Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/0227fc54-1b0f-33f6-9ce8-15d5f1a43033.roa
File:                     0227fc54-1b0f-33f6-9ce8-15d5f1a43033.roa (raw, json)
Hash identifier:          4JR3ALhWHuEDWX0g1MRPKii+g4OjWLjAuDSIkMBwXPQ=
Subject key identifier:   F9:2D:F4:B8:7A:7B:35:EE:52:77:E2:4C:43:1A:99:13:8F:8F:1A:AF
Certificate issuer:       /CN=b67bd843-21be-45d4-8f47-607465f96339
Certificate serial:       010D0C9F4328584F63F81CBB5F2F5A34DBA16800
Authority key identifier: 41:FB:14:8B:8D:51:1A:08:6E:4D:EA:94:E4:E1:6D:9F:B8:D4:AA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/0227fc54-1b0f-33f6-9ce8-15d5f1a43033.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     10308
IP address blocks:        170.76.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/b67bd843-21be-45d4-8f47-607465f96339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/b67bd843-21be-45d4-8f47-607465f96339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:1c:bb:5f:2f:5a:34:db:a1:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b67bd843-21be-45d4-8f47-607465f96339
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=92e198f9-305c-4a5e-89b0-e7a2b018e989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:88:58:70:bf:65:cc:e8:e3:0b:a2:5b:77:
                    51:0a:e5:16:3f:fa:59:95:24:04:a8:02:f6:f1:34:
                    8f:e8:af:bd:e7:c4:2e:88:c9:c9:a0:be:43:98:ec:
                    18:3d:aa:d0:41:b9:f2:e4:6d:5f:af:85:06:a6:f5:
                    42:d2:63:df:25:f6:c3:0f:52:28:84:c0:da:7c:60:
                    1a:c9:f1:17:a7:bc:a9:61:05:1f:c8:60:2a:a5:7a:
                    d0:e7:d8:00:81:02:3c:13:d0:51:ae:54:cc:4d:7c:
                    8c:c8:06:8a:05:dc:12:2b:5b:13:a5:51:5f:c5:4c:
                    a8:fc:dc:46:dc:ce:20:06:b1:07:c5:ae:4d:9a:85:
                    6c:8e:c4:f3:b2:4d:dd:0e:15:b6:63:57:d0:ce:aa:
                    d9:2a:13:5c:6f:58:be:67:1c:cc:c2:1d:a6:4e:a8:
                    24:9d:4e:6d:ba:e0:6a:4d:f3:28:d3:44:cb:77:e3:
                    15:d4:ca:4e:5f:68:32:dd:c3:56:a8:f4:28:96:fd:
                    72:4b:5a:d0:05:25:3a:a8:44:60:1a:7e:03:30:8f:
                    a7:92:57:13:4e:bc:5a:5d:ea:07:e1:4b:52:64:bb:
                    ff:70:f5:a1:ad:5c:4a:50:f4:2f:fc:c5:2a:e4:2f:
                    f7:5c:6b:6f:b4:54:8b:31:68:c7:45:73:e1:ca:bc:
                    d7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2D:F4:B8:7A:7B:35:EE:52:77:E2:4C:43:1A:99:13:8F:8F:1A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/0227fc54-1b0f-33f6-9ce8-15d5f1a43033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339/b67bd843-21be-45d4-8f47-607465f96339.crl

            X509v3 Authority Key Identifier:
                keyid:41:FB:14:8B:8D:51:1A:08:6E:4D:EA:94:E4:E1:6D:9F:B8:D4:AA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b67bd843-21be-45d4-8f47-607465f96339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.76.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:82:14:26:5b:3b:fa:97:92:e4:93:58:45:65:13:49:63:a4:
         a1:3c:0c:00:2d:a0:5d:30:6a:3e:ab:9e:d9:ac:36:e7:77:a3:
         97:ec:9d:94:48:71:9a:29:34:11:92:d1:16:c1:71:2b:ed:11:
         31:14:91:43:0b:ed:e8:49:46:47:9d:60:12:a5:36:ef:d1:08:
         da:c4:52:73:01:8a:45:7a:05:80:1b:33:82:1c:99:13:7e:50:
         d0:59:b8:9a:a1:8b:76:ce:45:3c:19:92:59:5a:80:91:8e:73:
         5d:1b:f1:2d:c2:b6:0c:ec:5e:50:6a:04:89:77:6d:31:99:20:
         b6:ca:d4:ce:d3:ce:ca:40:23:12:8a:41:1b:cb:f8:77:1f:d6:
         35:34:38:a9:c5:00:fc:31:ed:75:03:43:7a:d8:b5:cc:b8:59:
         ba:cc:b8:54:12:a9:32:99:14:4f:12:a3:ef:ed:3e:7d:85:a4:
         b2:e8:c5:22:cf:26:ec:6c:a2:53:37:be:c4:c1:17:1b:74:61:
         48:de:3b:17:c8:37:74:05:53:55:c9:9b:9c:b7:65:73:53:57:
         b4:08:69:c3:dd:f6:36:e9:53:9c:1c:79:9a:99:5d:a3:13:5a:
         e9:ee:29:d8:fd:7e:85:38:89:9a:00:c9:dc:ec:8a:b8:82:c4:
         8e:85:90:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:34:26 2026 by rpki-client