Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/2b654aa1-a886-3bab-aa04-1bc12d9d838a.roa
File:                     2b654aa1-a886-3bab-aa04-1bc12d9d838a.roa (raw, json)
Hash identifier:          nEK+wMXC7178oSMXldPFTwX7490AWjavGw8GSr3DoU0=
Subject key identifier:   2D:84:23:D9:E5:79:3A:96:A7:73:3A:AB:74:D3:EA:8C:F3:F0:86:11
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328584F480D366D5F4C7BACC83D0340
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/2b654aa1-a886-3bab-aa04-1bc12d9d838a.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     18004
IP address blocks:        163.181.24.0/24 maxlen: 24
                          163.181.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:36:6d:5f:4c:7b:ac:c8:3d:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=461837de-a449-4756-88a8-caf8b29b5191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:76:f0:0e:6e:ae:78:16:7b:6e:e8:2b:ca:
                    0d:78:f2:5f:a0:3d:19:45:9c:1d:df:cf:12:90:0c:
                    98:9b:01:bc:52:61:ad:06:bc:79:c3:f4:d2:2f:db:
                    d5:f4:41:1e:93:e4:f3:e5:ec:a9:7c:61:33:f4:8c:
                    73:83:67:c7:7d:8c:03:06:51:bc:25:aa:9d:dc:76:
                    53:f2:7e:bd:0b:5a:ef:a5:17:6b:fd:2c:4e:61:ea:
                    ff:8c:8b:ce:15:dc:ba:90:54:37:4a:4c:7a:b8:11:
                    b7:6c:ac:5f:ac:0e:3f:e7:2a:60:57:66:c7:7e:a7:
                    58:b1:c6:a2:cb:39:9c:21:0c:1d:d7:52:c5:1a:3e:
                    02:59:86:90:da:1e:64:9a:56:39:44:bd:21:d7:8c:
                    5e:d5:71:8c:d5:2b:19:5a:4a:d0:ef:ca:2d:ec:b5:
                    50:7b:cb:f2:2d:01:38:3e:59:be:c4:cf:86:fe:05:
                    5a:3f:f4:62:37:d0:6c:01:ba:f9:fb:ec:5f:7f:76:
                    2a:6c:a5:9e:6c:42:e9:e5:98:81:3a:64:80:04:85:
                    b2:1d:f8:f8:39:67:25:26:96:69:72:bb:d7:89:9b:
                    7e:08:f3:2c:8f:56:98:af:c4:e7:6a:d3:c1:4a:33:
                    5c:07:fc:6b:1d:9e:d7:10:c6:3b:63:58:d3:2e:6d:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:84:23:D9:E5:79:3A:96:A7:73:3A:AB:74:D3:EA:8C:F3:F0:86:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/2b654aa1-a886-3bab-aa04-1bc12d9d838a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.181.24.0/24
                  163.181.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:97:10:92:de:e6:65:d1:37:90:c1:cb:66:dd:29:69:52:27:
         64:65:06:78:cc:56:3d:13:4e:94:78:cb:b3:41:1e:57:40:b8:
         73:32:fd:10:88:de:99:61:cb:a7:67:61:1f:81:39:09:64:02:
         a7:db:e8:50:19:0e:11:a7:e8:9a:b5:62:32:4c:f7:b2:5e:37:
         e2:1d:4d:23:06:b3:b2:2a:21:89:e4:36:62:8e:6f:51:ec:08:
         0f:d1:04:e8:f4:17:94:0b:a2:3e:d2:ab:4c:cd:80:3d:21:f2:
         38:43:fc:4f:d6:d4:05:69:79:ad:b7:4c:81:4c:3e:fb:ef:16:
         8f:a9:ff:61:3d:68:8a:af:35:ee:b4:1c:db:44:9a:5b:25:4b:
         ae:d2:bd:13:3b:fe:a3:ce:da:5a:7d:83:ad:08:08:b1:b3:ea:
         60:e1:f5:ee:b1:a9:16:88:07:29:5e:bc:fa:ed:18:34:db:6f:
         cd:a7:53:f3:51:6f:82:4e:de:fb:5a:a6:4e:ae:7d:e5:06:f2:
         85:6a:34:b1:58:63:5a:95:34:05:0d:79:71:28:5f:18:e5:a7:
         bd:ac:3f:fc:e9:a5:05:91:2e:15:95:cf:9b:df:06:ef:5b:5c:
         51:71:3b:9c:e3:13:df:b5:a1:60:25:f9:6f:b4:7e:52:9f:10:
         69:60:d7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:52:59 2026 by rpki-client