Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/fd14e445-969e-3398-beb5-fd5d3cad75e3.roa
File:                     fd14e445-969e-3398-beb5-fd5d3cad75e3.roa (raw, json)
Hash identifier:          cJMHZVdOC1w9VnC1y1Srl+mKcnbb1TcuCEjubJkOVLg=
Subject key identifier:   03:63:43:80:BE:10:BD:06:CF:79:C4:A6:76:E0:00:0F:98:4A:44:D1
Certificate issuer:       /CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d
Certificate serial:       010D0C9F4328584F85784F9D0B19C2A4E5CB3300
Authority key identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/fd14e445-969e-3398-beb5-fd5d3cad75e3.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     396982
IP address blocks:        167.254.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:4f:9d:0b:19:c2:a4:e5:cb:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=f8332e27-fca8-48df-9cc5-b0d63a3c567c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:2f:ac:c2:ee:00:53:b9:3e:48:46:24:6d:
                    49:2f:07:93:ab:ae:03:ad:c7:33:b7:81:86:3f:39:
                    91:cf:24:87:60:c0:21:e5:8e:44:c7:03:ca:55:d9:
                    69:66:1a:5e:57:5f:9a:0a:8f:b4:fd:1b:05:fa:70:
                    10:b5:0f:de:b6:1e:77:39:b0:ec:97:43:3c:d1:50:
                    76:88:1c:20:6b:f6:11:fb:78:1c:3e:88:ea:fa:a2:
                    50:0f:a6:26:20:d0:19:b3:2e:9f:22:85:c9:84:f9:
                    02:c4:24:76:13:87:87:08:da:d2:32:4b:a7:2c:ca:
                    56:45:b8:33:44:9e:fa:e1:db:5e:ae:d3:4d:7d:8a:
                    b5:80:82:e4:5d:37:fb:40:83:60:6b:46:c1:a3:b6:
                    8e:e2:4f:b8:33:8e:36:66:09:b8:20:14:98:e0:22:
                    ec:7c:ea:90:d5:b5:61:4d:6c:25:22:19:23:90:87:
                    dc:c5:cd:c8:1c:57:84:4f:c6:9b:bb:90:06:81:f8:
                    b4:01:00:db:3e:72:70:e6:56:63:4f:ed:2a:28:69:
                    c0:aa:41:72:41:8e:0b:12:09:26:5d:03:3b:26:63:
                    c6:13:91:a3:67:e8:a3:44:e9:2d:37:b0:d2:90:04:
                    76:ab:00:ba:c3:cc:c6:bb:ec:d0:ac:90:fc:e3:26:
                    1c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:63:43:80:BE:10:BD:06:CF:79:C4:A6:76:E0:00:0F:98:4A:44:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/fd14e445-969e-3398-beb5-fd5d3cad75e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.254.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:2d:80:7a:69:8c:e5:bd:1a:c0:60:09:c6:2d:22:21:cc:
         d0:3e:79:56:b1:70:d9:af:d9:ca:56:3e:0e:04:e3:f1:60:15:
         06:3c:31:f3:9b:65:31:9f:14:15:7d:c5:40:d0:db:73:57:ac:
         ed:fe:da:e1:6a:9d:c2:3a:40:26:84:2f:c8:f3:47:e2:e0:9b:
         04:64:47:6a:1b:a7:d4:a4:d2:41:ef:67:d2:0a:c9:d1:2f:15:
         5f:d5:61:9b:4a:1e:7c:e5:c8:33:58:1b:1f:db:8c:f0:fa:b9:
         82:07:de:9f:a2:53:c0:27:e4:43:66:56:9e:ee:34:5f:c7:ca:
         c1:12:99:4e:0e:36:89:e8:34:60:13:0c:6d:fe:b0:eb:65:e3:
         d8:66:bc:0d:3c:fd:95:4f:38:d2:0e:fc:74:84:b8:c1:36:ce:
         6a:9e:71:ba:4d:07:29:17:c3:84:33:3a:81:8b:48:cc:67:96:
         d7:0d:f0:cf:0e:5e:76:3b:90:50:85:a8:53:83:a6:6e:54:b0:
         9d:e8:02:15:93:34:e8:18:37:d1:75:69:fd:04:3a:70:94:0b:
         97:c6:0f:b2:31:8d:b0:9e:5c:dc:b5:46:46:5a:15:84:2e:0b:
         f3:3c:39:b3:8c:2e:7f:c2:5e:d2:be:ef:5a:0b:ba:6a:e5:ee:
         6b:7f:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:25:00 2026 by rpki-client