Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/70f7c180-9c4d-371e-a4a4-d0a8d7b4d6df.roa
File:                     70f7c180-9c4d-371e-a4a4-d0a8d7b4d6df.roa (raw, json)
Hash identifier:          6MQj+YCqAqduUUPPKITjM7RJ92kQrMxePFuhOfMCb2A=
Subject key identifier:   21:EF:D1:39:4A:57:61:F4:3C:C8:3C:99:79:82:22:89:8F:2D:88:9B
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F4328584F42781E4FB82DC8254B0E5DC0
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/70f7c180-9c4d-371e-a4a4-d0a8d7b4d6df.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     10506
IP address blocks:        168.99.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:1e:4f:b8:2d:c8:25:4b:0e:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=cd6a8354-65f2-46ef-926d-6235967d5881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:9d:74:45:0d:a4:9a:20:ce:a7:a2:64:88:
                    e1:cd:56:7a:44:22:6d:5b:15:bd:aa:c5:6d:34:da:
                    29:2f:03:27:a2:63:50:00:b8:dd:76:9b:13:5e:6a:
                    e0:79:8b:f3:7e:f3:db:78:00:33:52:70:51:55:05:
                    8c:48:be:45:97:6a:6b:1e:19:f7:6c:2b:62:fc:a1:
                    52:ec:cc:95:d1:36:fb:46:7e:bd:95:52:c9:15:5a:
                    77:19:41:37:40:26:93:f9:cb:62:a2:15:31:3c:13:
                    71:7f:0f:42:e8:49:04:8d:b9:fd:5e:1c:04:ca:93:
                    65:24:fe:2b:0e:ee:42:42:f0:fb:e0:c4:77:52:54:
                    34:e7:aa:36:ee:dd:64:1a:fe:92:bb:b0:80:44:2c:
                    24:2e:8f:83:04:3d:b4:42:2a:6b:d1:5c:cf:90:e3:
                    5f:d4:a8:78:ef:00:cf:82:1e:ac:d8:15:53:f8:48:
                    8a:eb:43:89:2f:a2:d7:09:67:5a:bd:1a:2d:40:2b:
                    27:e4:87:93:20:8e:63:71:13:7d:0e:8a:cf:c5:30:
                    b3:72:e0:98:8a:f5:5c:79:39:14:63:ad:9f:0f:de:
                    cb:70:b3:70:b5:f6:df:be:e7:8e:cf:9d:16:89:9b:
                    32:db:1a:d6:ba:0c:7c:76:c7:eb:24:52:b4:4e:b3:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EF:D1:39:4A:57:61:F4:3C:C8:3C:99:79:82:22:89:8F:2D:88:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/70f7c180-9c4d-371e-a4a4-d0a8d7b4d6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.99.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1d:72:54:7a:73:01:3c:87:fd:c5:cc:7e:89:74:b7:47:1f:
         5a:1e:ec:03:ab:22:ff:76:db:9b:15:e7:b7:51:ef:b3:b3:04:
         e1:a4:aa:93:9a:26:e5:f4:36:17:02:9f:0c:a9:bd:93:a3:5c:
         97:7e:e1:14:4e:21:99:f7:25:db:7a:8e:f5:27:e6:6c:78:81:
         4c:ba:23:14:c5:1f:18:be:75:87:86:3c:ee:89:6f:f2:42:73:
         93:b2:8f:bd:23:86:17:95:70:5f:4c:59:da:ff:20:65:1c:6d:
         de:a6:f6:63:2a:78:8e:a7:e5:9f:2d:df:5f:ff:20:2e:7e:f8:
         a7:8f:3d:e0:b3:c6:e9:8f:7c:0b:c4:b5:e0:c2:7c:7d:65:0f:
         00:b9:ac:40:d0:d2:d7:54:06:d5:1e:c0:be:9a:b2:5b:b7:44:
         06:48:90:d7:fb:00:2b:9b:85:75:11:a5:d4:6c:a7:f3:01:46:
         6f:47:cf:53:7a:e7:2f:f0:92:18:5f:a7:61:f4:57:c2:0e:fa:
         74:11:f5:da:a0:44:59:eb:cd:9c:4b:95:43:dc:1b:05:d3:a2:
         70:9d:07:5a:0c:2b:ba:25:5b:23:57:25:54:57:ce:63:d1:db:
         66:7c:29:42:5d:49:49:82:ca:38:f8:62:79:24:2a:e4:7f:04:
         9e:a3:fc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:41:37 2026 by rpki-client