Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/f846d8e9-3192-3eda-b325-c794cfcbc318.roa
File:                     f846d8e9-3192-3eda-b325-c794cfcbc318.roa (raw, json)
Hash identifier:          6zGzFCrgt0eXb8/pavTKIJasb74KRJxTUJxVI69lYH8=
Subject key identifier:   5E:90:31:6D:40:92:00:95:59:F5:FA:F9:8B:80:B2:46:54:D1:5E:EF
Certificate issuer:       /CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
Certificate serial:       010D0C9F4328584F2D87C7E4B9983557B9473C68
Authority key identifier: 1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/f846d8e9-3192-3eda-b325-c794cfcbc318.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        167.245.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c7:e4:b9:98:35:57:b9:47:3c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=9f478d3a-9e1f-4da8-98b7-7da50bae9348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d2:22:fd:c1:3f:48:25:15:cd:ff:df:ed:87:
                    86:e2:fc:05:6d:da:f5:1f:2e:ba:96:d4:9e:82:da:
                    c7:ea:9a:f6:b3:d3:f9:d0:4a:7e:93:e8:2f:88:f0:
                    70:f0:95:a1:9a:ed:03:eb:08:5c:e2:e5:45:67:82:
                    02:b1:96:92:ec:62:df:35:ca:72:14:7b:8e:96:c7:
                    a2:be:4a:e1:d9:09:ac:71:a9:81:4c:5f:e1:48:de:
                    e0:f6:11:e7:d2:e3:c9:f2:81:89:0f:61:a7:4a:09:
                    2c:2f:b5:6f:68:5f:e2:e9:6e:5f:f7:c4:7c:be:bb:
                    f5:2a:df:b5:9b:dd:8c:d6:fa:30:d7:46:99:f6:71:
                    4b:b5:28:67:c4:10:16:c2:5c:3f:73:92:aa:70:3e:
                    61:50:a0:37:00:ae:9a:b6:5a:6c:75:74:b4:77:f3:
                    8e:ac:63:83:25:50:90:24:5c:2c:46:9b:e3:36:cc:
                    54:73:ee:af:97:a8:6d:64:46:11:ae:bd:0a:a5:c9:
                    50:84:42:2c:51:88:83:c5:d2:bf:12:ad:1a:70:5a:
                    3c:86:00:24:4d:a2:05:4c:cb:ad:79:9a:d8:3c:7e:
                    52:be:de:0d:a8:7d:53:39:c3:fb:49:05:34:89:8e:
                    60:f2:41:97:90:99:bd:c0:78:49:bd:dd:2a:01:45:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:90:31:6D:40:92:00:95:59:F5:FA:F9:8B:80:B2:46:54:D1:5E:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/f846d8e9-3192-3eda-b325-c794cfcbc318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl

            X509v3 Authority Key Identifier:
                keyid:1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.245.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2c:5c:e6:98:21:83:b3:92:dc:2e:d8:89:7e:2d:b0:58:4e:
         2a:19:0d:e4:a2:c9:6d:02:68:1f:c1:0d:ca:07:7a:ef:ed:8e:
         eb:42:f8:54:ee:d7:b6:4e:df:bc:3f:d6:b6:c8:04:35:32:8b:
         66:bd:87:cf:d5:27:94:04:3c:27:6b:78:66:66:7f:68:de:8c:
         ab:fe:0c:83:17:a6:94:40:44:72:60:bf:15:f5:b9:b4:d2:95:
         4c:3b:c6:92:7f:19:3a:8a:df:b1:05:63:4d:05:65:d0:62:36:
         22:7d:66:75:1c:df:2d:fa:16:16:31:47:56:b2:49:e9:fc:16:
         ab:3d:f0:93:c6:26:56:d4:24:2d:ba:f9:c4:18:65:d9:9a:8b:
         32:02:bf:00:66:31:b1:0f:2d:a0:bb:fb:bb:0c:49:06:a8:cc:
         ff:c7:7c:c5:1a:03:00:6b:93:f5:94:85:b2:26:c7:1b:7a:d4:
         c1:cc:e9:d0:63:35:9a:43:0b:bd:80:10:ed:f3:1c:f0:ac:2e:
         21:4a:91:26:f7:ef:38:c1:2f:81:1c:9c:0f:4e:4d:2d:75:30:
         2b:c8:58:a9:d6:fe:52:0e:4d:6c:2a:7a:e0:98:46:44:12:f7:
         c7:fa:cb:9b:54:ac:a4:78:86:24:28:09:a8:eb:1d:db:f6:71:
         02:4f:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:59:26 2026 by rpki-client