Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/e06fa70e-b4a7-395b-817c-b9dfa047b608.roa
File:                     e06fa70e-b4a7-395b-817c-b9dfa047b608.roa (raw, json)
Hash identifier:          TpmXq8YFuXII2vuGryHm4xQ05IDXm6Uq7h7T60LKHjI=
Subject key identifier:   D6:AD:54:6A:63:4F:83:67:C0:5F:63:B3:CE:20:BC:46:66:9E:32:E6
Certificate issuer:       /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
Certificate serial:       010D0C9F4328584F331D0F79094EAB2A0536FE00
Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/e06fa70e-b4a7-395b-817c-b9dfa047b608.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     10279
IP address blocks:        164.153.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:0f:79:09:4e:ab:2a:05:36:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=fe4f9127-8ac1-47d1-acad-c188ea2b2903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8e:87:38:50:9a:61:47:89:e8:b0:97:08:77:
                    b0:7c:c9:0c:c5:e0:1c:33:96:c4:ac:7e:df:fc:ae:
                    5b:a1:45:09:fd:7a:2d:f4:fb:d5:8e:9b:05:92:12:
                    16:9b:07:d8:40:10:15:f7:b1:0a:e5:9a:9d:38:3d:
                    60:e4:c0:9a:d3:78:ce:a5:30:65:94:40:cc:42:e7:
                    4a:c3:86:7b:db:44:2a:44:17:d4:0e:cb:74:93:02:
                    38:da:b7:fa:e0:82:29:0e:b5:db:d8:f8:82:dd:60:
                    2d:e8:90:78:3c:a1:63:65:80:9f:c1:2f:48:1d:0b:
                    7a:4b:df:94:8d:dd:7e:3e:df:e0:a8:c2:2b:61:97:
                    2c:19:a8:af:29:7a:27:44:18:91:b8:96:f7:fa:a5:
                    25:c3:3e:e7:cd:99:17:27:7f:a8:08:2a:05:22:2f:
                    54:7b:f2:02:2f:5b:1c:99:e5:6b:2b:16:1a:fa:33:
                    10:04:e0:ee:e7:d5:65:52:b7:25:f2:50:ab:ba:32:
                    f8:a6:34:b9:1b:78:6d:d7:b5:11:95:94:e8:3d:c4:
                    9a:fa:74:94:a9:ca:f3:06:90:40:7d:ff:f4:d0:8b:
                    a6:bc:01:e3:57:4c:60:f1:66:f2:ca:10:70:ca:77:
                    ff:ce:8c:f4:7d:a4:33:32:b4:dc:96:eb:04:f5:26:
                    e5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AD:54:6A:63:4F:83:67:C0:5F:63:B3:CE:20:BC:46:66:9E:32:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/e06fa70e-b4a7-395b-817c-b9dfa047b608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl

            X509v3 Authority Key Identifier:
                keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:95:b4:44:c3:59:6b:d0:a5:7f:89:5b:8c:3d:eb:7f:b5:29:
         04:9a:60:a8:8d:dd:19:96:7d:8b:c8:12:6c:25:7f:5a:f3:99:
         36:79:75:30:05:36:c2:c5:c0:22:7a:e2:2b:a9:b6:80:16:13:
         69:25:82:da:88:05:97:89:27:d7:ad:7b:30:4a:b4:8d:2d:b6:
         ef:73:6b:71:57:02:ea:01:02:1c:96:bc:1c:06:df:cc:57:cd:
         fa:26:0a:8c:62:6a:2b:af:63:fa:9e:6b:39:5c:e2:c8:58:b8:
         c3:c6:16:51:28:6b:69:75:f4:2e:97:ab:16:ba:f4:46:6d:a1:
         36:49:b6:5c:db:14:40:51:49:e4:7c:78:d4:be:cd:ce:26:5e:
         c4:fc:70:3e:ea:fb:cb:6d:70:48:fb:e0:dc:86:57:03:55:5b:
         4c:36:84:a7:5f:de:2e:6b:31:dd:ad:8e:38:ea:e9:2d:ab:45:
         55:df:c5:2d:c6:99:cc:63:d5:0d:d9:c9:07:73:5e:4c:61:d0:
         56:a4:82:45:a0:17:56:d2:fd:71:9e:20:6e:41:e8:3b:be:57:
         0a:07:ba:bc:73:f4:63:d9:ac:c3:0b:e2:03:bb:9d:c5:8b:fc:
         11:8d:92:cc:7a:73:51:ff:43:3e:61:12:48:ed:9f:ce:01:b8:
         0c:e1:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:55:48 2026 by rpki-client