Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/035d59ba-c590-301f-86f3-6c1ef087cf66.roa
File:                     035d59ba-c590-301f-86f3-6c1ef087cf66.roa (raw, json)
Hash identifier:          R8jnIt6BMX9tzMucrvewtkna5ybYikDqhix1mP1QOFQ=
Subject key identifier:   A0:63:36:D5:50:64:12:50:9D:19:AF:1F:9D:81:C4:DA:92:13:34:8F
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584F4974D374F29D4587A83A0D00
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/035d59ba-c590-301f-86f3-6c1ef087cf66.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10794
IP address blocks:        171.162.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:d3:74:f2:9d:45:87:a8:3a:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=de6efa8f-5719-4cd7-85a5-3e6111756a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b2:83:62:2d:0d:f4:05:90:c1:9d:0b:c4:8b:
                    59:44:81:e5:95:e4:00:a3:b2:26:76:ca:b0:de:86:
                    b5:fd:8f:e4:4d:3c:1c:7c:10:29:38:46:6b:77:2e:
                    b9:9a:77:0c:15:8d:53:d5:62:a0:88:1c:fb:ad:8c:
                    75:48:36:c9:ea:3c:43:fe:94:71:b4:ff:f3:17:d0:
                    32:7c:95:33:42:a0:22:1a:d3:61:f3:b1:45:96:c5:
                    ad:e0:f5:cf:38:8e:31:aa:68:3c:1d:85:80:06:48:
                    55:51:9b:4a:d6:b0:6e:cd:34:79:43:26:c3:b0:f6:
                    2f:4e:1b:44:83:c0:95:3c:63:64:21:71:eb:5a:b4:
                    d9:fb:5e:09:d1:a1:33:90:eb:47:e2:53:34:c9:c3:
                    d5:0c:84:2a:90:7e:56:2e:ff:57:4c:c8:b6:00:2e:
                    54:79:3c:3d:08:dc:8f:93:c1:28:27:6e:dd:9f:71:
                    bc:3b:ea:25:91:ea:38:41:a0:2b:a2:db:1e:19:3b:
                    17:83:2e:ee:36:ad:c2:2d:60:8b:ae:ce:0c:ab:f6:
                    23:e0:d3:69:85:df:c4:51:e6:c6:c8:ea:cd:02:09:
                    99:b1:b0:19:64:d2:46:11:fa:46:6b:78:f4:f5:9d:
                    2b:e1:d0:21:c4:32:77:70:14:5e:e2:d5:96:d9:4d:
                    a6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:63:36:D5:50:64:12:50:9D:19:AF:1F:9D:81:C4:DA:92:13:34:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/035d59ba-c590-301f-86f3-6c1ef087cf66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b6:10:43:1c:f2:d4:22:35:f9:59:a7:9b:cc:05:1d:b4:29:
         4b:93:2a:bd:c0:5c:c0:b1:7f:6f:68:c5:f4:7b:35:fb:a1:62:
         b6:49:b7:45:31:74:48:44:48:34:b9:3a:1a:b5:75:15:ef:13:
         d9:db:27:57:78:2d:b9:1f:f9:01:6d:8d:c3:a7:74:c1:c2:94:
         2b:66:9e:d5:29:72:db:c5:88:bf:c0:21:b6:21:0b:0d:db:a0:
         eb:5a:df:b5:3c:f4:b8:6c:62:37:16:1f:fd:6a:c5:12:db:2a:
         a3:b8:16:ea:00:f3:79:cb:13:ce:22:c7:d6:a8:79:5a:c4:61:
         2e:3a:58:7b:1b:f5:e6:0e:22:53:de:83:cd:da:f8:79:7f:b9:
         80:70:3f:6e:a5:b6:a6:bd:60:f2:09:20:6f:af:56:ab:74:8a:
         14:1f:53:96:56:7a:71:0e:9d:a6:7a:67:f0:11:ef:f4:e8:95:
         57:4d:2c:df:5d:bb:08:e9:ef:a2:77:ed:de:fe:f5:62:4a:93:
         4b:76:c5:b1:d7:b3:68:c3:7d:d0:b2:6c:0e:e7:7b:07:d7:46:
         c4:55:86:9d:2b:86:43:e0:f6:16:2d:7f:b3:31:f9:4c:f7:44:
         4a:a7:17:6f:b6:7f:07:0b:04:a6:e4:5c:09:3f:d0:69:51:4f:
         40:65:3e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:42:47 2026 by rpki-client