Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2580fcf7-f952-3b13-8c40-9f20098d0edb.roa
File:                     2580fcf7-f952-3b13-8c40-9f20098d0edb.roa (raw, json)
Hash identifier:          4xUh78I8aVQpHugW1wcgj71B4wMIN9bguDo1dCw1GYs=
Subject key identifier:   65:EB:2A:C9:D2:58:13:F6:4D:AA:21:D0:70:E9:06:69:CE:AF:9E:91
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584F374D1BBCF67EFBD7EE38A440
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2580fcf7-f952-3b13-8c40-9f20098d0edb.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     47050
IP address blocks:        173.224.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:1b:bc:f6:7e:fb:d7:ee:38:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=40136a81-7a09-4598-a133-70efc6ee58ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b8:a8:3b:b8:f5:ae:5f:0d:02:d0:c9:04:72:
                    42:40:25:1b:32:09:55:ac:0b:e6:25:a2:13:18:41:
                    00:5a:b4:00:d1:0b:fb:aa:3d:bb:e7:cf:e1:72:d7:
                    17:f8:dd:38:90:6f:fe:b8:86:6c:1e:7d:e5:28:20:
                    41:34:e7:fc:54:84:f8:76:18:96:fa:b1:49:e5:1a:
                    de:06:ed:fb:96:67:85:69:72:f0:de:7c:b3:2f:6e:
                    32:02:58:cf:dd:2f:18:75:96:00:05:76:58:df:92:
                    74:2f:d5:a3:fa:c6:1a:a4:14:0f:45:73:00:9b:fe:
                    9b:8e:8a:4a:7d:6c:74:73:74:03:07:4a:ed:f4:f0:
                    10:bf:43:71:7f:96:5c:aa:23:3a:20:db:1f:7c:1f:
                    7e:48:6a:4f:95:80:ca:d7:a0:41:27:00:ad:dd:5b:
                    f4:ad:eb:12:d0:08:8f:d8:04:e0:d1:27:4b:5b:a3:
                    60:f7:1d:8d:f0:d9:ab:59:27:a0:eb:53:0b:a9:3f:
                    8b:5d:50:d2:d6:ee:a3:e0:14:a9:df:c7:8c:e9:c4:
                    57:da:27:2d:e3:20:cb:4a:03:ed:c2:dd:a2:ee:2f:
                    0e:fe:43:ad:32:c3:40:91:75:e1:f6:bc:45:84:01:
                    8e:38:8a:79:17:7c:69:2d:8e:b7:33:34:cb:42:6b:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EB:2A:C9:D2:58:13:F6:4D:AA:21:D0:70:E9:06:69:CE:AF:9E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2580fcf7-f952-3b13-8c40-9f20098d0edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:9a:fc:57:91:07:ed:53:55:a5:6d:46:e8:28:08:4a:03:
         c3:97:c2:25:e8:6c:92:48:de:9e:52:8f:4f:34:3b:ad:bb:7b:
         03:7c:fe:7f:c5:01:91:74:b0:9d:34:12:85:6b:96:f5:4c:3d:
         e1:ab:8e:28:f2:92:34:64:00:1c:47:89:af:6b:24:94:ab:0c:
         0b:e4:cd:ce:39:70:98:7f:d8:e8:a1:d1:60:90:18:29:8e:24:
         0a:df:c8:d0:67:1f:d7:f8:78:e4:d0:ab:6a:08:5a:4a:a7:ca:
         39:7c:43:11:46:37:f0:c6:42:4e:fb:01:88:6e:d2:8d:d1:4c:
         31:d6:31:fc:c7:54:67:10:e0:16:12:ad:68:b2:b7:88:d1:e2:
         ac:97:fb:dc:15:99:5c:90:a3:c6:c7:b3:80:3b:87:2b:f0:1c:
         bc:16:4e:86:5b:92:0d:c8:5d:b9:4c:7f:1d:1c:d6:3a:84:fe:
         c1:94:06:e8:9f:a9:3f:f8:05:5e:14:2e:e1:33:52:86:1c:e0:
         a7:af:ee:35:60:80:05:0a:55:03:18:31:dd:ce:29:a4:b6:ac:
         78:dd:fc:32:a4:f8:61:0a:a0:46:86:58:25:fa:3e:d9:a6:eb:
         10:16:cf:6d:79:93:1e:07:eb:e6:15:d6:9d:65:ac:b0:c4:fe:
         1e:2a:4e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:58:31 2026 by rpki-client