Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/cad34e87-b51d-3446-862e-e3a9e7d95020.roa
File:                     cad34e87-b51d-3446-862e-e3a9e7d95020.roa (raw, json)
Hash identifier:          Lmoy6gTKfdNScoN/5FVs9ux9SAhHcYY0fK8YxeX8W3o=
Subject key identifier:   D9:87:3E:6A:3E:4B:AD:AF:5C:F5:2D:A1:B4:49:7E:2A:D2:13:9C:E5
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584F57682C3ACD52936AF0635500
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/cad34e87-b51d-3446-862e-e3a9e7d95020.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     397394
IP address blocks:        148.77.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:2c:3a:cd:52:93:6a:f0:63:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=1886ac99-ad91-4cc2-9130-0b7ca07e68fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:73:06:f9:af:a0:ad:c6:c8:70:40:e7:73:89:
                    68:a0:12:a6:99:07:65:f7:9e:49:46:8d:6b:16:f0:
                    4f:43:a8:30:06:5e:7e:b8:93:48:38:0d:36:b9:fd:
                    3c:3c:eb:e0:a8:4a:97:72:ad:93:84:71:72:78:2a:
                    ca:17:4f:5e:cc:2a:23:6c:cd:22:d1:b0:f1:3a:22:
                    43:fb:79:6a:13:25:73:c6:5c:39:ba:ec:3e:fb:b0:
                    c3:ad:f0:12:78:dc:6f:6a:a3:5e:49:90:7f:8f:6f:
                    25:ba:91:e6:b5:fa:f4:54:8d:05:54:72:4d:ce:48:
                    50:4e:68:d5:92:92:bf:3b:a8:17:cd:52:49:fc:cf:
                    d2:d5:2d:01:ee:d6:4f:79:3e:f9:aa:c8:8f:88:18:
                    34:c1:9e:72:73:1e:95:bf:70:60:19:81:2f:ae:f5:
                    2d:80:e0:f2:51:55:0a:45:f6:ce:bf:63:90:67:b5:
                    5d:8f:71:ab:5a:9e:39:a5:fd:29:74:90:3c:90:2b:
                    4f:ef:87:7e:78:43:ed:e3:20:4b:3a:8b:d6:6d:cc:
                    d1:bb:be:cb:fb:d1:9b:91:01:aa:a9:00:4c:10:82:
                    b4:4d:6a:ab:90:7d:11:67:ce:43:b1:16:d2:0c:e5:
                    35:8e:91:c6:87:e7:e9:be:9d:1e:b4:79:00:ee:1a:
                    f7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:87:3E:6A:3E:4B:AD:AF:5C:F5:2D:A1:B4:49:7E:2A:D2:13:9C:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/cad34e87-b51d-3446-862e-e3a9e7d95020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.77.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1b:de:eb:ac:a1:44:63:d5:a7:a5:5c:b9:7f:8f:b7:87:1a:
         78:da:4e:e6:9f:00:37:fb:14:e7:d6:f5:0a:c1:9e:54:79:ee:
         a1:03:da:92:3c:57:0d:dc:e6:58:2a:b9:36:70:1c:34:5f:6e:
         af:9f:50:03:db:e4:b7:09:7f:c2:8e:0b:9e:87:5a:eb:b6:ad:
         61:f4:fe:c1:61:b1:2b:c0:49:2a:fe:e3:6e:a3:70:32:00:87:
         5e:03:f1:cf:9b:f8:cc:ab:f0:24:89:a9:07:80:86:76:8e:52:
         60:b8:98:34:3e:c0:48:cb:dc:f3:83:a9:c5:37:8b:36:8f:c1:
         68:34:69:de:6a:6b:61:54:c5:36:18:ce:72:46:99:07:14:ae:
         05:9c:68:20:9a:e6:84:d7:cd:c7:61:a2:f2:1c:cd:7e:5d:89:
         10:5d:42:b6:05:17:12:39:b1:e1:10:4e:eb:59:67:ba:3e:c7:
         38:5a:ff:b2:80:ad:bf:44:87:94:66:17:f0:ee:6a:fd:05:5a:
         1d:d8:af:48:3e:d2:40:8b:49:c3:0a:01:d5:23:18:d1:89:46:
         f5:b8:ef:72:6a:c2:df:c4:a6:87:48:80:d1:a6:54:55:c6:7e:
         fc:96:fb:50:ce:ad:55:04:ca:c5:aa:bb:76:c3:50:15:20:09:
         3f:1c:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:43:59 2026 by rpki-client