Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa
File:                     ecd9439b-df70-304d-a65a-4712a2c669ef.roa (raw, json)
Hash identifier:          MMzy7EVnwPBpKyvaNl/ICSMJ9AtC14QAqUlwPexYiTk=
Subject key identifier:   FD:5F:CD:1D:FF:4B:85:94:1B:B8:09:CC:67:C3:8C:8C:15:50:5E:FE
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584F4976A1B0E7B31F01ECC04540
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        157.166.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:a1:b0:e7:b3:1f:01:ec:c0:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a3724efe-7f82-404a-b8d8-159ab545b7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:fe:f3:20:1e:eb:ac:4b:05:de:e3:31:fa:
                    f2:a8:43:52:65:2e:b0:1f:b7:0b:23:d3:7c:1b:73:
                    03:50:22:25:00:2f:f2:ef:80:d1:49:27:5e:4e:a4:
                    78:a7:c0:4f:09:52:b8:80:12:8a:e6:1d:78:6b:40:
                    d7:b7:2e:fd:bf:24:28:40:46:41:2e:ed:24:94:89:
                    e4:e7:48:47:d6:32:b8:7b:93:b5:9d:15:4f:46:cd:
                    bb:2a:ed:13:59:05:cc:17:74:14:a2:60:14:62:3c:
                    66:15:63:ba:0e:3c:e9:8b:05:a5:bd:d9:8c:50:dc:
                    28:cb:7c:cd:c5:cc:ac:b8:c4:7e:58:41:7d:8f:09:
                    ad:67:de:23:10:a2:14:0c:4c:69:c1:38:1f:90:ed:
                    cb:06:e7:7a:92:37:f2:ae:85:5c:89:72:5a:e7:fe:
                    90:03:a7:c3:bd:f4:5e:8a:93:64:13:b0:5a:4c:5d:
                    27:96:14:7a:30:63:a3:d1:16:ec:17:ef:ba:0d:fb:
                    25:32:9f:76:9a:9b:76:44:c8:72:6d:ff:8b:f4:24:
                    d7:07:86:dd:95:c1:f4:9d:1f:b5:cf:9b:c3:fa:65:
                    2a:85:91:f3:9a:af:46:e6:35:92:5a:33:c9:eb:d3:
                    84:b4:40:e1:91:69:dc:a7:43:d4:92:ef:7c:ee:eb:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5F:CD:1D:FF:4B:85:94:1B:B8:09:CC:67:C3:8C:8C:15:50:5E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:49:e7:55:8c:8d:59:4c:08:b7:14:64:c8:38:af:df:c0:1a:
         0c:80:6a:1b:d7:6b:82:a4:59:60:e9:04:6c:ea:b5:f8:d6:75:
         bb:b5:35:c7:94:f2:77:fc:f9:c9:68:31:4e:82:b1:b5:6a:2a:
         07:32:53:30:5e:4d:f0:1d:ce:f0:0e:10:02:a5:d0:7a:f0:cf:
         a3:59:5e:f2:f8:fe:de:ad:bc:cd:5c:bd:b3:43:87:55:8a:66:
         63:cc:54:44:96:e7:2d:32:88:70:36:04:fd:d9:48:a4:8e:ed:
         75:4b:28:9f:8d:61:be:a1:c1:58:74:e5:29:80:16:ea:0c:69:
         4c:e1:e1:e3:5d:a6:4f:1d:9e:ff:ef:d6:a8:59:4e:48:5c:6b:
         ee:31:86:a5:42:76:0e:dd:52:01:78:00:54:82:0e:58:d0:44:
         3a:eb:cf:00:c8:2d:f0:9b:f0:ce:dc:21:30:40:93:49:15:47:
         74:ab:f2:61:3b:e9:d7:91:65:8b:8a:0b:b6:f4:04:9f:98:6f:
         aa:1c:21:7c:b7:19:6e:28:fd:e3:ed:f8:01:2c:80:e4:ac:b1:
         51:e7:ba:fa:92:32:b9:0b:00:5e:c7:6d:cc:d1:dd:97:4b:51:
         3d:b4:e7:98:33:98:0c:c2:bb:1a:a4:69:06:13:87:ef:e4:8e:
         37:00:9c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:31:03 2026 by rpki-client