Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/971182dd-1422-30d6-98cf-97e0afc19304.roa
File:                     971182dd-1422-30d6-98cf-97e0afc19304.roa (raw, json)
Hash identifier:          AFbf1rOfDyfu+0kB12wYv3sMzPhI/63BIfrGXkksAx8=
Subject key identifier:   D1:FD:E1:33:40:7B:6F:2A:D7:87:0F:A5:9C:BB:EC:B3:BB:32:FD:23
Certificate issuer:       /CN=e3aefa7a-1469-41b1-a14f-6fc251b55823
Certificate serial:       010D0C9F4328584F506D46B7636BFE6A24FE6200
Authority key identifier: 23:A1:6E:FC:A2:EC:5A:D6:A7:A8:05:AB:FD:EA:DF:68:5F:07:21:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/971182dd-1422-30d6-98cf-97e0afc19304.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     15280
IP address blocks:        205.166.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:46:b7:63:6b:fe:6a:24:fe:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3aefa7a-1469-41b1-a14f-6fc251b55823
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=bf18380b-bfa7-413f-8984-f360c6c1c098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:eb:3d:c1:81:09:c8:9c:75:e8:17:62:25:
                    70:57:7f:f0:e2:b3:19:50:f0:57:b5:cc:d1:9a:c0:
                    ce:53:b8:b2:60:44:31:6b:99:c1:da:0b:fb:29:2d:
                    8e:c0:8d:aa:0e:cd:5d:1d:f3:57:8c:12:0c:ad:91:
                    27:ef:bc:d4:4a:5b:c8:46:5c:55:95:01:4c:8c:32:
                    8b:ab:9b:86:b3:4c:89:e5:d1:c5:55:c1:28:30:40:
                    26:c0:93:14:14:71:db:af:ad:65:b8:f8:44:d4:db:
                    b6:4b:f0:b6:2c:4c:52:c9:1a:0e:57:50:01:08:23:
                    a8:61:67:a8:63:70:cb:74:c1:db:dc:40:89:0d:24:
                    02:60:db:c3:d1:52:e3:08:74:21:26:b8:0e:41:be:
                    d0:b8:a5:3a:5e:b1:07:2f:87:9e:a1:90:64:86:d6:
                    62:6f:3d:4c:71:99:cb:83:1f:12:5d:d3:06:a6:f5:
                    ca:c5:c7:e4:92:bd:0f:f1:25:bf:42:4e:4a:ff:f8:
                    35:0a:d0:39:c4:6e:d3:2e:32:9c:a3:ee:26:56:93:
                    9f:33:3d:f0:82:c8:6c:33:0f:b1:cb:8f:86:a6:05:
                    67:2e:fc:a5:e3:29:a3:f1:d5:80:6b:70:33:4b:b8:
                    a4:b4:ae:18:77:b8:0e:18:fd:23:94:0e:24:3e:41:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FD:E1:33:40:7B:6F:2A:D7:87:0F:A5:9C:BB:EC:B3:BB:32:FD:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/971182dd-1422-30d6-98cf-97e0afc19304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.crl

            X509v3 Authority Key Identifier:
                keyid:23:A1:6E:FC:A2:EC:5A:D6:A7:A8:05:AB:FD:EA:DF:68:5F:07:21:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8a:a8:86:d8:4f:40:a4:05:03:7c:84:3c:b3:7f:7c:61:c3:
         37:78:99:3b:20:df:36:01:b1:8e:b2:5b:87:0a:b7:06:78:8f:
         d2:65:e7:78:94:87:4f:67:66:00:1a:69:16:99:8f:9d:f6:7c:
         20:56:34:1b:94:a6:a2:18:b5:e5:07:52:75:a5:06:0b:bc:3f:
         66:bb:91:f3:03:ae:21:2e:0d:17:8d:e8:ef:c4:95:28:29:45:
         8d:c4:f9:da:7c:47:96:93:2f:db:6e:4e:17:e8:2d:ad:16:22:
         91:0f:ff:f9:b5:64:6a:32:68:9d:81:e9:e4:96:30:27:af:d8:
         c1:bf:fc:20:28:35:84:c9:f7:4e:07:29:e0:6a:df:2b:a0:79:
         9e:ea:86:52:6e:a1:42:20:8b:15:8b:07:6c:77:00:5b:13:b7:
         cb:c3:fe:72:60:8c:c1:81:07:83:34:84:6c:c1:70:9d:c7:dc:
         ba:de:09:70:c2:51:b0:b4:6c:64:1b:1b:d1:f2:df:6a:75:50:
         0e:25:56:b2:d8:f1:50:00:24:82:c9:f7:e2:44:56:44:be:c9:
         5d:a9:f0:2c:2b:79:1a:19:ca:a3:f0:bd:03:94:69:e8:c6:e1:
         76:ca:d1:47:e7:40:31:56:5c:41:b8:e2:95:bc:4d:eb:ec:29:
         91:6c:8c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:43:58 2026 by rpki-client