Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/8a4e6497-5a76-3af6-9ac4-4a4662c464f0.roa
File:                     8a4e6497-5a76-3af6-9ac4-4a4662c464f0.roa (raw, json)
Hash identifier:          3T1AOAw0oUudlDgtSeC40cKmsTaUv6KdXoRAgBkQRJw=
Subject key identifier:   B3:06:07:51:22:22:7B:FB:AC:11:80:A2:A7:55:97:36:42:1B:5F:F9
Certificate issuer:       /CN=7c67559d-5543-4d0a-b17b-c1476e206181
Certificate serial:       010D0C9F4328584F49728B629E17830E65B75580
Authority key identifier: A7:02:15:25:EB:D1:75:78:06:09:B8:0D:E8:2C:2F:F8:89:3B:AB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/8a4e6497-5a76-3af6-9ac4-4a4662c464f0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400956
IP address blocks:        172.82.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/7c67559d-5543-4d0a-b17b-c1476e206181.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/7c67559d-5543-4d0a-b17b-c1476e206181.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:8b:62:9e:17:83:0e:65:b7:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c67559d-5543-4d0a-b17b-c1476e206181
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a80de427-378b-4926-a0ca-df671064e057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:fc:cb:85:69:1b:80:92:7e:85:b2:c3:b3:
                    f3:0c:f5:95:17:cf:53:3b:68:e3:d1:d1:a9:2a:6a:
                    2c:4d:f5:9d:a8:9f:11:27:b8:0c:68:65:f1:19:2c:
                    2a:8b:c0:b6:0f:24:b8:01:ac:35:43:7d:a0:ef:f3:
                    96:f8:9a:e3:bf:37:95:3d:9d:17:9e:01:09:6c:46:
                    61:63:d7:0a:f0:49:16:9a:8b:bc:47:3d:93:09:08:
                    04:9d:24:5d:b8:e1:e9:dd:c6:34:7a:91:50:63:8a:
                    d9:81:8c:91:c0:68:53:fc:ae:47:9b:7b:1c:80:fc:
                    b8:4c:8c:d2:1e:6b:0c:da:4c:9c:4e:f2:f2:31:14:
                    cd:83:2b:c3:07:a8:c6:0c:33:3d:fe:7f:4c:46:dc:
                    21:11:da:ba:1c:d3:df:a8:91:7d:4f:8b:a8:2b:87:
                    ad:5e:d7:6e:db:4e:62:83:09:f5:67:bc:cb:cf:11:
                    04:c5:09:7e:31:7a:13:4f:21:a7:8a:67:65:fe:68:
                    9f:54:61:bd:40:05:91:14:ad:f5:1c:f9:77:16:47:
                    47:e5:be:7b:60:64:b7:34:5f:0d:c0:9c:d1:00:6a:
                    c5:cc:f2:96:0b:43:1b:55:ce:5e:5c:c5:08:27:41:
                    c3:c6:26:40:c7:8f:52:6a:3d:17:db:3e:45:48:2f:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:06:07:51:22:22:7B:FB:AC:11:80:A2:A7:55:97:36:42:1B:5F:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/8a4e6497-5a76-3af6-9ac4-4a4662c464f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/7c67559d-5543-4d0a-b17b-c1476e206181.crl

            X509v3 Authority Key Identifier:
                keyid:A7:02:15:25:EB:D1:75:78:06:09:B8:0D:E8:2C:2F:F8:89:3B:AB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:90:bd:75:6c:6b:eb:7c:82:14:fa:f0:43:7d:c1:53:07:71:
         ed:57:dc:e7:23:9c:cd:73:0a:77:f4:39:de:ff:40:c4:bf:ad:
         a6:19:8f:c8:08:93:c0:93:c9:33:59:d1:42:94:3a:de:87:41:
         13:cb:ea:94:f5:08:fe:64:f3:b3:2e:6e:eb:65:4f:de:9e:9f:
         ee:59:af:07:f7:67:cc:fc:89:2a:56:99:c4:77:e6:78:88:ac:
         8b:30:67:49:ae:e2:05:a8:13:57:9d:49:56:ee:d7:03:f4:f5:
         79:2b:43:a2:d0:d9:21:44:da:4d:32:de:7d:2a:7c:92:db:bd:
         fe:96:37:1f:24:9b:41:b2:1a:45:d7:ed:31:f2:85:3f:f0:d0:
         1a:a7:bb:cd:91:1b:32:3a:27:94:ae:be:f7:92:dc:b8:d5:00:
         a9:47:27:29:11:75:c8:23:d4:5b:a2:ae:54:b7:8a:a5:a3:0f:
         1a:0f:32:4d:42:59:bd:6c:30:71:3f:9e:69:d0:73:b1:4b:41:
         93:88:f9:57:2b:23:02:07:10:80:a6:b3:95:83:4f:5b:7c:73:
         6c:cd:7e:05:b1:6d:7a:71:00:08:9d:d1:b8:f6:27:5f:6d:9d:
         f9:be:a1:75:15:f0:67:b3:d7:00:16:35:ee:20:7a:7c:36:ac:
         a6:3e:7c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:37:53 2026 by rpki-client