Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1feacc45-abc0-30a4-b522-017d85a47719.roa
File:                     1feacc45-abc0-30a4-b522-017d85a47719.roa (raw, json)
Hash identifier:          ivwIbRl/HhHIzIfYCl93VDB96iTtZJb+jbBBTa/Ijm0=
Subject key identifier:   18:72:E2:7A:31:48:64:77:91:99:91:CB:79:8E:BA:88:25:46:35:44
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F4984F4CB0BF3F95CF83FBEC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1feacc45-abc0-30a4-b522-017d85a47719.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        172.217.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:f4:cb:0b:f3:f9:5c:f8:3f:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=da1326d5-fea2-4d2b-ab57-6272725bcb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e0:ab:24:4f:41:b2:4f:bd:ae:5f:68:4a:19:
                    28:12:78:40:47:c7:9d:37:5a:9a:75:3a:5c:7b:61:
                    90:1f:67:45:d7:77:49:f6:34:4b:0e:b5:38:63:34:
                    1d:56:b5:b7:ac:79:7d:87:b7:52:9b:e5:19:d0:fb:
                    69:5c:e5:e5:80:66:59:40:86:13:cc:9b:7a:d2:67:
                    a4:fc:12:63:c1:91:ad:ff:d6:fb:fc:28:28:a0:4a:
                    80:96:4b:52:ee:18:1a:55:46:3f:ca:9b:15:00:ec:
                    5a:e1:ef:6d:78:dd:c2:98:12:44:13:0e:19:ea:da:
                    52:54:aa:d1:3e:cc:6a:e1:4b:f3:d4:a8:3a:73:f8:
                    60:e7:0f:cb:8e:91:73:d3:6f:aa:c2:fe:c3:5e:62:
                    2e:fd:28:25:11:dd:50:a7:ad:1c:0e:76:ac:4a:f7:
                    50:68:04:dd:81:b4:5b:7c:e2:13:7e:0b:3f:89:e0:
                    2b:c3:98:ec:b6:f4:13:50:ae:7b:20:a0:81:41:25:
                    d0:a2:ee:0b:d7:d6:de:04:f0:94:02:05:c7:1f:6d:
                    a4:b9:12:22:1b:ac:f0:ec:93:60:e2:de:c8:9e:e8:
                    0f:fb:df:3b:82:59:2d:9c:cd:af:eb:0c:6d:20:dd:
                    d2:66:b2:af:f2:1e:8e:5b:8e:eb:79:20:29:25:53:
                    08:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:72:E2:7A:31:48:64:77:91:99:91:CB:79:8E:BA:88:25:46:35:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1feacc45-abc0-30a4-b522-017d85a47719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8c:05:9a:70:a3:10:98:a5:9d:c0:26:62:54:e5:b9:9a:6b:
         b3:9d:11:c9:e0:48:4a:08:a6:b4:68:e4:1a:59:35:e5:1d:ca:
         cf:f0:e1:18:94:0c:4d:4c:e2:96:d5:3e:7a:12:57:06:ac:d9:
         f7:3e:be:18:ff:81:58:73:ca:28:23:13:b0:e7:84:05:ef:20:
         be:35:2c:69:9e:6a:45:a3:52:b2:81:98:61:2f:e4:63:c7:5e:
         f5:92:d8:3d:00:d1:a7:2d:36:60:1e:9e:ba:a3:24:ea:09:ce:
         1b:91:92:4f:6a:5a:be:45:47:84:aa:27:8e:47:12:d8:14:95:
         a4:47:26:88:6a:86:59:b7:c0:46:86:98:7f:9f:74:70:cd:f1:
         43:c7:3a:6b:99:6a:c5:e0:cc:5c:34:d7:e6:b7:12:ba:2b:14:
         56:41:ec:e7:58:3d:69:b1:16:c7:42:5f:21:50:04:76:67:a6:
         6e:00:57:ef:e6:a7:3a:10:47:df:b2:59:89:69:68:4d:cc:8a:
         49:c6:22:f0:41:e3:d1:55:6e:46:bd:f7:6f:b0:9c:68:fe:bc:
         99:ee:42:93:15:4b:4c:13:13:e8:55:b3:c9:c4:af:63:89:c6:
         32:25:29:16:42:2a:41:f8:ca:13:e1:a8:ad:90:8f:ba:b8:e4:
         57:df:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:08:08 2026 by rpki-client