Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/65e74881-80cf-3406-85ca-cec3b622f056.roa
File:                     65e74881-80cf-3406-85ca-cec3b622f056.roa (raw, json)
Hash identifier:          3Xfio3PdR7SKM9sJ1R+PJ72Xa7IM/brB4khQN78heNA=
Subject key identifier:   E3:8C:DA:DC:21:66:D0:4E:02:AA:38:B1:48:7B:55:91:3F:CB:F3:C3
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F4328584EED524402038AE015CD982D00
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/65e74881-80cf-3406-85ca-cec3b622f056.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     42633
IP address blocks:        170.194.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:44:02:03:8a:e0:15:cd:98:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=515275f0-6def-4373-83d3-c8fcd666efe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:96:7d:89:87:84:bf:04:57:38:b5:af:5b:e7:
                    eb:23:8d:2b:c9:64:7e:0e:6b:66:2a:4f:74:8c:be:
                    24:03:c8:b7:82:57:27:a5:eb:ad:6f:b9:51:ad:b2:
                    77:53:42:94:5d:04:fa:9c:06:36:56:eb:b4:5e:e6:
                    5a:53:43:7b:5a:af:f0:d2:6b:65:43:0b:bf:9f:83:
                    34:6c:b2:82:a5:93:d6:eb:62:9b:20:c6:19:94:cd:
                    5d:5b:ae:d5:60:73:1b:0b:b3:ac:04:82:57:74:f5:
                    2d:07:33:18:f9:af:c4:97:e5:55:3a:67:1e:53:2d:
                    ef:90:f1:21:64:ea:78:39:bb:cd:53:11:a9:55:8c:
                    f5:58:aa:54:e7:49:9d:15:77:c2:7d:02:d7:15:89:
                    aa:d0:bd:d4:df:74:49:9d:f0:89:aa:74:d8:b9:e9:
                    07:3e:d4:ab:c5:ad:d5:f1:81:f2:6d:c2:af:db:80:
                    f8:00:29:04:ea:51:e5:de:6f:3e:f2:79:a2:34:fe:
                    f5:61:63:ef:42:72:03:89:15:1d:7b:9c:23:c3:b0:
                    00:4f:06:d0:61:4b:a7:17:c7:95:12:6a:8c:66:b9:
                    71:44:a2:6a:0a:20:0e:fb:30:9d:bd:7a:d6:8a:29:
                    fb:d8:61:a5:64:47:85:79:d0:66:c8:70:4b:24:0a:
                    52:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8C:DA:DC:21:66:D0:4E:02:AA:38:B1:48:7B:55:91:3F:CB:F3:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/65e74881-80cf-3406-85ca-cec3b622f056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:52:3b:fe:38:93:3c:fc:29:c9:08:e3:0a:9e:ed:a1:69:32:
         33:27:ae:6f:40:84:86:11:43:4b:00:01:07:21:92:57:ac:bf:
         47:1a:c3:5c:10:d9:4b:e8:9c:c8:cd:80:07:e2:a6:7c:27:65:
         a3:32:2a:91:5c:fe:42:c8:2e:72:76:6c:ed:79:a1:ff:34:7a:
         9a:7c:2b:5e:fc:58:73:b7:33:16:02:33:c8:c7:32:20:70:f3:
         f7:bb:cc:51:c6:d0:78:20:6c:5a:76:39:c3:10:cf:df:af:6a:
         e5:58:23:01:92:e8:de:99:25:32:e5:f2:59:ef:9e:17:cc:e1:
         bc:be:ee:6d:aa:76:d8:60:65:72:b7:5e:6c:b1:7a:14:11:94:
         f9:d0:27:d0:f8:b5:64:08:2f:f1:de:dc:a2:0e:43:35:bf:00:
         60:f6:b1:57:43:f9:ea:52:cd:2e:b3:fa:eb:eb:47:3e:39:c9:
         4f:c6:f5:f3:7d:ac:b7:b4:ca:ec:20:b8:89:43:03:a6:ba:9d:
         e5:6c:94:5e:9b:d1:e5:2c:87:63:e8:1d:d2:b2:1f:29:11:32:
         48:e0:af:eb:eb:95:1e:3f:7b:a3:7a:ec:db:5b:97:25:39:12:
         0a:a1:ed:56:bb:48:01:a8:c0:5c:99:a9:21:55:a5:e3:0a:99:
         bc:8e:dc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:36:01 2026 by rpki-client