Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/dba1c47a-7024-3bd0-963c-faa1b6b0dfde.roa
File:                     dba1c47a-7024-3bd0-963c-faa1b6b0dfde.roa (raw, json)
Hash identifier:          Nwf9KXVg6gardxMD/vnmMAQdMAwpEOoHoCAwHWvMtzQ=
Subject key identifier:   E0:62:34:24:67:52:A8:2F:0A:C9:AD:EA:20:C8:92:5C:4B:85:BE:C9
Certificate issuer:       /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
Certificate serial:       010D0C9F4328584F331D0F6AF9E3481DD27CDB80
Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/dba1c47a-7024-3bd0-963c-faa1b6b0dfde.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     10279
IP address blocks:        164.153.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:0f:6a:f9:e3:48:1d:d2:7c:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=2a5f2625-ebe8-4153-b4a3-01e0a7261cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:5e:4a:c6:4a:7e:1a:d6:a0:56:52:eb:bd:
                    a1:b1:3c:54:69:1e:20:0d:fa:fe:39:9b:ff:90:09:
                    06:e8:82:1e:7f:b1:26:c7:b4:07:4e:6c:24:02:e1:
                    5f:3f:66:69:4c:9b:b3:7d:72:35:28:ac:cf:8f:49:
                    e6:8b:06:80:8e:7e:02:d1:39:9c:28:d2:e6:cd:2f:
                    74:92:0c:cf:50:89:a2:e9:d1:0a:4f:97:99:67:f1:
                    51:5b:6f:46:03:d9:fb:a2:a8:e3:ab:65:1c:78:7d:
                    a3:a3:ec:98:7e:a8:0a:fa:a3:dd:ec:bd:24:3a:0a:
                    ee:1a:ab:ee:df:55:2d:46:0c:bd:41:37:18:00:eb:
                    fb:06:98:3c:c0:4c:87:7a:26:13:36:07:57:13:31:
                    57:84:7e:c3:8a:bb:74:52:85:50:0e:6d:e6:1d:28:
                    18:d8:5e:c7:8b:d6:62:10:23:63:df:d0:0d:2d:84:
                    58:de:23:fa:00:f6:9b:2b:cb:6e:c2:34:9d:a2:be:
                    75:ae:d3:ff:0c:b2:42:b6:a0:f2:d8:be:d7:b7:41:
                    32:ea:d4:a5:77:d3:8b:4a:eb:45:79:a9:b4:25:91:
                    4f:a0:48:1b:c1:6c:9b:7f:51:e1:ba:4a:5e:57:2e:
                    ac:91:32:42:94:69:6f:7a:cd:a3:99:6b:2d:ca:b2:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:62:34:24:67:52:A8:2F:0A:C9:AD:EA:20:C8:92:5C:4B:85:BE:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/dba1c47a-7024-3bd0-963c-faa1b6b0dfde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl

            X509v3 Authority Key Identifier:
                keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ec:36:b7:17:49:88:99:9f:a5:99:5f:62:cc:93:06:01:22:
         d8:b5:66:8a:99:a7:ef:91:0f:64:03:48:c7:ca:ca:68:fb:9f:
         d1:05:fa:5f:7d:94:a0:10:bb:02:56:1a:71:a3:64:8d:84:8a:
         9d:2d:70:e7:2e:c0:a9:ce:fc:55:fa:28:e6:92:d5:ea:cb:b9:
         5c:52:a4:d5:f4:07:43:6c:83:45:5b:b3:54:58:d0:53:f2:ad:
         a6:8a:24:0a:09:c6:81:d2:6a:24:f1:13:ef:82:4f:86:6b:3e:
         5a:02:26:43:a7:73:9f:84:7d:5d:4e:45:31:36:8a:a9:1c:c3:
         f6:82:80:08:be:b9:6d:52:a4:cc:37:a3:82:62:ba:26:45:86:
         8a:34:ad:cb:8d:4d:8c:1a:8a:56:e7:9c:ab:ac:7d:43:3f:72:
         8e:99:7a:c8:91:82:e3:eb:80:e2:49:86:27:81:0b:e7:06:27:
         6e:df:e3:e5:af:3d:41:9c:26:c2:ef:1e:71:53:7b:ff:ee:9a:
         7f:f4:c2:37:d2:03:79:e6:b0:5b:62:f9:d5:9b:6d:de:76:be:
         72:7d:10:64:20:25:5f:0e:c6:13:45:ff:f0:c0:5c:a1:fe:3a:
         ae:c8:39:ff:4e:4d:99:29:ec:58:7d:e5:11:7a:df:d9:6d:0f:
         68:3a:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:02:42 2026 by rpki-client