Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d40ad155-e61a-38f6-89ef-f50fd9b0b213.roa
File:                     d40ad155-e61a-38f6-89ef-f50fd9b0b213.roa (raw, json)
Hash identifier:          7EZvM7DjEWZ+f8/SZZyHrn3pW8Ed7oY2OObdhpcAJs4=
Subject key identifier:   4C:81:FD:BB:D9:02:A1:9E:B1:E1:96:7E:17:D4:1D:8E:3E:31:D8:EA
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584F4973AF0BD584A4C18C342900
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d40ad155-e61a-38f6-89ef-f50fd9b0b213.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46606
IP address blocks:        162.144.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:af:0b:d5:84:a4:c1:8c:34:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2afef6d3-6cce-4875-94f3-2562ebb21fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:4e:ad:bf:a4:d5:e5:c4:53:98:2d:ee:ca:
                    9c:32:7a:a8:c7:5a:f9:e2:7a:2d:b7:2f:1b:b9:0d:
                    61:c4:2e:15:7d:f4:81:22:85:c0:a8:33:e9:3b:45:
                    42:ca:38:86:f5:3b:3b:fe:0b:f8:78:26:bb:88:4e:
                    54:67:df:36:f9:7d:b1:c2:ef:0f:1c:dd:40:3a:77:
                    df:82:ee:63:fe:51:47:61:f0:93:f9:bf:ec:65:ff:
                    d7:74:6e:f3:bb:81:6b:7e:95:39:50:2e:f5:9d:8d:
                    d9:4b:6a:6a:90:15:54:65:86:3f:a1:50:b1:dc:a6:
                    6e:d9:58:05:87:32:d7:5a:a5:5e:14:4a:36:f2:1c:
                    2c:d8:5b:d5:80:b4:f9:53:c4:2f:ea:f7:1d:87:a7:
                    7a:c8:06:58:59:cc:5a:25:8a:d3:1b:73:a6:fc:82:
                    48:12:15:aa:a7:44:5a:ce:e5:14:7b:86:0b:8f:de:
                    6a:50:1d:85:b8:b1:03:e1:57:3d:10:29:39:94:02:
                    53:3f:c7:b0:9d:50:60:fe:90:d9:76:73:37:f4:ea:
                    a1:3a:f7:ad:bb:95:d2:72:52:33:d6:30:91:88:85:
                    dd:66:2c:e4:4e:6d:7c:93:5a:f0:4c:74:58:94:2b:
                    ce:2d:6e:04:7f:40:90:12:ca:2f:f1:8d:69:a4:a8:
                    e1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:81:FD:BB:D9:02:A1:9E:B1:E1:96:7E:17:D4:1D:8E:3E:31:D8:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d40ad155-e61a-38f6-89ef-f50fd9b0b213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.144.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:04:1b:0c:0f:6b:d9:e6:76:7d:a6:c3:28:8d:fb:8a:29:13:
         6d:54:82:70:fb:aa:73:be:da:54:23:d7:98:64:53:3b:0c:59:
         71:52:f3:b6:91:31:ab:eb:dc:5e:6a:14:37:af:31:59:d4:bb:
         e7:0a:21:69:d4:30:60:a8:3f:22:45:ce:bb:bd:ea:29:1d:23:
         2f:f7:0c:d3:1f:77:33:5a:22:ca:31:7b:2c:c6:e2:0d:ae:e3:
         3a:79:e2:03:b1:fa:90:7e:6d:3c:e6:b0:4d:fa:c2:41:45:02:
         5a:6f:93:dc:d4:ce:3f:ba:41:51:49:af:9f:a8:e1:16:42:5c:
         3e:01:eb:d4:f1:a2:90:e2:e2:ae:27:2b:aa:95:c2:05:b7:1d:
         44:cf:63:e4:97:69:a7:b6:bf:23:10:56:75:a7:43:cd:e8:42:
         46:03:c3:73:12:4b:82:1c:d3:65:bf:b5:e8:ac:62:87:ac:1f:
         9b:9b:12:76:f5:2b:20:13:fc:2a:04:db:58:ac:59:7a:1d:1c:
         82:65:23:bf:9b:2d:4d:ef:ed:78:83:b4:d2:37:30:59:33:06:
         aa:c8:60:a7:d6:69:6d:3b:76:99:6c:89:06:94:dc:dc:7e:3d:
         3a:a5:5e:5f:69:95:a8:9e:19:30:03:5a:55:34:c8:b3:00:f6:
         df:33:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:24:45 2026 by rpki-client