Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/6656148c-1ea0-3ecf-9e54-3cb608b0e88c.roa
File:                     6656148c-1ea0-3ecf-9e54-3cb608b0e88c.roa (raw, json)
Hash identifier:          h+dde+YIV9PcDTn4SPdz0ra0ZEGPg4SbKhXIMcqovLg=
Subject key identifier:   53:9A:66:80:29:AF:F9:C3:53:DC:59:A7:4C:87:C2:B6:F9:78:D6:A2
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584F7BB2F4604E66009C4133FBA0
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/6656148c-1ea0-3ecf-9e54-3cb608b0e88c.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     4713
IP address blocks:        169.145.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:f4:60:4e:66:00:9c:41:33:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=e058fcda-e0c4-4a10-9c74-7eb511d2de4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d1:22:30:44:4e:7a:d1:f9:8b:a5:eb:ec:8e:
                    be:93:8a:69:44:3d:8c:0f:92:85:d2:ca:ff:ee:7b:
                    12:d1:4b:3b:f9:af:1f:8b:d4:4d:70:83:d1:1e:96:
                    da:87:dd:cb:93:c4:32:ae:e5:f5:af:84:02:fa:9e:
                    c9:c3:3e:94:f8:1c:e0:fe:c6:fc:eb:41:55:a9:d4:
                    6a:f4:c3:b1:b9:3f:c0:97:48:8a:9e:78:09:17:97:
                    b4:16:89:ed:0c:0b:bf:e6:98:bc:d7:0e:06:c7:ff:
                    2e:7d:44:59:67:3b:79:57:23:4b:39:33:9c:26:e7:
                    ce:4e:b1:e2:92:43:26:a4:57:db:0e:8f:01:e4:fe:
                    33:29:80:d9:dd:94:3c:0d:1d:78:8e:0b:73:cd:54:
                    05:58:3d:32:41:af:53:2a:0a:f5:3f:00:cc:ab:0e:
                    37:95:32:a5:6d:a8:8e:86:8f:f8:e3:f5:23:a4:0f:
                    07:07:f8:66:10:15:e6:89:f9:0c:c8:a5:46:32:2e:
                    82:00:55:ee:4a:54:3e:71:77:cb:49:78:58:e1:70:
                    3b:aa:ad:ae:e5:ac:d9:5a:0a:84:5c:84:6a:56:26:
                    d5:67:16:59:66:77:a2:9e:8a:88:1b:d8:ef:9d:ed:
                    93:9c:ad:77:37:95:fc:72:21:9f:11:b8:d3:fe:19:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9A:66:80:29:AF:F9:C3:53:DC:59:A7:4C:87:C2:B6:F9:78:D6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/6656148c-1ea0-3ecf-9e54-3cb608b0e88c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:34:ff:80:71:af:54:0c:ab:e8:f4:78:63:64:01:92:3f:09:
         21:75:50:8c:b3:af:a7:e1:bf:59:cd:3d:3a:6e:22:c4:87:55:
         f1:e2:b3:dc:e5:53:12:7e:69:3d:18:0c:97:1e:24:85:6e:cc:
         58:e8:36:39:37:3a:9c:7b:90:1a:a5:49:8c:5e:b7:f2:4d:c4:
         45:c0:b6:c3:a7:4f:f1:64:67:83:c3:01:24:a7:33:c2:1d:47:
         4b:60:27:ac:ac:83:85:77:21:14:a6:85:e2:33:41:28:80:7f:
         db:96:33:2e:3f:cc:80:2e:6a:2d:e4:e6:42:53:f1:71:16:ef:
         3c:68:9d:51:24:98:35:64:a6:f5:9e:97:ca:64:08:cc:ba:85:
         03:75:2c:fc:1f:bc:45:2d:0a:f9:16:18:cc:75:6f:0e:4d:b9:
         f1:ec:f4:ba:d4:aa:5f:74:39:a2:76:d8:4a:77:10:97:ff:b9:
         c1:2f:21:48:f2:c5:f0:d6:9b:4f:81:cb:b2:ea:03:6b:94:36:
         59:06:d3:d0:56:44:e1:1f:6b:48:41:52:44:ab:c5:26:a7:22:
         f8:23:06:42:09:51:1c:c6:10:c2:34:d1:7d:d3:25:ce:cb:d7:
         42:cd:83:ca:53:11:4f:26:a0:be:b8:c9:f7:fa:09:ca:2b:6e:
         0b:07:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:35:34 2026 by rpki-client