Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/956168be-7a2f-3b5e-82d2-4e2261f86238.roa
File:                     956168be-7a2f-3b5e-82d2-4e2261f86238.roa (raw, json)
Hash identifier:          gs3O8QD4QJozgmXM/i0Iww3bRdcXaIbf5DO+sVuRSoQ=
Subject key identifier:   29:B2:EB:B3:B5:4E:14:FB:8F:2D:97:A5:D1:D6:AA:50:EF:A3:7B:DA
Certificate issuer:       /CN=51729fc5-9ab6-4957-8614-8fb01d4fb6eb
Certificate serial:       010D0C9F4328584F4976573FE4FCC46F4FB38E80
Authority key identifier: 17:A2:EB:A4:C8:90:DF:3D:91:45:88:EF:64:BB:08:B9:3B:70:D0:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/956168be-7a2f-3b5e-82d2-4e2261f86238.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54665
IP address blocks:        162.142.80.0/21 maxlen: 21
                          162.142.112.0/23 maxlen: 23
                          2605:9dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:57:3f:e4:fc:c4:6f:4f:b3:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51729fc5-9ab6-4957-8614-8fb01d4fb6eb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ae97089e-4642-45ed-af5c-4bf883b7f76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:77:8a:a8:81:e9:fc:a8:72:b0:87:bf:4e:
                    32:bf:ed:64:59:d4:ce:11:33:84:07:f6:64:f1:19:
                    ce:e5:b4:96:1c:de:6d:ff:bb:bf:02:92:92:d9:fb:
                    aa:7d:08:52:4d:26:0a:57:0b:86:43:92:33:a3:d8:
                    13:a7:19:df:5d:4b:02:b3:90:af:51:99:6e:a5:94:
                    0a:83:69:8c:13:52:ed:3c:cd:65:ef:f9:90:83:a7:
                    04:26:db:33:79:2a:6a:a0:51:fe:08:8e:f8:a9:42:
                    31:e3:70:69:5a:36:4c:b6:37:8f:b6:d2:d3:7f:1e:
                    e4:e2:d5:cb:00:34:c5:50:11:5c:f2:45:4d:73:10:
                    51:ec:5b:c6:d0:bc:5b:ef:82:81:59:8f:29:c0:c3:
                    a6:c6:f5:e6:fe:20:05:fa:c4:66:6b:f7:4d:8e:29:
                    97:9b:4d:86:2f:87:08:e2:cc:fe:83:30:9e:aa:90:
                    fe:dc:63:8e:e1:a9:3f:42:3f:8e:9f:02:b1:5f:7e:
                    ca:9f:60:db:13:f0:e2:c5:93:c3:07:5c:2f:d3:8d:
                    1b:3c:ef:4b:15:c6:31:d6:6d:00:3a:4d:0d:56:76:
                    df:1a:3d:cc:a2:39:1f:7c:2a:22:74:92:ba:0b:7e:
                    fe:89:5a:33:6f:a1:cf:20:2c:87:22:9a:0f:4b:82:
                    e8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B2:EB:B3:B5:4E:14:FB:8F:2D:97:A5:D1:D6:AA:50:EF:A3:7B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/956168be-7a2f-3b5e-82d2-4e2261f86238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.crl

            X509v3 Authority Key Identifier:
                keyid:17:A2:EB:A4:C8:90:DF:3D:91:45:88:EF:64:BB:08:B9:3B:70:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.142.80.0/21
                  162.142.112.0/23
                IPv6:
                  2605:9dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6b:7f:a1:23:4b:c0:81:52:8d:72:07:05:c5:7e:d0:46:00:
         87:3d:22:a9:74:63:81:59:b6:c1:ce:fc:d0:7f:c1:e9:c7:1e:
         a4:16:c2:61:19:40:29:2d:de:4c:db:83:05:68:bb:f8:3b:1e:
         41:bc:50:f9:07:30:b4:60:2b:7b:f5:c3:b5:8a:e1:3c:3b:a8:
         9f:4d:ca:28:75:bf:ae:02:2a:de:bf:a4:20:76:7a:1b:75:b6:
         5c:82:82:16:60:80:dc:9d:08:bc:ce:ee:89:86:b0:d1:7b:a1:
         f8:23:80:8f:3f:dc:73:cc:e6:83:43:f8:81:39:2a:04:87:4b:
         af:af:89:af:e7:e5:5e:c1:46:ea:5c:85:07:24:8a:c4:ea:5a:
         26:21:07:a1:8c:68:31:67:2f:12:39:da:ac:a3:92:f1:2c:54:
         ec:08:eb:74:f3:d1:af:8e:0b:16:d1:89:4a:f9:fa:53:6b:3a:
         44:8b:a3:cd:ee:9c:11:37:8d:72:dd:4a:3b:31:d0:fb:fd:8e:
         c0:ba:26:ce:eb:0e:37:49:dd:3f:55:8b:ce:bc:17:44:6e:04:
         b8:c9:6e:13:97:71:f6:cb:b2:f5:9a:8b:60:de:a8:9b:d8:fb:
         d2:9b:4f:80:e3:2c:45:c6:b3:3a:37:4a:d3:ba:32:5d:c8:51:
         fc:0e:36:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:18:30 2026 by rpki-client