Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/10edbdbf-fefe-3135-b393-2a1c2718221a.roa
File:                     10edbdbf-fefe-3135-b393-2a1c2718221a.roa (raw, json)
Hash identifier:          faIhSFopPKHws5V8TLkUKggufyAT/Xrow9ImivCs7GU=
Subject key identifier:   40:BA:97:BC:F5:91:FA:22:98:55:51:73:70:64:86:C1:21:4C:26:C7
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F4328584F3E47E0C7D0C311473D5CBFC0
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/10edbdbf-fefe-3135-b393-2a1c2718221a.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     36000
IP address blocks:        142.71.8.0/24 maxlen: 24
                          142.71.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e0:c7:d0:c3:11:47:3d:5c:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=81952e5f-4228-4a35-bb26-a0fa0e9033ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:00:fc:7c:a6:fb:4b:59:ea:b0:dc:a6:a2:
                    84:a3:a8:69:9f:06:35:8d:82:cd:2b:ac:e9:ef:29:
                    d6:97:8c:ba:4a:f5:dc:09:98:7c:94:d8:cb:43:79:
                    3a:08:14:3e:64:2e:56:16:88:ce:0f:88:fe:91:85:
                    66:0b:a3:31:66:39:62:a6:4a:19:3d:47:18:9b:17:
                    1d:9a:43:73:40:47:f9:1c:93:f5:83:21:e9:8b:96:
                    5c:27:b1:15:ef:a5:4f:a4:45:4e:bc:68:60:00:64:
                    5f:b0:4c:13:5c:11:52:b0:3c:35:f9:ee:8a:09:8d:
                    c2:bc:ca:f6:cf:97:f5:9b:17:02:a9:68:4e:2e:f2:
                    e6:14:64:2e:bc:2f:8b:27:69:4e:0e:13:e5:d6:5e:
                    3f:c2:87:76:13:83:42:15:90:7b:cb:73:79:02:45:
                    a5:4c:18:fb:50:26:3f:69:0c:74:56:10:92:75:ad:
                    f8:df:02:2f:80:e2:df:cf:95:4c:c3:fa:a3:7e:2f:
                    da:36:79:d5:82:68:b5:fe:cf:d9:ea:55:d9:a1:c1:
                    33:62:b6:59:99:6a:2c:99:00:35:5e:7a:05:38:3f:
                    25:04:32:07:96:f7:93:31:7b:f6:72:0e:b8:e0:4a:
                    e2:53:fa:d5:d0:74:5c:b2:9a:19:d6:fc:c5:93:53:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BA:97:BC:F5:91:FA:22:98:55:51:73:70:64:86:C1:21:4C:26:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/10edbdbf-fefe-3135-b393-2a1c2718221a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.71.8.0/24
                  142.71.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:41:d1:18:e2:55:30:5f:95:6b:c2:68:2e:78:2e:f9:ba:b5:
         95:af:71:d8:3e:a4:18:98:1c:e2:d6:33:6a:22:92:83:5a:65:
         d5:a8:cb:f5:cd:fe:0a:1d:53:56:06:e5:88:ef:f6:af:61:af:
         2c:ac:3d:5f:e5:c8:31:1a:8c:3a:00:5b:92:7b:ce:91:d2:7f:
         8b:22:8d:74:60:ef:3f:9b:8c:4e:8d:8c:ed:87:17:d9:a4:0d:
         f8:61:2e:ce:e4:ba:32:8a:33:3c:98:56:36:fe:a3:bc:4b:ac:
         a9:99:95:9f:83:52:3c:66:ba:f0:e6:98:d4:0a:ba:90:8a:29:
         94:56:b6:06:5e:fe:a8:57:f7:86:cf:2e:70:21:68:1a:47:50:
         46:a2:0c:98:ee:d7:7b:4d:83:2d:ee:76:5d:0c:d7:d0:d3:09:
         d9:01:6f:55:55:24:a4:1b:d5:23:9d:e5:ec:49:ce:d8:1d:04:
         39:93:a9:0f:90:0b:f5:07:25:22:bb:28:35:cd:47:b5:47:14:
         dd:d9:b5:3e:30:c4:df:19:77:d2:b8:15:eb:24:93:d6:d6:97:
         75:f1:02:b7:2a:db:3d:f8:ac:55:aa:8b:bc:ba:45:2d:5f:81:
         48:82:ea:b4:49:88:0e:05:03:20:51:e7:d7:e6:94:43:fa:a1:
         ba:4e:ae:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:32:49 2026 by rpki-client