Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/dc3490c2-288f-34a0-95d6-1d11756238e0.roa
File:                     dc3490c2-288f-34a0-95d6-1d11756238e0.roa (raw, json)
Hash identifier:          +prAcaxJV5QnthRr1STbFVRAcfN/cgfk+BZF2kaEVCI=
Subject key identifier:   FC:8F:5A:D0:89:E4:2C:BE:41:02:5B:9E:D6:3A:A8:D1:3F:AE:D2:83
Certificate issuer:       /CN=c7b9cd73-4753-42b2-a13f-2213f0bfe4f8
Certificate serial:       010D0C9F4328584F4D84227D62186508E19F6DE0
Authority key identifier: A8:15:D6:9B:2D:72:3E:B8:83:15:9A:96:34:2C:FF:91:2A:0B:3F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/dc3490c2-288f-34a0-95d6-1d11756238e0.roa
Signing time:             Sat 26 Sep 2026 11:58:56 +0000
ROA not before:           Sat 26 Sep 2026 11:58:56 +0000
ROA not after:            Fri 25 Dec 2026 12:58:56 +0000
asID:                     3356
IP address blocks:        170.137.223.0/24 maxlen: 24
                          198.160.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4d:84:22:7d:62:18:65:08:e1:9f:6d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b9cd73-4753-42b2-a13f-2213f0bfe4f8
        Validity
            Not Before: Sep 26 11:58:56 2026 GMT
            Not After : Dec 25 12:58:56 2026 GMT
        Subject: CN=c5576d99-30fd-4453-a293-643edda3b8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ff:9e:5b:d3:80:f9:3e:1a:32:59:1f:19:82:
                    29:ca:9c:24:91:63:ed:2e:ab:b3:ed:8b:af:f1:51:
                    1d:0b:09:5d:9d:27:0e:09:10:2c:46:85:35:5d:fc:
                    51:90:1f:85:26:78:c3:f7:87:1f:95:cf:f2:a6:a5:
                    96:e9:ec:31:c8:49:ba:e0:22:10:47:7a:0f:6b:b2:
                    f9:6b:1d:7b:76:11:fe:ba:a5:78:f0:60:61:d0:8f:
                    a7:cc:20:6c:51:61:34:e3:b2:c5:f3:ce:58:b1:e4:
                    6c:c2:43:29:b5:51:83:1b:31:2f:f4:b8:5e:75:41:
                    7c:a6:5f:f0:20:65:8f:f5:b5:f7:6b:a9:ab:17:96:
                    f0:e0:7f:17:4e:f8:69:7e:48:25:4c:a6:06:fe:7a:
                    22:c2:e5:e6:85:48:69:03:d4:3f:2f:22:d1:3c:0c:
                    87:e1:c3:23:9f:ce:a3:0e:cc:d3:ed:b9:2c:e4:9b:
                    d6:9e:8c:41:f6:08:d1:75:8d:94:5a:4b:94:87:65:
                    6b:e0:48:9b:ec:ca:b6:04:1e:84:04:66:db:7e:b9:
                    cc:33:37:0a:69:13:74:91:d7:51:23:0c:01:51:ca:
                    6b:be:4f:f6:22:05:fb:96:03:7e:ee:77:6c:e1:4e:
                    2b:03:82:43:b0:80:bc:9c:62:d3:3b:37:f6:90:ac:
                    0e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8F:5A:D0:89:E4:2C:BE:41:02:5B:9E:D6:3A:A8:D1:3F:AE:D2:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/dc3490c2-288f-34a0-95d6-1d11756238e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.crl

            X509v3 Authority Key Identifier:
                keyid:A8:15:D6:9B:2D:72:3E:B8:83:15:9A:96:34:2C:FF:91:2A:0B:3F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.137.223.0/24
                  198.160.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:9f:2b:30:13:18:3e:98:63:f0:29:88:9e:de:0b:a1:3b:f2:
         94:8d:5a:d2:f4:45:54:53:be:c9:ff:ec:26:ed:aa:4e:fd:fd:
         d3:75:34:0a:9a:5b:c9:d8:7a:77:d4:e8:59:16:ab:87:db:16:
         26:9e:21:67:33:75:75:cf:36:e9:e0:9a:ed:40:7b:1e:90:46:
         08:0b:03:e3:a8:04:63:b7:92:d9:14:32:18:19:95:c5:97:98:
         2f:ec:68:31:54:8e:ff:84:3b:27:d8:c6:3a:fc:b7:db:ee:42:
         86:41:36:d8:bc:c8:a1:b3:67:db:43:d7:0e:46:00:37:8f:29:
         ea:ab:7e:82:13:62:ff:58:bb:a6:8a:26:23:e5:44:59:37:75:
         83:fa:c8:4e:d0:22:f5:99:8c:31:ca:fa:ea:ac:b5:7f:75:8e:
         9d:7c:87:8f:06:f6:ba:fc:85:79:6a:c2:16:3e:bc:e4:d1:ac:
         ae:8b:55:be:4d:8e:12:8c:bd:1f:05:6d:cd:a4:37:17:06:8d:
         a6:f6:f0:4c:b6:04:24:51:2f:db:06:56:2c:97:07:56:99:8f:
         cb:47:92:cd:8e:08:92:34:31:4b:eb:85:97:45:6e:68:35:ea:
         1a:87:31:9c:12:eb:f2:3f:ca:12:e9:53:89:b2:e5:ce:b1:a8:
         60:8d:03:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:42:03 2026 by rpki-client