Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0bfd2a96-fd7d-3ad5-8fec-29350f019c85.roa
File:                     0bfd2a96-fd7d-3ad5-8fec-29350f019c85.roa (raw, json)
Hash identifier:          EgekLgdWpz/YMBVHUYL8YidfRTbPfBmzn5N1OfdwQS4=
Subject key identifier:   DE:FD:BE:9E:8C:31:0C:B2:BE:A4:B9:A3:BE:B9:FD:3E:F7:56:B0:E7
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F5565CCFC401E269950FE6000
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0bfd2a96-fd7d-3ad5-8fec-29350f019c85.roa
Signing time:             Tue 29 Sep 2026 07:44:17 +0000
ROA not before:           Tue 29 Sep 2026 07:44:17 +0000
ROA not after:            Mon 28 Dec 2026 08:44:17 +0000
asID:                     62904
IP address blocks:        173.232.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:55:65:cc:fc:40:1e:26:99:50:fe:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 29 07:44:17 2026 GMT
            Not After : Dec 28 08:44:17 2026 GMT
        Subject: CN=ffd3c618-0953-4add-a0f1-52c20819d5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:e5:e9:30:63:d0:c5:e9:f7:98:0e:dc:cd:
                    fe:24:ba:c5:33:db:91:d1:b7:70:3e:32:16:59:65:
                    99:54:58:70:9d:3c:68:12:9c:1c:77:3a:e6:b7:e0:
                    14:5c:35:d6:65:1c:7d:c4:34:ec:91:4b:fe:f0:62:
                    2c:55:a6:49:91:f4:08:63:e9:1f:b2:ef:38:d2:31:
                    01:04:26:50:ad:46:6e:e3:92:bf:f1:e1:93:3e:2c:
                    7f:ea:81:52:56:31:c7:64:b8:3d:de:94:87:a3:9d:
                    65:53:46:68:55:7e:90:f1:ec:4f:cf:56:97:59:bc:
                    65:0e:3b:19:7b:04:51:dd:72:0e:5f:94:bc:4a:a2:
                    ed:6f:be:a6:f6:e2:0c:4d:eb:d1:84:14:cf:5d:dd:
                    39:1d:91:a7:17:b5:ea:fa:52:84:09:65:f4:6b:00:
                    b3:43:97:97:f9:a7:29:01:a6:ae:e0:24:59:f8:a0:
                    94:c1:cb:c6:5f:0e:73:7d:40:4c:5a:0c:fa:25:42:
                    4f:77:34:30:a9:20:38:58:4f:1e:01:10:0e:33:b1:
                    55:59:04:a9:4d:a5:d8:8c:0f:5c:27:0c:dc:19:4f:
                    64:1e:ab:a6:7e:9a:1f:4f:e8:d0:54:93:04:7a:1f:
                    0a:ef:14:a9:7a:1a:91:75:d3:30:5b:d5:84:9c:cc:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FD:BE:9E:8C:31:0C:B2:BE:A4:B9:A3:BE:B9:FD:3E:F7:56:B0:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0bfd2a96-fd7d-3ad5-8fec-29350f019c85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:30:fc:8d:1a:68:f1:fc:28:70:37:04:74:c1:2f:5f:1c:bd:
         59:12:7f:76:cd:0d:45:bd:3c:af:1c:07:3a:b0:49:5d:fc:fc:
         04:9a:82:aa:e2:21:de:2c:e7:2f:a8:22:0f:53:47:66:5a:e0:
         02:f7:97:90:30:ab:8b:77:b5:aa:6f:22:f2:91:2b:6a:85:b8:
         50:fa:84:41:00:4b:07:25:87:c8:5d:87:bb:a2:5e:2e:5e:04:
         7a:73:9c:e8:44:92:c5:bf:08:1d:42:7b:4a:a6:0b:cd:97:09:
         d7:a9:d5:4b:06:13:9f:7d:09:a2:8f:06:48:41:61:64:1f:19:
         45:b5:94:6b:99:0a:ae:ba:98:9d:ba:71:0a:f1:01:54:af:ee:
         36:de:a7:16:21:70:11:8a:3c:27:2b:53:be:c8:3f:31:72:aa:
         68:23:0a:71:6d:30:79:a5:69:62:a9:80:a6:82:ae:ae:9f:2b:
         08:a6:ae:95:f9:5c:87:91:dd:d8:5f:5e:64:b7:dc:2e:ed:d9:
         08:16:9a:e6:5c:4d:52:9a:fe:68:62:f5:4b:d3:b8:75:3f:11:
         15:a3:e2:6f:5e:7e:4e:a5:30:cb:c6:c6:c4:b7:dc:30:be:55:
         d9:0c:75:a4:4c:e3:cc:3c:46:97:f4:cd:3f:90:e3:49:47:5c:
         16:4b:eb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:42:44 2026 by rpki-client