Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fa093cd-4f88-3ca8-bed1-9450d9b05bd3.roa
File:                     4fa093cd-4f88-3ca8-bed1-9450d9b05bd3.roa (raw, json)
Hash identifier:          rjTBjauPxYUcNz8KTCcWqqqqGo4FWamFjEwnRSG2T8M=
Subject key identifier:   B7:BB:18:FB:5C:0B:D5:AB:1D:4C:13:C7:A7:8E:4B:5C:D7:50:66:6A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983D15A39E88FE60CA38F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fa093cd-4f88-3ca8-bed1-9450d9b05bd3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        172.242.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:d1:5a:39:e8:8f:e6:0c:a3:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=29d45b09-8550-4be6-87e9-acd95b5c0bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:a9:b9:99:09:c9:77:16:0d:c8:30:fc:93:
                    5b:ad:26:3c:d5:a8:28:40:da:82:fb:0a:b2:94:96:
                    0b:44:80:5c:a0:69:65:56:e9:c3:5e:13:c9:5b:19:
                    85:10:08:d3:92:44:23:09:d4:63:4e:09:a8:c7:7e:
                    ae:2f:bd:39:f4:c0:43:53:ee:f6:fe:25:68:d5:a0:
                    7c:2c:a4:70:55:86:a7:f1:bc:35:81:e0:82:a4:5d:
                    96:dd:f0:19:e1:9e:8b:96:01:ee:fc:0d:26:cd:23:
                    e1:de:f3:8c:40:de:11:3f:00:25:43:7a:83:fd:0f:
                    f8:8d:19:01:89:c6:37:b0:a2:89:df:95:f4:49:ea:
                    79:80:0d:6c:fd:8d:4a:76:1e:09:cb:9e:9c:f1:bf:
                    e4:cb:5c:73:13:ab:5f:f3:4f:e0:18:22:c9:e4:af:
                    c0:83:20:96:77:63:bc:d7:08:1e:45:0e:9d:bc:0d:
                    1b:cd:66:90:80:4c:ec:af:03:68:57:12:49:f1:5c:
                    85:33:e2:2a:4c:e5:38:34:bc:3c:e7:43:fc:48:f1:
                    d2:65:49:04:8c:58:1e:03:59:64:3c:9b:ed:f0:15:
                    f2:de:90:68:5b:73:1a:95:71:e2:a1:c6:ce:08:fc:
                    86:4b:ba:8f:05:e3:96:65:96:96:1f:fb:64:b4:7a:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BB:18:FB:5C:0B:D5:AB:1D:4C:13:C7:A7:8E:4B:5C:D7:50:66:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fa093cd-4f88-3ca8-bed1-9450d9b05bd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:5b:c1:1c:d4:4e:5d:65:3a:a8:86:03:04:2a:71:3f:c8:4e:
         ea:98:54:6b:49:4b:1d:7d:5e:52:c2:76:e2:5a:fd:86:89:4e:
         33:59:74:92:84:93:f0:01:77:81:58:25:d5:88:c5:04:2a:43:
         c7:f6:b6:79:3e:80:ca:f8:50:f1:a1:c4:1e:5e:6e:6d:e8:14:
         b6:8a:f8:bf:37:74:b0:11:e6:17:b7:74:17:55:3b:e4:6a:b0:
         c2:58:48:57:31:62:b0:10:91:ef:e2:d6:e9:ca:2f:75:e5:53:
         4e:06:ef:65:6f:67:0c:8a:1b:d0:00:b6:1a:3f:18:76:be:b1:
         d4:52:36:01:6f:91:76:ab:bd:ce:de:83:3a:05:54:9c:88:9f:
         07:61:80:cb:70:dd:ef:dc:b5:bd:41:e4:d3:b7:f1:ad:63:f0:
         85:5c:d1:10:a1:bc:77:3b:ed:3e:5d:58:d6:58:8f:5a:6a:a0:
         35:c4:34:d3:e4:e7:d3:d8:b4:29:fb:a4:66:62:6d:17:9f:de:
         64:2e:73:08:42:88:c2:95:2e:8d:c3:68:eb:dd:b2:1f:ae:2f:
         0c:30:e3:5d:92:8d:0a:f6:d7:65:50:18:c6:0c:d8:0d:88:01:
         cf:0d:79:94:bc:16:76:be:15:3b:ce:8c:21:79:f3:5d:8f:41:
         23:19:b9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:38:06 2026 by rpki-client