Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f160b561-0982-3f28-a837-26a6c11a2e6c.roa
File:                     f160b561-0982-3f28-a837-26a6c11a2e6c.roa (raw, json)
Hash identifier:          ZVDIfK7OWe+gqaJRFq97ZKfL22gEh874FsFhK2HSrgE=
Subject key identifier:   FC:51:D1:FB:CC:45:49:5E:7D:2E:B5:B7:45:03:54:7A:50:0B:F3:5E
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584F497AD9CBBAED9F9EE2BFCF00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f160b561-0982-3f28-a837-26a6c11a2e6c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26955
IP address blocks:        65.121.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7a:d9:cb:ba:ed:9f:9e:e2:bf:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=55e63c24-e44c-4ebf-b513-59b4ff526ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:26:af:d0:89:cb:3b:49:8e:d4:2f:90:a1:
                    81:fb:e4:c1:59:93:d1:4e:42:2a:9b:21:6d:aa:8f:
                    8a:8c:ba:dd:28:f4:4c:28:17:6c:55:d7:0d:cf:ba:
                    9c:12:68:6b:b2:65:07:dd:43:b5:85:c5:45:50:00:
                    c8:18:3d:ee:40:5e:31:94:15:63:c3:57:c8:62:2f:
                    17:2c:ac:92:62:38:e3:21:e3:89:5c:c9:ee:b4:36:
                    3f:57:ee:33:f7:5a:3c:de:da:2b:49:cf:71:a2:ec:
                    5f:23:b1:71:e7:b2:69:89:76:38:b3:81:7f:50:37:
                    94:5a:fd:00:72:92:e7:47:b9:7b:9c:a7:eb:94:4b:
                    88:c7:47:9b:07:44:2a:22:cd:c8:73:67:f3:4d:10:
                    2c:91:04:2e:c3:dc:bc:a6:4f:9d:f5:03:34:da:fb:
                    65:9e:df:82:88:09:7a:9d:d9:fa:58:d6:a8:ee:4a:
                    85:b5:59:30:b4:dc:a0:42:8b:6a:12:37:a5:1c:39:
                    53:27:17:fb:dc:4b:1a:0e:f5:b7:e1:44:19:70:99:
                    5e:86:df:17:43:9b:3a:9d:36:f8:69:58:6d:97:37:
                    96:5b:9b:da:f2:9f:f6:2c:00:04:e7:60:86:79:a4:
                    fc:d6:15:2b:f9:de:c0:aa:17:71:a3:c2:98:35:77:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:51:D1:FB:CC:45:49:5E:7D:2E:B5:B7:45:03:54:7A:50:0B:F3:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f160b561-0982-3f28-a837-26a6c11a2e6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.121.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f4:bd:b7:7a:84:f3:0d:42:36:99:cb:c7:48:95:d8:fe:bb:
         8e:24:50:6d:74:91:8f:19:e9:be:d5:30:8f:20:44:44:f9:28:
         e7:2d:b0:5c:c8:68:01:01:26:71:cd:2c:b4:f8:ce:5e:b6:4a:
         0a:eb:c3:2e:0d:97:af:21:0d:08:45:da:59:cb:58:42:bf:3c:
         35:3c:e1:3c:fb:84:b2:4e:75:d4:3d:52:94:49:fb:fb:6e:6b:
         f4:7f:20:23:be:43:b9:4f:dc:13:57:b2:2f:c8:64:a6:3d:e9:
         d9:c0:94:16:77:20:43:0a:f4:0a:f3:8b:1c:7a:9e:5c:4c:d4:
         0d:b4:66:26:fd:f5:8b:21:cf:5c:b6:89:6a:48:da:1f:18:a1:
         46:83:28:3e:4d:be:0e:6b:44:67:87:40:12:4c:02:e9:70:a0:
         fc:a2:14:99:c8:04:c8:37:cb:71:0a:da:00:bc:c8:1a:ab:fb:
         61:ab:d6:cc:8b:b9:cd:a3:83:52:85:b4:dd:cb:5b:10:dd:f1:
         a5:6d:4d:37:f5:e7:bc:62:df:09:4d:47:b5:38:05:d8:67:84:
         1b:c6:1b:59:b6:f5:c0:b8:f3:b9:97:66:01:00:4a:9a:af:60:
         56:0a:b6:99:55:15:e8:ec:61:90:46:1f:95:f2:df:4d:78:c4:
         1e:40:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:54:51 2026 by rpki-client