Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c018c001-80b3-3d3b-8ac3-3330977ebe4b.roa
File:                     c018c001-80b3-3d3b-8ac3-3330977ebe4b.roa (raw, json)
Hash identifier:          fufqSFxMmaCWEr4qMZmHwNwegB2zzesc7yw8VLn/yYY=
Subject key identifier:   77:B3:EB:90:81:49:CC:98:72:02:70:F7:8A:D2:26:EB:1E:D4:3B:40
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F53CF65750F5B32BBC8402040
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c018c001-80b3-3d3b-8ac3-3330977ebe4b.roa
Signing time:             Mon 28 Sep 2026 18:05:25 +0000
ROA not before:           Mon 28 Sep 2026 18:05:25 +0000
ROA not after:            Sun 27 Dec 2026 19:05:25 +0000
asID:                     62904
IP address blocks:        170.130.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:cf:65:75:0f:5b:32:bb:c8:40:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 18:05:25 2026 GMT
            Not After : Dec 27 19:05:25 2026 GMT
        Subject: CN=5c480cde-5202-4c45-a8b4-a75005d9288d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ab:e8:56:5b:75:1f:db:60:13:89:6b:d3:4e:
                    8a:0b:81:6f:06:3e:f7:01:63:bf:8a:d8:ea:12:94:
                    88:63:8d:49:05:c5:9e:eb:b0:5e:bb:18:95:d5:76:
                    5a:56:69:4d:50:f8:88:f0:00:0c:04:10:41:12:c4:
                    7f:3d:3c:60:c3:83:0b:cc:52:bc:53:5c:86:7d:73:
                    bf:70:56:1c:06:2c:00:ad:ae:8d:15:a6:3b:3f:a6:
                    3e:91:4f:ea:43:78:39:7b:d5:5d:2e:39:8e:31:20:
                    e3:27:a7:ba:17:58:17:27:26:09:0b:87:7c:f7:c7:
                    f6:b7:e1:90:00:5a:8c:67:61:57:9b:31:19:62:46:
                    c7:cc:9e:f1:b6:8d:94:49:4a:32:f5:66:61:42:f4:
                    9f:4a:5f:b8:94:8b:44:79:e4:d7:9f:04:dc:a9:fa:
                    50:62:65:40:9c:63:5d:91:a1:30:2f:28:64:38:8e:
                    51:01:dc:69:e9:62:06:0c:e8:34:45:3c:f3:83:11:
                    8d:8b:fb:2a:d1:5b:75:01:44:c7:7a:4d:5d:d3:91:
                    f4:e1:c8:76:e6:51:3e:4d:28:29:ae:66:0e:f7:f5:
                    28:15:8e:a9:31:37:c4:38:10:8e:2b:7b:89:5e:d1:
                    9b:a8:3e:74:01:fa:ec:cf:21:e7:a8:b2:a5:94:be:
                    e2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B3:EB:90:81:49:CC:98:72:02:70:F7:8A:D2:26:EB:1E:D4:3B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c018c001-80b3-3d3b-8ac3-3330977ebe4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ec:0b:18:4c:ed:be:26:a4:55:eb:1f:fa:8a:b5:da:72:46:
         b7:6a:ad:5b:96:21:fb:54:b0:8f:71:6d:c4:5a:35:8f:86:28:
         16:e4:6e:b7:77:16:11:35:61:be:20:84:7c:72:71:81:e3:ad:
         f1:ed:46:b7:a5:de:9e:d7:3d:e9:d7:6e:74:03:5c:b7:5a:f8:
         20:10:a7:29:53:79:5f:51:ef:7e:e8:2c:dd:41:c0:dc:21:ec:
         4e:f0:e7:d1:90:32:26:18:79:6c:75:78:2b:f9:bc:d7:26:fa:
         89:ce:67:d7:13:40:f5:60:66:78:62:51:75:c8:f4:c4:d0:3e:
         86:b2:28:5b:5f:37:85:4a:0c:27:88:12:ba:c0:74:80:8c:a4:
         ca:42:34:74:75:7a:94:9a:cc:70:04:29:28:b4:32:96:01:16:
         0f:59:32:cc:cd:39:3c:59:a8:64:bd:07:fc:7a:c6:7c:86:f0:
         cd:eb:21:2c:da:f8:5d:11:10:a1:9d:19:42:78:b6:ab:50:ea:
         46:f1:2c:5c:8d:8b:c0:ab:96:91:c4:01:d9:5d:9a:11:91:02:
         0f:12:f6:e2:89:2a:7a:58:02:72:51:03:58:40:37:ea:95:a0:
         cd:79:ca:63:7f:35:64:82:8b:c5:a5:59:5c:b4:b6:1a:1e:29:
         d7:e1:78:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:05:56 2026 by rpki-client