Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/17049434-7140-3fa4-9df0-8c962bd6239c.roa
File:                     17049434-7140-3fa4-9df0-8c962bd6239c.roa (raw, json)
Hash identifier:          1RC3/3r129/K+EhE9PBGZYqyVOexluQFNw0TEGoo9ew=
Subject key identifier:   B5:17:10:69:F2:22:44:25:D1:FC:D1:C3:0C:FC:31:A0:8D:93:B7:EA
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584F498A7BE03F43AA1665F8D5A8
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/17049434-7140-3fa4-9df0-8c962bd6239c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397373
IP address blocks:        206.245.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:7b:e0:3f:43:aa:16:65:f8:d5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a3f6c501-26e8-44fc-be90-7298657f44e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:86:a9:1d:12:21:bd:6e:a6:df:c4:c2:cb:
                    83:02:00:45:e2:60:66:c8:0e:29:c9:0d:6e:59:67:
                    22:b2:02:b7:8b:9c:da:97:48:f1:68:db:4e:c3:34:
                    98:be:c5:e2:ad:30:3e:52:55:7d:9f:15:3e:66:1c:
                    e3:79:71:18:f3:7d:bb:0e:43:9b:75:a9:8c:88:04:
                    b7:b2:e3:0d:a6:0d:8b:0f:77:ef:bc:c8:48:68:82:
                    51:1a:c9:46:50:5e:2e:72:a9:a2:df:91:40:6f:4a:
                    5b:0b:71:7b:51:89:9f:a9:fd:3d:c7:b0:c0:69:37:
                    6e:82:bf:d5:45:f0:6c:f3:3a:43:72:17:e4:fe:27:
                    6e:95:93:e8:13:45:94:bd:fd:fe:8e:b7:31:f1:82:
                    33:df:e4:15:da:72:dc:b8:eb:a6:e6:3d:79:29:7f:
                    09:d7:f4:5a:ca:d1:70:4a:ab:d3:21:5a:22:3e:b1:
                    75:81:94:38:5a:df:ab:6b:12:fe:8d:66:62:8d:49:
                    85:f5:66:7e:0a:f4:1e:0f:af:08:ac:00:3d:e1:92:
                    45:ee:a1:6d:02:8a:99:d2:1c:d1:16:22:84:cf:3b:
                    25:05:86:6a:5c:7b:fc:8c:ed:fa:0c:af:57:8f:f0:
                    7b:db:5b:84:b0:d9:fc:4d:e4:39:6f:3b:84:26:b8:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:17:10:69:F2:22:44:25:D1:FC:D1:C3:0C:FC:31:A0:8D:93:B7:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/17049434-7140-3fa4-9df0-8c962bd6239c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.245.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:62:a7:44:a9:0e:b0:d4:e2:81:e5:47:ca:70:01:38:92:8e:
         4e:27:5d:11:6c:65:88:01:e4:b8:d3:dd:2e:9a:e6:f0:b0:da:
         ae:7d:c5:b6:06:ca:8d:d1:2a:4e:ac:90:fb:8b:7d:a5:c9:ff:
         3a:70:ba:64:14:b2:c1:56:7e:bf:b1:12:73:22:79:0e:ff:0f:
         1f:d9:7e:55:2e:26:51:81:e2:29:eb:c7:a8:9f:4e:e2:86:d9:
         0b:0a:2e:26:51:e0:d3:af:be:39:c1:e9:11:e4:35:51:f1:4d:
         26:57:b5:fd:c5:bb:bf:5e:6b:63:e6:42:a7:51:ec:45:b6:c1:
         fb:2f:c5:8d:83:9c:48:9f:fc:29:e8:8f:73:ab:f8:c9:76:c5:
         c3:b3:b1:9f:c8:05:5d:de:2c:02:38:cb:ea:0b:87:f8:1c:41:
         fd:cc:df:e1:e1:fb:34:3a:56:03:11:31:34:71:eb:ab:96:29:
         72:6f:e1:9b:bb:01:96:e2:58:47:cc:b8:ea:79:0e:00:94:82:
         cf:ed:59:ba:37:c4:59:11:58:bc:cd:61:67:d6:4b:88:91:8c:
         55:b4:4f:f2:e6:82:43:ea:cc:a0:29:a2:c6:13:5a:79:f2:18:
         d4:41:b3:d0:a2:ea:19:33:09:37:e3:a2:08:7f:8e:bb:49:8c:
         db:42:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:53:20 2026 by rpki-client