Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/eb654470-a4b4-350b-a513-18d87c738ca9.roa
File:                     eb654470-a4b4-350b-a513-18d87c738ca9.roa (raw, json)
Hash identifier:          aSSNcBsJ/aGUvVk1wZJJ0X+SYu05kFAz6cvm41gc0YE=
Subject key identifier:   CC:42:F7:25:69:17:4A:8E:D5:A1:2C:10:91:09:3F:0B:1F:56:FA:4E
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584F698D6D66E82967A9FE53F140
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/eb654470-a4b4-350b-a513-18d87c738ca9.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     3855
IP address blocks:        207.228.190.0/24 maxlen: 24
                          207.228.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:6d:66:e8:29:67:a9:fe:53:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=9abc1499-83a0-477f-85a3-fa97d86d5fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:80:b5:b9:36:27:f1:51:55:14:10:9d:26:
                    5c:1d:57:ff:2a:8e:fe:16:1d:31:a5:9b:74:8d:01:
                    43:39:a9:a2:f5:6d:9a:f5:20:45:ad:66:c7:40:43:
                    a8:e7:89:0b:94:b2:22:b3:59:3b:42:54:4e:9d:9a:
                    69:da:e7:54:3e:dc:7c:54:c1:7a:3d:a8:e1:57:59:
                    ed:6c:ec:21:fe:ec:14:6e:83:08:f5:2e:e2:af:f3:
                    92:71:c1:8f:3b:64:5e:54:ff:8d:bb:2a:cb:e7:ca:
                    28:11:21:34:a1:e9:3b:7c:57:51:33:d2:da:85:a3:
                    58:7d:d4:75:50:19:af:88:59:70:05:29:38:03:e3:
                    b7:75:e4:c0:05:da:00:5b:e9:13:8f:14:cf:dc:3f:
                    c0:a9:2f:5f:b4:9f:c9:4a:cf:29:5f:37:93:8c:cf:
                    45:75:cf:52:a6:12:d7:53:00:4e:d2:e0:12:02:ea:
                    e1:27:cf:da:7e:1a:94:2c:55:ca:36:ba:d3:cc:a9:
                    fc:c6:67:6e:53:87:8f:70:39:ab:09:7a:f2:ba:bb:
                    18:4d:16:d5:69:0d:95:a3:b0:a9:3b:80:b6:fa:e7:
                    25:b4:3e:d6:bc:c5:2b:1c:60:30:c0:53:48:85:64:
                    87:7b:ea:93:8d:86:d9:db:39:d3:f7:9e:d5:62:f4:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:42:F7:25:69:17:4A:8E:D5:A1:2C:10:91:09:3F:0B:1F:56:FA:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/eb654470-a4b4-350b-a513-18d87c738ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:25:af:72:51:7d:ea:6f:2b:b7:cc:95:c3:02:2f:e5:af:3e:
         28:3b:f2:08:f5:58:e4:81:c1:ca:a4:d0:c1:74:0e:08:af:98:
         92:03:12:c4:97:3b:81:ae:3b:b9:13:cd:c0:05:0a:62:68:e1:
         c7:65:77:8e:08:19:8c:2e:e0:9a:27:83:55:96:e1:02:83:25:
         c3:ee:66:b2:d2:84:b0:38:34:7e:2c:ba:16:9c:6d:4e:2d:b9:
         5e:92:a3:52:06:b4:c7:65:0d:69:c5:cb:32:75:df:6b:3a:c9:
         2b:8e:14:21:48:1f:ff:87:ec:20:d2:87:c4:6d:91:38:0c:fd:
         c7:3f:ac:2f:89:0d:0f:8a:da:2c:e3:c6:b7:ec:8e:c7:53:ca:
         cd:c7:7c:41:38:8d:22:1f:7b:4a:16:9f:21:d7:72:b7:cb:07:
         27:42:5a:89:88:47:97:6a:58:8c:21:ff:09:ed:6e:27:0e:6f:
         11:53:05:ff:92:84:8f:3f:a3:26:72:12:aa:ab:d9:a0:7c:7d:
         18:d6:18:f1:51:e6:c1:96:e8:98:b6:3f:ea:36:cc:ac:ff:71:
         d1:1e:39:4b:49:98:ff:ef:5e:b4:a0:5d:21:f4:c1:9f:d4:81:
         35:2a:e2:fa:61:73:c3:da:0b:52:b2:d7:1a:1c:c8:94:1c:15:
         7e:9f:37:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:49:18 2026 by rpki-client