Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/4acfbd79-bf73-3109-a7d6-3478fd447c0e.roa
File:                     4acfbd79-bf73-3109-a7d6-3478fd447c0e.roa (raw, json)
Hash identifier:          tf9makgMdv3LWVDSOZVZpfoVE13+PsZj/pCxOyoksG8=
Subject key identifier:   CB:91:95:75:25:8B:CB:75:06:D1:41:D6:D0:38:DC:FB:CE:DB:5C:86
Certificate issuer:       /CN=111c4633-f730-480a-8516-3382e9a5eda3
Certificate serial:       010D0C9F4328584F3A17CC14B2F13E19EF5D7C40
Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/4acfbd79-bf73-3109-a7d6-3478fd447c0e.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     13538
IP address blocks:        149.112.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:cc:14:b2:f1:3e:19:ef:5d:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=aad408c4-ec52-442b-8f1c-4c5fd9f433e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:c8:63:24:d0:c3:cf:7b:3e:c6:7a:6e:55:
                    58:d3:5c:6d:9f:9a:53:a3:39:4f:ce:e8:1a:e0:d9:
                    a9:49:48:2a:92:dd:0c:17:7e:69:ac:72:f7:d0:a2:
                    32:68:dd:a0:2b:e1:de:88:dd:74:e3:93:4e:c6:d7:
                    5b:0d:4a:94:33:07:36:8f:be:92:41:a8:bc:92:01:
                    a5:57:6d:fc:30:ef:62:d0:fe:ad:2c:9b:b3:44:b4:
                    60:67:c3:19:2d:2d:92:1c:6c:47:00:b2:a4:78:0b:
                    d2:6f:46:56:75:c2:24:73:1c:07:ff:0a:f7:c5:37:
                    27:27:1c:a5:b8:c2:51:88:af:66:ca:c2:91:4f:72:
                    e9:b0:8b:e0:09:55:d7:eb:ec:ba:59:1b:a8:f2:78:
                    a4:aa:84:d6:a2:a1:af:d3:51:a6:37:97:0e:05:ec:
                    f1:b0:6c:d8:a7:bb:c1:ca:4d:9d:d7:fa:fd:e0:85:
                    18:43:cd:d6:30:5e:31:12:11:33:da:15:a1:a5:9c:
                    fa:a6:5c:ab:b0:c8:ad:59:df:5c:7b:93:94:df:b1:
                    c0:ea:31:2f:4c:cf:d6:56:8e:57:ee:26:77:62:05:
                    39:63:fe:bd:41:1d:07:67:c3:7c:25:11:c2:3c:7b:
                    21:d2:f5:a8:72:82:97:a9:11:e5:0d:5c:8a:49:42:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:91:95:75:25:8B:CB:75:06:D1:41:D6:D0:38:DC:FB:CE:DB:5C:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/4acfbd79-bf73-3109-a7d6-3478fd447c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:64:ab:73:91:a0:f9:23:92:5c:28:26:2a:08:8a:50:0c:43:
         ba:f0:57:eb:32:7b:8c:46:ae:2d:c0:f7:63:64:bc:85:d6:2d:
         15:c7:cb:df:08:ee:58:4f:3a:23:60:de:6b:12:4f:b7:1d:18:
         49:6e:bf:5d:4e:22:a5:36:01:df:48:a6:e2:da:89:98:8b:ca:
         27:6a:f9:be:66:f9:0c:f3:17:f3:ab:d5:c6:c3:9d:14:5b:1b:
         a8:23:e9:6c:06:32:bd:5e:23:62:6b:44:2c:ac:52:25:10:f9:
         64:df:91:6d:a7:bb:66:da:e9:3c:a7:f4:cb:55:aa:5e:e4:49:
         c8:a3:7b:53:cd:a8:6c:f7:99:fd:43:03:b8:ce:e7:c1:16:9b:
         4b:05:96:0b:72:bd:3f:f5:8b:65:35:d2:01:0c:e1:05:fb:9d:
         1a:35:1d:aa:4d:16:ed:a7:11:2a:a0:08:79:61:b3:3a:25:4e:
         2f:bd:bd:69:08:53:84:91:9a:d8:3e:8c:48:2d:7b:f9:20:37:
         7c:93:20:af:7f:a7:d2:04:57:07:a6:76:ce:af:7a:7c:55:b9:
         07:e4:35:dc:7e:1c:6d:e3:f0:d6:ed:67:c6:a4:02:88:56:d5:
         b5:0c:ef:b2:dc:9f:48:82:14:65:c7:f2:68:ae:0c:1f:df:90:
         2f:b4:e2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:38:50 2026 by rpki-client