Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fc8a04a9-488c-3924-8f7b-3da391e956ef.roa
File:                     fc8a04a9-488c-3924-8f7b-3da391e956ef.roa (raw, json)
Hash identifier:          XuhuV7U6kJp5OCorJ4OFhMNNzUYv2VWzrvxWZKr09D8=
Subject key identifier:   72:AB:11:DB:1C:71:92:C0:88:6B:B2:A7:CF:16:F7:DF:17:42:D9:A4
Certificate issuer:       /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial:       010D0C9F4328584EF71761EC8C953603F7163C80
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fc8a04a9-488c-3924-8f7b-3da391e956ef.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     20454
IP address blocks:        69.160.44.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:61:ec:8c:95:36:03:f7:16:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=546614d5-bb90-426b-bdb6-258d5c602921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d0:8b:13:20:70:6a:1b:ee:67:59:d9:3f:a6:
                    e5:2c:a4:a6:06:81:61:88:73:c3:41:77:b5:1a:1c:
                    2a:71:ae:1a:b5:17:2e:a7:bb:8c:b0:c0:3e:61:7b:
                    a8:9e:74:73:42:03:5a:03:99:8a:2e:f8:db:5e:73:
                    65:5a:db:84:a9:88:2e:59:4d:e0:23:9e:a2:f4:43:
                    1b:19:ea:b7:39:8c:bc:04:48:c5:df:e7:85:3d:ba:
                    1a:f6:3a:08:15:c3:c8:13:72:8f:f6:71:2a:66:6d:
                    16:75:04:c0:fc:88:d2:ce:fe:68:1b:05:5a:93:5b:
                    cd:d4:d8:8b:bb:bf:c2:d3:e1:53:d1:08:50:b9:26:
                    54:29:f1:ec:ec:54:10:d6:b1:f2:77:71:09:4b:3c:
                    bb:88:a9:c1:f9:0d:40:fc:8e:73:92:59:d0:24:5d:
                    97:1e:6c:29:17:59:72:19:49:23:07:15:c2:4f:bd:
                    0f:8c:28:c5:b0:32:19:5c:26:2a:68:f6:3e:da:f2:
                    b5:d3:14:54:05:8d:08:51:12:82:95:1d:8f:e6:b5:
                    7b:78:cf:88:aa:a5:75:ed:43:e0:5d:00:cc:8b:ea:
                    30:5d:89:ec:e6:1c:5f:ed:88:d1:50:11:7d:06:aa:
                    56:24:e2:18:31:cd:08:72:91:43:f8:19:2f:4d:17:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AB:11:DB:1C:71:92:C0:88:6B:B2:A7:CF:16:F7:DF:17:42:D9:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fc8a04a9-488c-3924-8f7b-3da391e956ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl

            X509v3 Authority Key Identifier:
                keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.160.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:90:7e:3e:2f:4f:03:30:0f:62:f7:e4:2d:43:8b:60:eb:66:
         e9:31:f4:a0:cd:fc:b2:ed:34:ca:d3:95:5e:7b:22:c7:e8:0a:
         b2:c2:2b:cf:53:3f:c4:76:82:fd:b7:c6:6e:83:d8:38:69:97:
         68:6d:74:c6:0c:a6:ee:0e:33:b7:12:39:fa:b7:b4:5a:5f:09:
         02:1a:a8:49:f7:d1:ea:7d:5f:65:29:51:41:22:4d:2f:60:58:
         35:4a:71:80:bb:7f:4c:c3:a4:60:75:d9:2c:56:19:17:22:1a:
         fa:62:fb:36:8f:8e:86:9a:ee:5c:bd:de:7b:97:57:be:0a:a3:
         f0:16:01:85:16:cc:ed:23:25:88:a7:8a:d0:28:f5:4f:bb:cf:
         09:f2:73:35:0f:d2:f9:62:74:17:3d:78:b1:8b:6d:57:ec:a3:
         91:dc:41:f4:3f:78:f4:58:c0:81:eb:08:d9:46:28:17:93:b5:
         d2:59:2b:0f:b8:6f:f1:4f:f0:fa:6c:50:02:2e:d8:89:5e:4b:
         43:9c:1e:53:6d:42:ce:9f:d1:30:13:50:ff:a1:92:83:fe:9d:
         ff:bc:a8:d4:7c:2a:ef:dc:49:7d:f8:a2:f6:27:af:e0:9d:5f:
         1c:89:a6:93:da:69:ad:53:25:f1:c2:d8:ac:12:56:e4:f0:80:
         f5:b7:1b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:57:29 2026 by rpki-client