Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/7170fe55-be4b-3134-bb67-0735883846ef.roa
File:                     7170fe55-be4b-3134-bb67-0735883846ef.roa (raw, json)
Hash identifier:          Ozckk6tII4VC033XuHFOT4C53mNoKOaIARisfxQrrx0=
Subject key identifier:   44:9F:01:76:65:06:C5:00:6F:C2:0A:19:95:06:33:CE:81:8E:A2:9B
Certificate issuer:       /CN=160e8d7e-7f7a-49e5-8735-610371a70131
Certificate serial:       010D0C9F4328584F1467972D40504A14BD2B9000
Authority key identifier: D0:2E:D0:4E:32:1D:E0:03:12:BE:1D:83:45:C7:D6:6B:85:54:5E:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/7170fe55-be4b-3134-bb67-0735883846ef.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     32517
IP address blocks:        198.73.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/160e8d7e-7f7a-49e5-8735-610371a70131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/160e8d7e-7f7a-49e5-8735-610371a70131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:97:2d:40:50:4a:14:bd:2b:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160e8d7e-7f7a-49e5-8735-610371a70131
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=93fe6d2a-3a43-41fb-927d-e0a5aa3a5499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:8b:c8:5a:3c:10:c9:f7:f2:60:bc:2e:04:
                    f5:94:e1:33:d7:f1:e2:f4:d0:72:e0:be:80:68:46:
                    a8:bf:9d:6e:f0:14:db:eb:6d:3b:92:5a:d2:b7:57:
                    d3:8e:95:52:0a:ff:07:f8:b3:88:b3:34:9d:fd:2a:
                    b3:6a:b4:4f:21:cd:ff:66:35:d3:3a:e9:34:b8:6e:
                    0b:c7:94:9b:7d:8d:40:ea:28:59:69:bc:40:52:43:
                    e8:97:23:fa:f4:a0:30:8a:b6:e4:16:a8:ce:8a:02:
                    bd:ff:64:c0:a4:50:09:fa:e6:c7:c6:af:a1:91:17:
                    53:43:ab:0f:db:70:23:92:93:24:94:e0:67:2d:6f:
                    98:d6:be:8d:e1:21:34:94:40:45:57:72:9c:ff:5c:
                    47:c4:d7:a3:c5:1b:78:b8:ed:10:48:10:9d:61:2f:
                    4a:9d:1b:4c:f6:91:d7:f0:a3:26:32:36:78:b8:64:
                    86:a7:75:14:8d:06:8b:e3:11:9c:50:e0:ec:58:33:
                    d5:8b:9c:c4:1b:36:fe:96:cc:ef:39:8c:0d:f6:c5:
                    b3:a5:c8:74:61:d2:17:a4:3e:87:0d:34:52:93:58:
                    0f:ab:6c:90:c1:7e:b5:7f:fb:2b:d4:4c:83:77:8f:
                    fa:20:98:92:8b:fd:9b:83:c9:a3:a3:9f:fe:45:27:
                    3f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9F:01:76:65:06:C5:00:6F:C2:0A:19:95:06:33:CE:81:8E:A2:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/7170fe55-be4b-3134-bb67-0735883846ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131/160e8d7e-7f7a-49e5-8735-610371a70131.crl

            X509v3 Authority Key Identifier:
                keyid:D0:2E:D0:4E:32:1D:E0:03:12:BE:1D:83:45:C7:D6:6B:85:54:5E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/160e8d7e-7f7a-49e5-8735-610371a70131.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:83:bc:ff:79:b3:d0:9e:6c:85:ab:00:95:39:10:a2:eb:0b:
         54:69:1f:99:16:66:1d:67:68:06:2a:89:28:ac:36:4a:5e:30:
         fe:b4:87:ec:ee:1d:77:0f:2a:a2:0a:7b:27:ee:1a:08:2c:b7:
         78:88:5e:21:43:77:76:68:e9:55:7a:d8:0b:f8:2e:76:cc:80:
         36:56:0d:e2:ff:41:e7:27:a4:86:b8:fc:7c:6e:04:c4:06:3f:
         58:9f:47:48:54:f6:8f:46:37:7d:40:d0:b3:25:33:b4:3a:c8:
         0d:b7:a7:57:af:65:bc:0a:c0:7e:56:f6:88:40:d9:c3:24:6e:
         64:4d:b2:4d:e7:ac:5a:4d:47:a7:f3:7e:a6:9b:d5:9d:e0:00:
         eb:51:bf:9e:02:8b:9f:26:de:a8:d3:06:be:b6:b0:1b:51:48:
         42:11:15:e2:47:ec:66:e9:86:b6:b7:8e:71:61:03:d2:c9:72:
         5f:25:9b:f9:4f:70:b4:f8:dd:69:4c:e0:48:88:94:28:44:7d:
         f5:17:6f:a2:51:2e:dd:67:7e:26:c8:4e:71:c4:5c:11:70:f9:
         54:d0:85:95:42:b2:38:56:ba:b9:04:02:f2:08:1b:5b:db:f0:
         65:33:69:c7:d1:ec:de:37:49:74:95:06:56:b2:91:84:77:e6:
         d9:39:14:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:44:20 2026 by rpki-client