Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/fe18c71d-604f-348f-a780-4282df06344f.roa
File:                     fe18c71d-604f-348f-a780-4282df06344f.roa (raw, json)
Hash identifier:          d7NhTn3Q2UHNR7IuDb26amqfhxqSMk0hi2UaXnUBiEg=
Subject key identifier:   85:0F:04:E1:CE:EF:7F:9E:5F:DA:5C:EC:1B:64:C4:3A:A4:40:89:2F
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F4328584F2527AD3850F0B93A46EA2C00
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/fe18c71d-604f-348f-a780-4282df06344f.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        165.140.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:ad:38:50:f0:b9:3a:46:ea:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=13b70a1d-3053-4d37-9bfc-d504ce6a49aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:58:8d:e0:f9:68:c5:a6:ff:33:76:44:9c:
                    52:8d:7e:d2:71:bf:ce:35:83:91:d2:01:a9:1a:b0:
                    74:d7:21:ba:00:b1:7f:cc:da:87:01:7a:43:dd:38:
                    dc:79:3f:6b:fb:33:50:ef:f4:61:47:1e:5d:3e:ea:
                    1b:fa:c7:b5:56:05:f5:6d:e5:d1:0e:5c:ae:58:2c:
                    06:a7:04:a7:f9:49:84:46:2d:6a:07:af:3e:68:8c:
                    75:e5:21:8a:79:2f:1e:b2:a9:d5:af:6b:3c:e6:58:
                    a6:8a:eb:eb:3c:74:a0:a5:b9:3b:1c:e2:30:b7:08:
                    2b:51:69:c3:f8:43:f4:b4:37:ca:77:90:54:07:08:
                    c9:a0:10:09:3a:0b:10:b3:00:28:5d:4a:14:62:f6:
                    45:42:eb:fa:38:47:8a:47:66:d3:ff:20:f9:cf:31:
                    3b:96:33:04:82:01:e6:2c:86:27:d3:11:1e:18:26:
                    7d:32:70:c3:15:2b:13:5e:38:00:d5:73:f2:d0:ac:
                    59:56:ba:c5:7f:fe:35:70:4f:38:9e:27:0a:7f:4d:
                    a5:76:3e:9f:75:9c:cf:e6:df:ce:61:3b:87:eb:14:
                    bf:15:67:65:d6:01:0b:3c:b4:e3:ea:78:3c:bf:84:
                    8a:71:fa:f9:11:ff:68:de:4d:03:ad:78:e4:79:8c:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0F:04:E1:CE:EF:7F:9E:5F:DA:5C:EC:1B:64:C4:3A:A4:40:89:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/fe18c71d-604f-348f-a780-4282df06344f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:07:65:ce:e3:03:b0:d4:f6:83:57:eb:16:55:80:68:8e:df:
         17:33:90:b6:a3:50:11:a7:1d:62:1b:99:99:c3:60:61:f9:8e:
         42:8e:53:71:5b:bc:f6:60:6b:61:d4:a0:e8:b9:f5:7c:27:de:
         66:74:18:4d:77:b7:af:a1:f8:69:bc:f5:07:d2:16:39:29:91:
         b4:1e:2a:02:49:f2:82:d0:2c:e0:44:99:c6:7b:ea:77:34:e4:
         c2:99:83:3a:6a:b6:25:80:cb:15:de:30:99:bf:93:4d:dc:39:
         25:93:8a:cb:0d:d3:d7:59:19:e6:c4:e6:4f:9d:68:33:68:8c:
         ac:da:8b:74:9a:3d:f4:71:43:26:53:65:4b:39:49:e7:91:81:
         df:a4:64:23:6e:ff:dc:53:98:f8:d9:f0:62:5b:02:84:e9:46:
         f2:9d:77:c9:88:6f:b7:1e:27:b4:11:af:a7:e7:5d:83:63:0c:
         2e:36:eb:f0:89:16:02:a9:4d:32:e1:0a:84:64:10:35:d9:db:
         4e:80:33:ae:90:46:78:7c:4f:ca:4b:e1:75:f9:87:df:d7:fd:
         2b:08:1d:31:89:62:d5:1e:f6:6b:e5:fb:2a:de:6c:41:c2:b0:
         ed:a2:4d:d1:6e:ec:84:40:b2:4f:9f:ad:03:20:ef:ac:1a:4f:
         03:2f:a7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:32:56 2026 by rpki-client