Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/c8823d7b-5ece-3489-b72b-ced743ec137b.roa
File:                     c8823d7b-5ece-3489-b72b-ced743ec137b.roa (raw, json)
Hash identifier:          DQV8sV64Kax8/3OeIplFixacO/GAtuAMvVm+hRuoX7U=
Subject key identifier:   09:90:00:D7:D1:2F:DF:E1:D9:AC:F7:F3:31:05:02:8A:F8:49:59:DC
Certificate issuer:       /CN=1cf30977-73f6-4522-b061-66f0061f58dd
Certificate serial:       010D0C9F4328584F49752D33B6F2C552983ED300
Authority key identifier: 8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/c8823d7b-5ece-3489-b72b-ced743ec137b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395660
IP address blocks:        162.106.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:2d:33:b6:f2:c5:52:98:3e:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf30977-73f6-4522-b061-66f0061f58dd
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6025b2c6-8979-4237-bfe4-01b458209848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:d1:68:54:22:c4:ba:ad:7e:fd:07:c9:a0:
                    31:35:06:d5:29:73:a5:f9:38:00:9f:69:26:a3:36:
                    dd:b8:16:79:b9:0d:98:d0:c5:e6:b4:64:f3:eb:d3:
                    e1:0c:ea:c6:71:a0:23:e9:7c:a7:25:b5:07:8b:9b:
                    cd:01:49:0c:28:ae:41:70:1d:ad:42:3e:e5:d3:50:
                    09:22:02:a2:f8:7a:73:b4:4e:1e:c7:97:6e:be:b1:
                    54:e4:21:d5:9b:f5:9e:1d:4f:7d:a9:7f:30:97:5c:
                    b5:fa:d9:c3:39:b3:18:2b:7f:6b:37:a9:e6:7e:72:
                    e1:fc:2e:73:22:c7:58:ac:ae:9f:31:e4:08:94:96:
                    b6:71:67:a9:54:8b:5d:12:41:ac:4c:6c:27:26:0d:
                    b4:46:53:9f:7c:87:73:74:64:d4:33:d6:8f:c4:e5:
                    36:c4:a7:73:6a:78:d5:be:03:17:ab:ee:fc:24:e5:
                    50:62:22:3a:f3:b9:de:67:08:c9:23:c8:f7:0b:5e:
                    f7:6e:c1:c3:c5:f8:e0:d4:48:52:18:e0:cb:dc:d3:
                    64:6b:55:a7:70:de:38:a3:b0:99:5d:e4:e6:cc:58:
                    b6:0f:56:51:b5:09:e9:cf:74:f5:00:4f:47:56:71:
                    ae:f0:c9:d8:33:31:9b:f9:94:f2:cb:d2:aa:6e:d0:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:90:00:D7:D1:2F:DF:E1:D9:AC:F7:F3:31:05:02:8A:F8:49:59:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/c8823d7b-5ece-3489-b72b-ced743ec137b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl

            X509v3 Authority Key Identifier:
                keyid:8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.106.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:6e:1f:a4:a9:20:03:17:9b:48:cb:48:b1:66:e7:f7:f5:
         3e:52:fe:3f:12:96:4e:8c:32:98:e2:f5:a1:4d:83:8a:54:44:
         5a:90:a7:78:31:39:98:f2:e5:18:cb:84:71:12:0c:8a:e5:fa:
         22:70:12:b0:45:6d:ed:f7:79:4c:e8:f2:0e:7d:07:e0:5e:05:
         67:3b:56:ce:72:55:55:de:55:19:3b:af:75:8b:b2:ea:e5:22:
         47:e4:ee:03:95:69:c2:35:ae:c4:84:c3:55:3d:c1:72:b0:d2:
         f4:b2:ff:e2:af:18:e3:c3:3c:a8:18:c0:00:89:6c:e4:50:14:
         f7:6d:7d:95:19:b6:1f:80:5a:40:55:99:5b:fc:51:6d:e9:3f:
         c3:bc:9a:b3:f0:10:1a:8a:2c:4c:d8:d6:76:60:99:75:e4:30:
         e1:45:fb:48:c6:9c:bc:19:4f:19:af:e6:f0:30:9a:cf:a3:25:
         45:e0:38:68:b8:29:d3:ab:b2:6e:89:31:e4:36:a3:7e:e3:d2:
         3c:8a:c5:8c:f1:13:b8:e1:e2:d2:e4:a7:a8:c0:a5:2f:57:ca:
         0e:d7:55:59:5f:93:33:fb:14:94:c4:57:5a:f7:cc:8e:23:88:
         c8:c8:9b:22:21:8f:fa:55:25:c0:74:bb:dd:73:6f:5a:59:f2:
         94:99:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:52:18 2026 by rpki-client