Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/44566e7e-8ed1-365d-9b73-b974387a8abd.roa
File:                     44566e7e-8ed1-365d-9b73-b974387a8abd.roa (raw, json)
Hash identifier:          ONfu7128gS1Y2gmGtKhRVey68Q2q/zpBSRaRTQ5QeHo=
Subject key identifier:   9C:66:3A:D9:69:03:F8:A5:4E:55:90:35:0C:8D:8F:06:D8:06:5F:35
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4974DF5AF7C097A5C69F8300
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/44566e7e-8ed1-365d-9b73-b974387a8abd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401783
IP address blocks:        173.232.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:df:5a:f7:c0:97:a5:c6:9f:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7ce8da1c-e15d-42cf-9c5d-dd036fcf2cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d4:cb:c2:0b:bc:a3:1b:0f:25:59:90:0f:5d:
                    2f:33:8f:ab:4d:1f:89:19:4c:5f:bc:b0:d1:5a:eb:
                    48:50:c4:fc:e6:52:9c:fd:04:84:e7:7d:9a:bc:92:
                    5d:3c:7b:c6:31:69:8a:82:9f:2e:9b:03:a4:da:1b:
                    e2:a6:51:a1:5f:64:59:d6:27:59:ac:21:02:40:b9:
                    b0:9a:ea:66:d6:ee:02:61:cd:49:d9:09:97:c6:54:
                    17:45:3d:46:93:49:96:22:86:b2:e9:59:37:dc:3b:
                    30:30:e8:1b:0c:f9:b4:11:b9:5f:de:13:db:44:14:
                    da:74:47:48:4c:07:08:3b:dd:4a:94:d7:0f:86:48:
                    cf:f0:d1:da:32:c1:c9:e1:b1:0a:30:46:32:d0:d0:
                    62:5f:c6:15:56:4e:3c:92:26:26:cc:e6:9e:96:d0:
                    e9:fd:81:f6:e5:ca:ce:f6:5a:49:41:a7:a3:4f:95:
                    6a:9c:10:e9:34:cb:46:1a:2a:5a:5b:16:59:13:f1:
                    71:64:0c:57:fd:e3:2e:73:ae:cf:85:9d:72:ad:f1:
                    e6:d2:8b:bb:e5:71:95:e2:60:5b:21:69:81:32:ae:
                    d2:4b:05:68:5c:e2:35:1a:ed:8b:16:89:7b:3b:3e:
                    67:66:ff:7c:34:f9:61:50:76:03:36:c4:f3:52:b5:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:66:3A:D9:69:03:F8:A5:4E:55:90:35:0C:8D:8F:06:D8:06:5F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/44566e7e-8ed1-365d-9b73-b974387a8abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ed:6f:cf:80:b0:01:e1:cd:80:4c:98:ce:f0:63:99:52:ac:
         33:c4:8d:b8:7d:b7:04:24:b2:45:ab:73:2c:b1:27:22:91:b3:
         11:14:c4:34:8b:01:bb:f6:56:16:d4:0d:e5:95:56:98:b1:88:
         a4:79:d0:ae:27:f9:07:f8:5c:41:f8:a4:8b:1e:64:8f:ae:1f:
         9b:8b:73:31:48:b4:74:68:5f:79:97:03:4c:e6:67:0a:3f:f8:
         30:ea:03:d0:eb:13:fa:53:82:c8:04:e1:68:f9:b2:cf:4f:35:
         99:6f:b8:48:db:0b:63:14:3f:fe:9f:5a:bf:63:3f:3e:b2:79:
         f0:53:93:ed:4b:3f:37:0d:c5:1d:b7:4d:85:21:00:c1:76:c1:
         fa:5e:6a:ae:24:3c:e9:eb:b2:69:87:d9:79:48:b1:19:4f:f3:
         27:dd:23:35:ed:88:01:79:7b:85:45:93:31:90:4a:36:8c:89:
         c5:0a:56:be:8d:20:51:9c:7e:4f:63:3b:c0:eb:ac:40:11:52:
         53:86:91:09:e1:57:1b:0c:a5:e8:2c:93:8e:c6:48:d8:3a:71:
         14:70:95:5d:f4:bf:1a:46:07:d3:05:30:16:d5:d1:56:0f:dc:
         82:e0:df:22:f4:9f:2f:76:e3:f4:34:c4:52:87:24:16:66:08:
         35:dd:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:46:02 2026 by rpki-client