Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/a0f1ecda-e065-36cb-9bef-3072e000033b.roa
File:                     a0f1ecda-e065-36cb-9bef-3072e000033b.roa (raw, json)
Hash identifier:          VoX/nGDUSUFNExC4IiTxwcZSshgsArcECOFjKP8gjzc=
Subject key identifier:   78:1A:31:23:BC:A6:F2:E2:3D:69:D6:B6:B5:5C:CB:D8:B3:1E:35:55
Certificate issuer:       /CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9
Certificate serial:       010D0C9F4328584F4112B597977DD19F304AC970
Authority key identifier: 96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/a0f1ecda-e065-36cb-9bef-3072e000033b.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     7018
IP address blocks:        204.10.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:b5:97:97:7d:d1:9f:30:4a:c9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc11e5dd-c2b3-493c-8534-431fa4878aa9
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=17446cdd-83bd-4203-af9a-0e1d0168cb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4b:7c:7c:27:1a:62:6b:b3:fe:b4:af:31:d5:
                    ac:4e:d4:b0:96:46:4d:1f:02:5f:27:0d:a8:e1:ac:
                    a1:a5:d9:2b:d3:e6:0f:e0:a0:4c:1b:97:da:a8:23:
                    9c:d8:b2:07:76:8f:65:30:da:80:e5:48:98:2e:e0:
                    94:6b:6f:5f:af:ab:6b:be:b0:99:6b:38:d5:f9:03:
                    29:ad:76:40:6e:50:85:b5:8d:b3:65:02:8d:9f:67:
                    89:ae:1e:a1:58:3d:7c:75:e4:7f:a2:d9:75:fd:27:
                    bb:43:cc:45:49:49:63:46:07:06:ff:73:e9:19:a0:
                    5a:c8:0b:2f:e6:0c:ec:ea:f6:38:1d:29:d2:e4:b7:
                    81:17:d4:d5:62:bd:2f:3c:a5:3c:a4:55:bb:fd:3a:
                    1c:c6:b7:01:6f:42:87:95:d9:bd:05:ea:57:0f:53:
                    e4:1f:5b:0a:14:2a:5f:f4:84:a9:38:b2:70:9c:14:
                    0b:96:55:67:6c:56:62:c5:6b:8a:8d:41:f2:30:7d:
                    aa:52:3d:60:77:cd:34:19:b1:95:f7:fc:e1:2e:78:
                    e4:ac:c4:38:9c:8b:88:5c:a9:ea:30:15:07:dd:0b:
                    a3:f0:b0:8e:4c:1b:6d:23:a2:f9:e4:4c:e4:6d:e7:
                    f8:c2:a8:3e:eb:a9:ef:ab:1d:ad:0b:4d:0a:bc:57:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1A:31:23:BC:A6:F2:E2:3D:69:D6:B6:B5:5C:CB:D8:B3:1E:35:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/a0f1ecda-e065-36cb-9bef-3072e000033b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9/cc11e5dd-c2b3-493c-8534-431fa4878aa9.crl

            X509v3 Authority Key Identifier:
                keyid:96:B0:88:5C:AB:50:1F:7A:A1:77:AD:ED:76:FF:91:57:89:9E:F5:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc11e5dd-c2b3-493c-8534-431fa4878aa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f4:18:e7:a2:c7:b0:28:f1:b1:90:25:17:e2:8f:61:85:1a:
         f0:59:71:f4:fb:21:6b:82:ae:eb:ca:59:e1:a9:ff:dc:4d:74:
         a1:e0:19:6e:d4:4c:d8:0d:9e:97:bd:0c:f7:ea:54:ac:40:f2:
         55:31:1c:4e:cb:33:65:a8:3c:65:c9:ba:8f:08:76:ec:c3:9b:
         bb:01:6c:77:52:6d:5d:09:06:f6:57:fe:85:71:39:aa:1e:28:
         24:43:c0:70:f6:47:57:7c:5a:be:88:2c:81:2d:05:1b:d6:a3:
         b2:4e:1a:e4:36:50:1b:46:b2:02:c6:58:6b:70:55:2e:10:c4:
         0a:53:64:ee:da:c1:c3:f5:93:ea:51:2a:6d:5a:78:4f:f1:2d:
         03:8b:86:f9:f2:e6:4e:dd:a3:22:e1:6f:41:0f:d7:dd:95:57:
         a8:24:df:aa:30:34:17:5a:8b:d4:79:b0:57:7b:fb:e7:8b:91:
         69:dd:a4:0e:74:98:ff:ec:07:67:e7:23:84:9a:5b:2c:32:bc:
         e2:1f:96:80:0d:c1:e6:d1:a9:85:a1:26:ff:44:cc:c9:30:bd:
         57:6c:8b:7c:c8:8f:c7:99:eb:e9:cf:7d:3f:d0:00:7d:f4:9e:
         f0:53:b2:d4:c7:06:c3:13:a4:e7:cc:7a:e3:15:34:85:a9:87:
         4a:2b:5e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:48:03 2026 by rpki-client