Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1801d3d0-3756-308f-991c-268b40e2a0da.roa
File:                     1801d3d0-3756-308f-991c-268b40e2a0da.roa (raw, json)
Hash identifier:          KWm5IpnHPynPOoFLSTfjgflESEj3eOhejfl7eqbexxY=
Subject key identifier:   7B:B2:2A:3C:0C:76:54:FD:35:C6:26:60:4D:20:AE:A8:3A:B7:03:26
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584F1B624CD876826C7E03A6CD00
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1801d3d0-3756-308f-991c-268b40e2a0da.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     30045
IP address blocks:        205.210.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:4c:d8:76:82:6c:7e:03:a6:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=667df0b0-7c62-4a8b-9689-0c8d49a5dc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1c:0e:fa:29:69:8a:75:3d:b0:ca:9c:3b:14:
                    d3:ca:34:bb:72:c7:f8:99:88:b2:b8:1f:c7:95:49:
                    e8:82:ef:54:25:27:1d:b4:46:99:ba:9a:14:78:ba:
                    49:50:44:ed:dd:1b:ed:6c:a6:f3:a3:69:46:a6:cd:
                    c3:6f:91:b0:3d:4b:40:18:bc:9e:5d:bd:f2:2b:6d:
                    a3:8f:62:79:80:58:aa:47:62:07:55:60:eb:38:d0:
                    e4:ab:4a:cb:07:96:51:b9:36:28:61:bd:e2:89:95:
                    ae:c5:0e:8e:91:2d:3b:d4:f0:eb:73:7e:b2:d1:2e:
                    4e:15:aa:6f:6b:db:33:5d:9e:6a:b9:d1:72:65:5e:
                    3a:6c:b4:82:07:41:30:51:16:ee:d2:93:eb:97:ca:
                    81:34:b5:bc:11:64:81:20:aa:5c:7a:41:54:8f:4e:
                    6e:0f:8e:df:ca:2f:fd:5d:7d:3d:3d:cf:fa:2d:2e:
                    a8:61:cb:36:37:5e:e9:a9:7d:39:90:dd:9e:81:e8:
                    ae:f7:3c:b8:79:ec:0c:1e:76:34:4e:ca:00:9a:d1:
                    f6:ac:d2:a6:32:c8:b9:cc:8d:32:58:50:d0:e6:53:
                    bc:8c:29:0b:20:40:e1:fc:d7:eb:e6:e4:76:bb:67:
                    96:7d:39:e2:46:eb:9d:df:4c:18:5d:f2:3e:e0:40:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B2:2A:3C:0C:76:54:FD:35:C6:26:60:4D:20:AE:A8:3A:B7:03:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1801d3d0-3756-308f-991c-268b40e2a0da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.210.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:84:6f:de:5b:07:0b:ed:56:77:75:24:1f:1e:07:ff:ab:f3:
         c5:5b:6f:0d:ff:94:70:6f:79:ac:51:c2:b5:c3:c5:38:f0:dd:
         61:ab:5f:0b:83:cd:96:85:54:62:4b:ac:8e:f0:98:cf:e7:70:
         e2:08:99:a7:6c:89:9a:39:d8:74:f2:93:0e:61:01:ca:16:e2:
         0f:a2:62:91:f7:14:6a:04:d1:a2:6a:6d:bd:ba:29:b3:94:7c:
         c0:af:2a:e4:8c:e9:24:c3:6c:7d:6c:f8:22:51:23:08:cb:88:
         c1:ef:b8:3a:f8:10:25:d6:37:e9:04:46:df:d1:1b:2e:46:6e:
         a2:1a:43:89:f7:e9:85:00:ca:53:60:e9:d2:e6:7f:34:33:57:
         32:bf:00:40:ac:b6:84:dd:5b:9d:77:64:35:3d:7a:30:2b:b8:
         4b:48:fe:2c:d2:9a:03:a0:ed:80:e7:00:bb:18:e0:fb:da:6a:
         e4:c3:64:69:f5:a9:01:82:21:9b:78:9f:8d:43:22:d7:c0:27:
         42:47:59:b6:bc:3e:3c:88:90:78:89:fc:45:73:b1:7e:24:f2:
         ae:49:66:c7:9e:cd:34:ee:cd:ec:11:a6:fc:36:83:32:03:91:
         ee:8d:e7:68:6a:7d:67:ad:3e:b2:21:8e:ad:0f:9e:c5:8f:96:
         98:82:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:44:58 2026 by rpki-client