Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9592f8ce-592c-396a-992f-cb44a3ecf6f0.roa
File:                     9592f8ce-592c-396a-992f-cb44a3ecf6f0.roa (raw, json)
Hash identifier:          ioP0u44BW5c6/XRcQrY/1uEPC9pX9ModXFKRhn1fpUw=
Subject key identifier:   77:DB:42:89:0A:A5:51:14:A4:3C:96:B8:7D:58:70:66:F3:ED:0A:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F498055B2A56E9EEE59493E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9592f8ce-592c-396a-992f-cb44a3ecf6f0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7016
IP address blocks:        173.163.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:55:b2:a5:6e:9e:ee:59:49:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a538a0cf-b549-46f2-89d3-d9a3dc443706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4e:14:70:d9:09:4f:bf:15:2d:53:e3:39:9a:
                    dc:aa:c4:22:7b:fa:24:fa:d9:1f:0f:25:e4:1c:89:
                    5c:23:79:79:18:7a:78:ac:66:5c:d3:1a:dc:a6:b5:
                    2c:1f:1f:9e:dc:d3:77:46:76:89:0c:93:c7:61:10:
                    8e:e1:a4:36:07:3f:b0:c0:75:38:90:78:9e:2f:f1:
                    a1:c0:12:3f:c7:8e:ed:19:68:05:bc:0c:7b:1e:ac:
                    1e:62:da:f1:89:7d:e4:8b:1b:26:57:40:22:00:30:
                    c5:fd:10:c8:48:ac:66:23:3b:1f:5c:b4:e2:f3:f8:
                    bd:1b:6d:38:a8:48:ac:5b:e8:5a:49:4c:c5:4f:9b:
                    41:67:76:e1:c7:79:c7:c4:0a:81:cc:0a:1f:99:84:
                    06:3a:24:a7:f3:37:a7:0d:c5:55:ac:bf:3a:5f:22:
                    ef:a4:ca:b6:3f:51:de:7f:96:c0:9a:a3:25:d1:f5:
                    7f:92:0d:6d:b1:70:d1:85:6d:58:3d:0b:37:da:61:
                    29:47:5c:aa:55:ec:5d:dd:44:5a:a9:c9:d7:c9:e2:
                    53:a7:fc:5d:89:08:ec:b4:20:30:95:4c:07:da:f9:
                    47:2e:9f:b5:8a:d1:06:fe:fb:40:38:62:a8:44:82:
                    37:30:7c:47:fb:1b:cf:6c:2b:06:d4:96:92:47:24:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DB:42:89:0A:A5:51:14:A4:3C:96:B8:7D:58:70:66:F3:ED:0A:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9592f8ce-592c-396a-992f-cb44a3ecf6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.163.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:bb:78:11:d9:af:0f:51:76:42:ca:76:68:72:0c:b5:47:10:
         0c:35:88:9d:3a:bb:49:00:67:28:22:88:82:ce:99:4a:64:cb:
         8a:8e:71:b2:cc:ce:ec:d0:76:e1:47:ee:9a:e1:6e:4d:1e:9e:
         70:f1:7b:69:ef:68:f6:71:8f:9b:7b:e4:ce:98:4e:6f:e1:0e:
         d9:96:59:37:f6:2d:3c:77:a2:aa:86:e9:79:03:6c:f6:86:5c:
         b1:bf:3b:81:19:af:ee:6c:3b:5e:7d:d3:51:c1:09:b6:2c:e3:
         04:4c:87:a0:1a:e3:e7:ca:ee:df:79:51:f1:94:30:2f:44:1c:
         7d:30:ab:6b:ee:72:13:28:5b:9d:79:be:9e:70:4c:d0:97:36:
         96:19:30:b4:a5:7e:62:89:97:b9:3a:de:3c:a9:ee:03:e3:26:
         a2:7c:9e:2c:d2:b5:c5:5d:e3:7b:83:18:4d:1c:d6:7f:e9:1c:
         71:00:be:23:20:53:a0:56:43:86:72:cd:b2:7d:0b:6f:40:de:
         5d:05:b1:05:3b:3f:34:45:52:b2:a7:b6:00:f0:d8:9b:08:91:
         ba:8f:85:06:c9:5b:92:8b:d7:ee:9f:93:d7:18:35:ed:ea:1d:
         b2:d9:bc:c4:1e:b7:32:97:ec:52:25:f1:2b:78:b2:17:3b:c8:
         2c:c0:af:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:31:49 2026 by rpki-client