Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa
File:                     ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa (raw, json)
Hash identifier:          9RkHkC+pQGAmJHAFUaHssP3JYdHTZU20iXo3q99z3YQ=
Subject key identifier:   7B:05:F2:1E:C1:2F:F9:1E:BD:D1:B8:84:91:B1:57:17:BF:54:3F:B2
Certificate issuer:       /CN=d41a3f41-d9b3-4528-8251-900156f4efac
Certificate serial:       010D0C9F4328584F4975530D39407B513C5991C0
Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14525
IP address blocks:        64.22.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:53:0d:39:40:7b:51:3c:59:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=42643685-0baa-4797-b878-9eb6afeb834d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:bf:ed:19:ca:14:6c:f4:38:0b:83:8d:4f:
                    a8:d5:47:16:48:32:e4:d3:62:9b:70:af:b2:ce:66:
                    0b:ae:d3:74:8e:9b:88:b5:8f:47:69:ab:bc:a9:83:
                    cc:51:ac:04:35:33:1f:70:80:63:85:dc:5f:de:32:
                    e2:0a:75:7a:ea:f9:43:41:80:4b:a2:36:bd:36:73:
                    24:b7:28:19:42:6c:ff:b2:ef:16:93:c6:b3:64:6e:
                    46:0c:49:f8:fb:99:84:27:03:67:70:44:ed:3c:8b:
                    2c:b5:80:37:9c:05:0f:aa:e4:0a:bc:78:87:0f:34:
                    cb:01:4f:37:49:4a:bb:cd:af:1b:7d:20:7d:61:85:
                    c7:5d:53:5b:f4:65:46:6d:c1:66:87:ca:92:2f:c1:
                    7e:06:21:3f:8d:16:87:c2:e5:94:1e:8b:6c:9f:6d:
                    f1:45:0c:32:24:19:f8:05:58:72:34:e9:34:c4:28:
                    26:af:a0:9a:87:d3:83:35:25:be:47:90:07:cc:75:
                    e9:9f:1c:67:b4:5f:70:c8:88:e1:05:aa:77:13:c4:
                    07:08:4b:bd:bd:0e:b5:b8:7b:65:1e:40:d4:cf:27:
                    62:08:80:85:ad:b5:36:fd:c9:e2:7d:38:e9:58:d8:
                    11:d2:b7:b9:ae:fe:f0:f3:44:b6:43:2d:da:38:20:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:05:F2:1E:C1:2F:F9:1E:BD:D1:B8:84:91:B1:57:17:BF:54:3F:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl

            X509v3 Authority Key Identifier:
                keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fd:f2:c8:63:6c:bd:19:e5:32:4f:32:94:ef:ae:49:23:8c:
         2d:d7:00:ca:97:a4:0a:79:98:df:09:7a:6c:e5:c0:8a:dd:76:
         07:d0:10:1c:12:a9:cf:d2:dc:14:fc:f0:5a:f9:8b:14:9f:26:
         da:26:ed:13:c6:15:fe:c6:c1:00:e4:a1:08:57:98:d4:0d:78:
         65:74:93:5b:fb:32:95:33:a3:3c:fa:74:02:10:4f:32:72:93:
         ba:cf:ff:38:8d:29:57:b5:7b:c8:de:e6:1e:48:cf:1c:a0:de:
         4c:a7:ac:52:72:1d:72:9e:73:e1:b9:b0:52:a4:7f:f2:10:43:
         be:c6:d5:60:a7:4b:43:17:9f:4f:d7:00:9c:48:63:03:42:5d:
         e1:65:9d:62:1d:33:1e:e3:0e:97:98:ba:7d:1d:68:9d:19:8f:
         16:49:de:f1:7c:e9:15:78:54:2f:eb:d1:da:74:17:47:c3:e4:
         af:eb:2b:0c:e9:10:ac:f9:4d:61:f5:9b:dd:44:7e:cc:ac:4c:
         64:23:7a:5b:56:ca:9a:6e:43:43:33:34:14:8b:19:98:c5:16:
         95:b4:2d:46:1d:3b:8f:be:ef:76:7c:df:46:4c:81:3c:32:be:
         63:e3:c0:7b:ec:97:63:58:36:ac:2e:a5:cd:79:e0:cf:b5:61:
         86:bc:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:46:58 2026 by rpki-client