Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0/8263170f-cfa0-3438-9643-33db823316d0.roa
File:                     8263170f-cfa0-3438-9643-33db823316d0.roa (raw, json)
Hash identifier:          pJrt0SXyk7xej6mPFbi9Yq3UZp+KJEKNcG7DMnLS7dQ=
Subject key identifier:   6C:7B:F1:93:14:D2:78:7A:E9:0A:BE:9A:41:A6:F3:40:6B:21:C3:0F
Certificate issuer:       /CN=9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0
Certificate serial:       010D0C9F4328584DB8D58904A7918B45553F3140
Authority key identifier: 0F:C6:68:7E:D3:FC:17:D4:E1:F4:CF:F0:F3:E9:7D:A9:BD:3C:CD:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0/8263170f-cfa0-3438-9643-33db823316d0.roa
Signing time:             Mon 04 May 2026 13:00:30 +0000
ROA not before:           Mon 04 May 2026 13:00:30 +0000
ROA not after:            Sun 02 Aug 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        170.48.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b8:d5:89:04:a7:91:8b:45:55:3f:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0
        Validity
            Not Before: May  4 13:00:30 2026 GMT
            Not After : Aug  2 13:00:30 2026 GMT
        Subject: CN=c4cf6ad1-a937-4d6e-ab10-8e2a90717b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:12:fe:f1:93:8e:dc:9e:af:70:68:04:eb:
                    15:d0:a2:c5:53:b3:af:69:24:22:24:93:ca:30:64:
                    1e:1e:6c:72:35:0b:95:4a:eb:88:2b:85:b2:33:eb:
                    87:52:2a:6a:2e:1a:61:3f:d3:0f:f0:9b:8f:0f:94:
                    34:f3:18:6c:90:25:76:b7:f1:7f:3b:45:99:2f:eb:
                    40:d2:b4:e4:4c:3f:60:11:f5:3d:46:68:f3:2f:86:
                    48:ca:02:3c:fe:e2:c1:14:7a:22:df:3d:bc:a7:4b:
                    8b:44:b6:92:5e:dd:44:ec:4e:85:e5:b9:ff:b3:d1:
                    36:07:62:a1:79:5d:c4:f7:f5:c4:bc:dc:b4:91:05:
                    fb:47:33:45:0b:96:64:4e:97:35:37:f4:a0:86:47:
                    c0:16:d0:0d:ed:81:0e:44:2d:3f:34:cd:15:ed:dd:
                    36:06:6b:db:b1:22:a3:d3:5c:02:5b:fe:04:a0:da:
                    d1:4b:d3:e9:62:f5:c5:51:57:55:2f:b4:6d:59:8e:
                    9b:8b:97:89:0a:25:4e:82:b9:cc:86:b3:e1:97:e0:
                    50:73:4c:a6:1f:2d:2f:63:a3:80:6c:bc:56:7b:55:
                    cb:57:20:64:cb:c7:45:05:c7:d5:d6:c2:4f:5d:23:
                    c4:46:fd:69:b0:0f:79:59:c8:4e:5d:6e:e4:32:36:
                    f4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7B:F1:93:14:D2:78:7A:E9:0A:BE:9A:41:A6:F3:40:6B:21:C3:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0/8263170f-cfa0-3438-9643-33db823316d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0.crl

            X509v3 Authority Key Identifier:
                keyid:0F:C6:68:7E:D3:FC:17:D4:E1:F4:CF:F0:F3:E9:7D:A9:BD:3C:CD:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9f1ddcc0-7256-4b05-b3c2-b34a7c3dd8e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.48.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:fb:4a:fa:1d:8c:f4:0a:f6:80:30:c8:6a:9c:8d:23:50:5e:
         8f:28:36:bd:1b:56:67:8c:33:a7:db:17:73:23:4d:29:4b:6d:
         8a:e2:4d:e1:d1:9d:e2:85:32:83:26:b9:fa:14:27:b7:ad:be:
         58:80:7e:1a:7b:b1:1d:8f:9f:bc:09:b5:26:1c:d2:38:f4:fc:
         f7:b5:f9:9f:35:d8:67:c0:e1:5e:36:39:6b:6c:0e:cb:be:2e:
         9d:7d:38:e0:b4:12:19:b9:48:b1:70:ec:c5:02:a5:6b:72:f4:
         fa:eb:38:4c:5d:da:68:34:3d:97:a9:fb:bc:f3:fe:3c:25:46:
         97:d1:59:48:ee:ea:cf:2f:01:32:64:4c:f4:14:2c:42:a5:42:
         9e:46:7a:50:65:4a:c7:91:90:43:ca:4d:5f:46:70:a1:86:23:
         27:58:24:f0:a3:0f:2b:2e:6b:49:d4:38:21:14:e7:01:81:79:
         af:98:2f:a6:bd:e6:58:6b:ab:25:f0:1c:56:a8:f8:99:99:dd:
         52:35:48:50:85:0d:65:f3:f8:3e:e2:fa:9a:db:bf:0f:fe:7d:
         50:22:73:f9:04:bf:a2:d6:01:eb:a7:65:5f:48:98:e1:7a:4c:
         15:e3:72:52:a0:ab:30:28:6e:3f:5c:4f:5a:7b:76:41:7d:8f:
         e5:0a:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:17:30 2026 by rpki-client