identifier:          9vYxDNN9HPwD4LqSYCy53oFoZq+Lfhp/cL8bxOLoXGA=
Subject key identifier:   58:16:88:3A:FC:29:95:84:D5:A7:77:69:FB:B6:34:FD:65:D4:03:AE
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F497498534A5976806F9F3CC0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cc770a75-1357-30e6-a3f4-ffc0adc3cb24.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     53813
IP address blocks:        205.220.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:98:53:4a:59:76:80:6f:9f:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1775a4a5-7de6-4a52-8a56-a7ef238cd8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:84:14:01:3d:3a:96:7b:41:78:a5:b5:c3:
                    92:b8:e1:06:56:37:20:1e:1c:f5:a7:cd:ba:54:40:
                    0a:d0:23:ec:85:9b:f6:32:b8:af:28:3c:3c:67:ef:
                    ee:78:80:82:b0:cb:73:d3:ca:0d:1a:6b:c3:7d:1e:
                    40:e3:68:22:8e:dc:5e:f2:77:3c:08:8f:39:47:67:
                    bb:87:de:04:5c:d5:fa:53:74:98:eb:e8:b8:ea:b0:
                    03:30:cc:47:80:31:91:a9:75:dc:66:2f:bc:77:f2:
                    df:36:98:fe:1f:4a:03:ac:fc:99:c0:0f:c3:5d:16:
                    f2:12:22:64:e0:5e:a0:d3:df:56:9c:7f:d9:4d:d4:
                    6a:1a:ee:ee:ee:06:7d:d3:29:41:52:aa:c8:19:1d:
                    fa:9d:3c:cf:0c:8a:c6:ab:e6:66:9a:fa:6f:2a:83:
                    08:27:0a:47:e3:58:64:90:f0:de:6d:04:fc:82:b7:
                    d1:c5:bd:87:d8:bb:42:db:0a:14:51:46:d3:fb:70:
                    ff:7e:32:5e:35:d4:1f:22:76:bb:de:d6:e6:73:2f:
                    7f:de:fb:d7:4f:6e:34:cc:59:65:8e:fd:e0:8f:ea:
                    3e:11:21:02:7e:85:89:11:db:fa:c0:57:dc:4f:9b:
                    99:aa:68:3a:c2:01:67:bb:78:f4:71:dd:07:ef:76:
                    ee:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:16:88:3A:FC:29:95:84:D5:A7:77:69:FB:B6:34:FD:65:D4:03:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cc770a75-1357-30e6-a3f4-ffc0adc3cb24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:54:a4:93:a3:57:70:fc:cf:7b:1c:b0:eb:96:6b:fc:e7:71:
         cf:c4:55:bf:cc:8d:27:1e:f1:f8:57:29:3d:5e:4d:aa:71:bd:
         23:f1:25:50:63:cc:3a:84:4a:a0:22:85:d4:06:10:16:f7:b8:
         76:cb:c5:1c:f8:6a:18:95:9b:7e:25:aa:ac:ab:73:2b:61:e5:
         b1:f8:68:05:5e:b7:aa:2c:78:f4:25:cc:19:5b:15:5d:1c:a1:
         d2:62:21:3c:47:18:76:ec:26:1b:18:26:05:56:e6:08:23:e9:
         71:90:d1:4b:7d:1f:e9:50:1e:bf:c4:9c:96:f2:ac:46:a9:2a:
         37:07:f4:e0:a1:c4:cf:c3:72:61:f6:e1:c4:6c:f2:90:e0:4c:
         1c:60:3e:3e:a9:8a:1e:f8:3c:b9:92:8c:20:56:d9:d7:95:7e:
         0b:69:55:c6:8a:aa:66:77:07:51:86:35:ff:ef:b0:da:65:ea:
         3a:17:86:aa:0f:a0:d1:f1:d6:cf:82:e8:b9:cb:ed:0e:c8:50:
         03:ef:96:6f:6f:03:7d:db:90:f6:ff:eb:6a:35:e5:3c:05:f6:
         28:ba:93:f7:dc:4f:32:2b:d6:d1:a6:2f:11:15:d2:60:ea:79:
         e4:e9:23:d1:8d:d1:9f:43:a9:02:69:4e:4d:a2:5d:d3:06:05:
         7b:62:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:04:59 2026 by rpki-client