Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ac571f27-2d55-35a3-88f4-63a0b9c60c25.roa
File:                     ac571f27-2d55-35a3-88f4-63a0b9c60c25.roa (raw, json)
Hash identifier:          n7vOrtgSkGTDzjZ29X5UivMoh9YcOyTBWhjHjbUB5Kg=
Subject key identifier:   C9:5E:0F:FC:D9:8C:01:33:11:4C:64:FD:AE:C8:28:2E:95:4C:E5:C4
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584F374D1B5D0AB1FCDF18DBB180
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ac571f27-2d55-35a3-88f4-63a0b9c60c25.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        173.199.8.0/23 maxlen: 24
                          173.199.29.0/24 maxlen: 24
                          173.199.38.0/24 maxlen: 24
                          173.199.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:1b:5d:0a:b1:fc:df:18:db:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=b70e7389-72d5-4351-850c-76e5126fd969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:5d:7c:78:0a:c6:ae:95:0b:51:6b:45:ff:
                    43:fb:06:49:91:0d:56:62:f9:9b:c3:a5:42:07:4d:
                    bd:67:f5:b4:68:ad:61:39:12:30:0a:eb:c8:81:dd:
                    42:ab:69:19:ac:58:11:c2:ca:8a:39:3f:3f:be:9c:
                    18:f1:ae:5c:60:89:9e:a8:7b:c3:49:ac:8c:5d:dc:
                    4c:bf:bc:45:c7:bc:97:7c:5e:de:7a:98:87:25:b6:
                    4b:c0:3d:c3:bc:4c:40:df:77:9d:12:17:ed:62:34:
                    d4:7a:85:24:aa:ec:49:9b:82:49:7e:bd:e5:60:8b:
                    97:c6:60:c6:3c:cc:53:8a:51:96:9a:e4:72:79:9d:
                    a3:17:c2:24:4e:52:b0:69:6b:55:0b:c7:60:cd:9a:
                    69:7c:99:cc:c2:fe:3c:63:85:01:d8:6f:a1:ab:02:
                    92:ba:7a:b8:df:f1:8f:12:62:16:ac:34:b4:07:36:
                    df:4b:59:c9:6a:bc:c0:a2:9b:bb:70:90:cf:1d:b3:
                    f2:ca:0b:ca:b4:19:b6:be:9c:66:92:5a:20:d2:1f:
                    8f:28:1a:e1:be:63:ac:34:6c:05:24:be:44:1d:c4:
                    3a:43:38:11:18:8a:00:a7:72:fd:83:8d:cd:96:12:
                    12:27:0a:02:6f:c8:c1:60:08:79:c3:b1:07:ca:ee:
                    1e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5E:0F:FC:D9:8C:01:33:11:4C:64:FD:AE:C8:28:2E:95:4C:E5:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ac571f27-2d55-35a3-88f4-63a0b9c60c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.8.0/23
                  173.199.29.0/24
                  173.199.38.0/24
                  173.199.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3a:f8:b4:3c:0b:ef:ef:c8:78:1d:30:bf:de:bf:59:15:b5:
         29:09:9e:c0:f0:39:06:41:af:45:90:2f:fc:da:ce:71:d9:92:
         f2:b1:fa:e8:3d:52:ee:c4:cd:a1:41:a1:9a:ef:9e:5f:57:5c:
         d0:12:32:b5:6a:24:4c:6b:f1:ce:c6:34:67:69:61:04:b5:56:
         2e:d0:71:5d:43:31:13:4b:a8:3f:c6:15:81:29:83:a6:dd:d6:
         07:9a:dd:fe:9f:b5:55:e6:0d:d9:92:0a:fa:2b:05:a9:1d:bd:
         70:55:11:34:9d:ee:ec:22:f2:de:5d:33:99:f8:ab:7c:49:b5:
         5b:86:56:b9:f6:97:78:3d:47:62:a2:bc:c5:12:38:2f:33:9c:
         d8:02:77:9c:b5:91:2c:3b:9e:ae:41:bc:19:18:71:66:3c:31:
         fb:75:ac:42:9b:47:0b:3c:d6:c5:9d:01:48:18:9d:a0:df:09:
         dc:cf:fb:aa:8b:4d:33:b2:e3:8a:0b:94:08:4c:98:7b:fb:7c:
         72:34:30:97:b4:ad:0b:4b:2e:fd:34:3e:a4:49:3d:35:e8:1f:
         f0:49:0e:7b:80:88:cc:2b:97:aa:6c:39:ea:97:cc:14:b0:7a:
         a4:0e:13:44:15:4e:02:66:68:60:7e:3b:1e:9b:37:af:35:b5:
         05:78:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:15:54 2026 by rpki-client