Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/18bca8ba-6963-3792-8a78-4792b25b0a46.roa
File:                     18bca8ba-6963-3792-8a78-4792b25b0a46.roa (raw, json)
Hash identifier:          P3GsCRSVierRYtu5LWmuL2ShXgSjvX5tQwJerTXAi6g=
Subject key identifier:   93:FE:B8:26:30:62:71:D5:99:14:B4:55:7B:9F:9B:92:FB:F5:20:64
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F53E0E21ACD5BA88E20D85100
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/18bca8ba-6963-3792-8a78-4792b25b0a46.roa
Signing time:             Mon 28 Sep 2026 18:40:39 +0000
ROA not before:           Mon 28 Sep 2026 18:40:39 +0000
ROA not after:            Sun 27 Dec 2026 19:40:39 +0000
asID:                     62904
IP address blocks:        170.130.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:e0:e2:1a:cd:5b:a8:8e:20:d8:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 18:40:39 2026 GMT
            Not After : Dec 27 19:40:39 2026 GMT
        Subject: CN=ee9d7c58-36c6-4c3f-9994-64e90aaf47dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:51:3b:48:d7:10:47:e4:fa:01:35:7d:ef:ee:
                    7c:54:ba:fc:1c:34:35:fe:a1:14:e8:22:ab:61:4a:
                    99:2b:a0:af:a2:d2:18:bb:bb:5e:b1:8c:7e:e4:ba:
                    a4:b2:07:7b:46:e7:0c:4d:27:b3:23:a8:83:6e:47:
                    48:73:1b:5d:4e:8f:b3:19:29:2c:29:9f:a6:f1:79:
                    04:fe:d6:1a:43:d8:75:03:9d:0f:0f:d7:75:ee:1c:
                    7c:40:38:33:cf:3d:e5:25:8b:1a:f9:aa:5e:01:cc:
                    8e:93:61:e8:31:85:df:36:0d:fd:e4:f1:b4:6d:80:
                    fa:e4:f4:2a:a5:d0:58:c7:9c:4f:37:db:0e:90:76:
                    d3:47:ef:18:a4:af:c5:f3:0c:d2:67:b1:dd:5c:b7:
                    14:bb:a8:30:07:5f:08:4a:41:6e:dc:96:5a:c5:80:
                    8a:be:d3:dc:34:7c:3c:5b:5f:d1:b5:cd:78:78:06:
                    94:c8:2b:dc:5a:b0:02:a5:ad:f6:42:c6:4b:95:64:
                    b5:87:89:75:f3:4c:38:68:dc:d6:1d:9e:70:71:ef:
                    1a:7a:7b:8e:da:bd:ca:d1:1d:75:19:19:31:9c:07:
                    73:25:14:91:68:8a:33:0d:88:77:3d:fc:86:cd:ca:
                    59:90:37:9a:67:98:d3:62:93:c6:ba:0a:bf:b7:c4:
                    00:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FE:B8:26:30:62:71:D5:99:14:B4:55:7B:9F:9B:92:FB:F5:20:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/18bca8ba-6963-3792-8a78-4792b25b0a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:42:08:b1:8b:d8:0f:06:be:8f:60:a4:56:7b:4c:26:1b:9b:
         c5:af:66:d1:91:5d:b5:32:2f:30:0b:7d:88:c4:3a:2b:30:52:
         28:16:0f:37:66:c5:ac:2c:44:47:dd:4e:24:c7:b2:5f:b2:20:
         a2:92:3d:47:ff:47:f3:17:bd:14:c1:eb:b5:d6:99:c6:ec:42:
         1a:00:bf:56:fa:89:41:5a:0e:ff:e4:97:8c:0f:a0:52:92:52:
         5c:87:0a:87:ef:81:0e:11:a8:18:d2:e4:d0:20:a5:f4:24:64:
         35:5b:83:4e:1d:3f:d6:c8:5f:bb:80:8d:4b:ad:59:0c:bf:6d:
         cb:57:38:f0:7b:1d:f2:2e:ea:fa:ef:7b:13:0f:1d:a4:96:f3:
         f3:a9:0b:73:12:02:6a:ea:f6:02:c4:a5:90:22:fb:03:3b:48:
         86:d9:c5:8a:c6:2f:fa:60:b6:cd:4c:42:f4:55:05:ce:fa:12:
         66:8e:2a:7c:2c:bc:34:a6:8b:c5:b9:66:e8:b0:53:dc:db:d3:
         5a:84:93:27:6f:26:b5:c2:e5:a0:d9:84:b1:87:1e:66:6e:51:
         5a:84:dc:f1:57:34:2e:55:82:ac:7d:ee:f3:3a:b5:11:d4:b1:
         9a:b9:d0:f3:ad:63:15:db:9f:59:d5:6d:cf:24:c9:ed:50:9b:
         ad:82:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:45:53 2026 by rpki-client