Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/ebc335f9-40cb-369e-afab-a5054401092f.roa
File:                     ebc335f9-40cb-369e-afab-a5054401092f.roa (raw, json)
Hash identifier:          zu6CU39rJSrUj2KqwO6Hk8FyV/IHVQAi08xV2QkqMD4=
Subject key identifier:   AF:43:DE:CB:98:2B:60:30:ED:D9:97:0F:98:78:7E:CF:D9:C4:C9:A7
Certificate issuer:       /CN=2ac961ff-f406-4f80-b06d-e1284358815a
Certificate serial:       010D0C9F4328584F497435141BF2F85939F28680
Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/ebc335f9-40cb-369e-afab-a5054401092f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11096
IP address blocks:        162.248.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:35:14:1b:f2:f8:59:39:f2:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7b91d4fb-2ab8-4094-944e-68e0dc1c1835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:de:bd:6b:14:bc:cd:5c:2b:5b:30:ed:16:59:
                    dc:53:8d:16:14:b6:1f:7e:43:2f:35:cf:ad:47:77:
                    ff:26:43:aa:c7:29:ba:ad:63:3d:e7:ab:83:a0:3a:
                    65:bf:60:b5:cf:63:3f:e9:e9:46:ec:4d:56:c7:81:
                    38:b4:e5:63:b4:df:9d:cf:89:ce:c5:c4:4b:95:0c:
                    97:a6:c2:81:d1:98:57:6a:1e:e4:bb:22:42:10:fc:
                    01:96:ab:bc:28:ed:d4:f1:3d:8a:8e:57:55:a6:8b:
                    6b:bf:2f:dc:d4:fd:b0:40:78:a2:10:56:a8:ae:ab:
                    67:12:64:96:75:11:33:7f:f0:8e:2b:e8:1e:ec:3b:
                    d1:7f:fe:d7:d5:9d:e6:ea:53:af:d9:a2:63:b1:e6:
                    be:61:03:3d:7e:54:b1:c5:99:2d:ea:34:89:0d:9f:
                    9a:98:75:67:a0:4a:6f:81:4f:29:cd:fa:ff:79:65:
                    4e:9d:45:50:09:d1:0a:7f:1f:fe:c0:8a:61:ef:b6:
                    8d:ec:cc:d4:e6:a4:99:e3:e8:aa:b1:63:5a:8c:85:
                    6c:e7:1a:c1:11:43:e0:e2:ed:47:ad:d3:de:f9:2e:
                    e3:c9:d8:e6:69:b7:34:07:6a:3c:5b:58:9e:02:ac:
                    0a:bc:b9:67:f1:b4:ba:ae:e0:e5:50:c2:3c:69:79:
                    a9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:43:DE:CB:98:2B:60:30:ED:D9:97:0F:98:78:7E:CF:D9:C4:C9:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/ebc335f9-40cb-369e-afab-a5054401092f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e0:dc:2e:a0:c8:84:a1:eb:39:c5:62:d5:c4:96:5e:af:0a:
         a3:91:40:b2:82:e3:0e:58:29:d1:3c:d9:2b:b2:7a:5f:53:36:
         eb:41:07:07:6e:f4:99:84:fa:dd:e1:ef:26:e6:6b:8b:51:69:
         82:97:5e:55:b0:28:36:3a:69:4a:c9:d7:20:17:ae:d3:e7:28:
         97:79:39:48:82:b2:02:67:e2:8f:d7:cb:d1:14:6d:51:7d:ee:
         d8:cd:b3:f8:9d:39:97:e3:0e:1c:77:61:eb:45:59:76:b0:6b:
         81:83:ad:e6:62:23:a2:92:a8:ab:9a:66:2f:da:7c:98:6c:29:
         e3:06:28:fd:c9:39:63:83:76:76:b3:b2:47:a8:ad:0c:ac:00:
         05:8d:05:17:bc:d2:2b:0a:3b:ba:f8:b2:c6:8a:ab:c9:5f:c7:
         73:38:43:1c:6d:f0:24:d8:f9:5b:35:2f:dc:99:eb:a0:73:21:
         e7:c6:51:4e:3e:cc:09:49:9d:c7:1a:e7:b1:57:0e:fb:e0:a8:
         ab:fb:48:ec:6a:0a:aa:ad:ea:a8:54:fe:b0:3c:41:fe:bc:bd:
         38:31:45:89:6c:a9:68:d9:f3:7e:ff:13:09:81:cc:15:01:f1:
         99:8b:be:92:ec:af:b3:0a:b1:14:20:27:0b:b1:6d:f4:d8:44:
         1d:a2:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:14:44 2026 by rpki-client