Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/36cb5d2c-2469-3a32-877c-bc1354906cdd.roa
File:                     36cb5d2c-2469-3a32-877c-bc1354906cdd.roa (raw, json)
Hash identifier:          fqhmRQJUfGYqx5eFuSrT44S8tmZN9uP9LXSSMo7M20M=
Subject key identifier:   80:5B:C8:EB:FD:10:E8:A1:A6:ED:BA:0A:E7:94:87:90:6F:26:41:A0
Certificate issuer:       /CN=83123792-cda3-4a51-83f1-391c845bc812
Certificate serial:       010D0C9F4328584F4976D6D465B3C33CD5E76580
Authority key identifier: 60:48:6D:F4:76:69:54:C8:BA:5F:7F:64:AA:DF:7B:64:62:DD:47:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/36cb5d2c-2469-3a32-877c-bc1354906cdd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397914
IP address blocks:        170.117.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/83123792-cda3-4a51-83f1-391c845bc812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/83123792-cda3-4a51-83f1-391c845bc812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:d6:d4:65:b3:c3:3c:d5:e7:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83123792-cda3-4a51-83f1-391c845bc812
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d68cf965-96ed-4f00-8568-29a327a2a9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:86:c1:26:a5:0b:86:c4:fd:05:b4:b1:d8:5b:
                    29:4f:d9:c9:ef:a0:e4:d6:62:d0:d9:92:91:b0:f0:
                    75:de:3c:e3:06:4e:8e:5a:cf:8f:17:0d:be:45:25:
                    ec:e7:5e:d5:97:16:60:b7:2e:38:45:7a:16:5f:73:
                    5c:97:4e:c7:cb:52:1e:01:d0:61:b6:41:ac:f5:15:
                    fe:b7:aa:d4:5e:92:4d:97:7b:02:c9:95:f1:b8:e0:
                    62:88:f8:a4:e0:8d:c1:5b:31:92:79:64:1b:fe:d5:
                    43:2a:38:1c:a7:db:dc:2e:56:1f:78:5b:67:64:ac:
                    57:10:05:1e:10:64:e6:a4:2a:31:62:29:a7:d7:f7:
                    42:c7:65:41:d3:c3:ce:74:7b:c2:bb:6f:4a:2c:89:
                    3f:6d:0c:12:bd:2d:15:33:de:96:b5:ef:4e:c5:a1:
                    c2:77:9c:0d:b0:14:54:53:37:0c:37:d5:1f:7e:ec:
                    d2:2e:cf:ec:47:95:31:d0:3b:50:b8:a1:c8:52:55:
                    d1:7f:08:d2:ad:86:38:6c:d3:db:cf:d4:cf:31:fc:
                    68:cb:7f:75:b8:9d:34:25:7a:cc:ca:df:78:c7:1b:
                    8c:96:fa:1e:46:3b:3e:cd:91:c5:51:63:44:0a:a8:
                    fa:44:bf:b5:72:e1:4d:3a:5e:da:16:7d:54:f0:2b:
                    86:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5B:C8:EB:FD:10:E8:A1:A6:ED:BA:0A:E7:94:87:90:6F:26:41:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/36cb5d2c-2469-3a32-877c-bc1354906cdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/83123792-cda3-4a51-83f1-391c845bc812.crl

            X509v3 Authority Key Identifier:
                keyid:60:48:6D:F4:76:69:54:C8:BA:5F:7F:64:AA:DF:7B:64:62:DD:47:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.117.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ab:7e:ef:16:dc:26:17:33:85:9b:64:34:88:3d:dd:fc:77:
         bf:20:35:72:fe:02:e6:38:2e:1b:ac:1d:d8:bc:5c:75:f2:10:
         df:23:0b:8d:90:59:20:c7:ce:c3:df:37:63:c4:80:07:1a:cf:
         30:5a:0a:f3:38:9e:15:dc:8e:5f:26:46:74:60:9b:53:9c:1d:
         de:fe:42:40:fc:d9:d8:e9:f3:91:a1:4e:8f:c2:ec:91:d7:6b:
         af:8c:e9:89:84:5f:cc:9a:5d:2d:d4:60:af:f2:f8:9c:62:66:
         38:ab:58:30:26:90:bd:73:27:be:32:8b:8f:a5:dc:3e:be:97:
         01:64:d3:67:4d:8e:bd:33:4b:c4:40:9b:d5:e3:f5:d6:6a:e3:
         51:8f:f0:56:30:d2:6d:5f:0b:dd:32:e5:32:6e:33:2e:ae:a2:
         d7:5f:0e:27:bc:57:fd:3d:02:b9:9e:53:fc:f8:7d:1c:ac:52:
         0a:61:77:b7:a2:56:c9:31:f1:66:09:dc:0d:f1:f8:20:cb:d9:
         5a:87:07:40:2e:6d:4d:ef:5a:5e:ad:70:4f:cd:7d:bc:6e:f4:
         cf:54:0b:5b:a4:67:5e:98:89:0e:4d:d5:a7:11:04:1a:bb:f1:
         80:33:fb:29:98:4a:af:e7:e8:13:85:ea:e0:2d:26:ef:d9:49:
         ec:5a:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:19:02 2026 by rpki-client