Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa
File:                     ea5fac7c-b585-38d4-8a2c-649c73995029.roa (raw, json)
Hash identifier:          pobpcO5sZ1+oFNuh+RW4RTQObijQZGaSW90XgseuVZY=
Subject key identifier:   48:BB:A9:44:20:4C:8F:C1:F2:49:B7:43:1F:38:21:D1:E9:9E:80:4C
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F4328584F506D442653C25B61D5C13960
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     29016
IP address blocks:        159.182.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:44:26:53:c2:5b:61:d5:c1:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=301fd2d2-711e-422d-b286-c7793cf051e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:d8:a3:56:3a:87:63:76:54:06:2f:95:a0:
                    50:4f:23:dd:0e:29:64:b5:0c:04:dd:d5:7e:c9:f9:
                    35:99:6e:21:52:3e:17:3b:d1:ec:4f:ad:86:95:7a:
                    8e:f6:ee:67:a4:16:b5:56:da:fd:05:fb:11:c4:16:
                    18:d5:ed:0f:83:d0:59:b4:c1:7e:b6:30:11:f3:46:
                    0a:cd:9e:5c:d9:36:66:10:da:ff:3c:c0:87:bd:2c:
                    e4:1a:9b:e8:1c:cb:98:84:2f:50:90:19:5e:03:02:
                    ad:30:10:10:39:1c:85:19:42:69:23:10:e3:1e:ec:
                    1b:8f:fa:c6:8f:db:e3:b3:ca:07:c9:52:7d:8c:ef:
                    48:e9:87:a6:3a:ea:f5:f2:a4:49:cd:81:bb:65:11:
                    38:4f:f9:39:de:5d:8a:f9:5c:0e:7f:e6:f2:57:04:
                    2e:bc:38:94:00:ca:c0:a3:3f:48:51:e7:96:3b:de:
                    11:1e:2e:8e:6b:e2:0a:1f:38:2b:e4:d6:83:df:33:
                    1e:10:bc:03:c5:eb:33:5e:ce:1c:9f:ed:ec:b6:77:
                    23:86:4a:f3:2f:3b:7c:bf:a3:dd:ad:38:6d:e4:7a:
                    54:e9:ef:b2:7a:bd:69:52:0d:70:89:7b:28:a0:4c:
                    6e:d7:db:3c:bd:1e:08:f2:d2:6d:51:3f:a2:c3:2c:
                    34:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BB:A9:44:20:4C:8F:C1:F2:49:B7:43:1F:38:21:D1:E9:9E:80:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:e7:5a:28:8e:89:92:2a:c7:e6:bd:74:18:ad:e5:41:d3:cb:
         2c:ee:88:3d:cc:02:24:4a:20:4d:d0:1c:bc:fb:fb:20:bb:03:
         bf:3b:9e:4e:2a:90:65:8b:14:c4:f9:f0:45:d7:22:be:fb:e0:
         17:18:e8:09:d7:a9:14:ad:d6:ee:52:a0:a7:6c:ae:16:66:48:
         30:b9:0b:da:a3:32:cb:6c:76:84:64:5c:22:d7:6a:30:c4:bd:
         78:45:ff:38:e1:0b:25:d8:75:16:b6:63:0e:8b:00:8d:73:31:
         c3:fc:e6:a2:ef:ab:11:8a:d5:39:26:cd:e8:ee:a8:4e:15:95:
         e8:20:56:e9:15:f6:b4:b1:3f:c5:a3:75:d7:2b:f6:15:fe:54:
         77:01:e1:01:b2:d0:97:2e:e3:7c:4a:51:6e:14:7d:bf:dc:64:
         33:cb:95:db:84:4e:0d:0e:87:86:c3:1e:ae:02:4b:3c:9e:24:
         ea:2b:67:81:59:3c:0b:14:e5:45:28:24:dd:0c:f6:af:46:35:
         37:22:c8:17:f2:94:b1:ad:44:bd:45:81:28:53:ec:5a:7c:e0:
         09:8c:70:a9:62:ab:ba:56:d1:85:40:d6:44:ed:dc:44:af:93:
         d3:8f:f0:d4:60:86:81:b0:64:70:4f:6f:1f:a3:92:56:ef:c2:
         7c:83:96:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 01:11:37 2026 by rpki-client