Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3/257175cc-2e5a-3171-a335-7e6e683e6da1.roa
File:                     257175cc-2e5a-3171-a335-7e6e683e6da1.roa (raw, json)
Hash identifier:          mJA5zqame2E2F8vCTySpbJrIZIeqQbZvJdtapc+LOVw=
Subject key identifier:   8C:3E:D7:CF:DC:D6:FB:3E:3F:95:B7:1C:0A:DB:07:B5:EA:EA:C2:1A
Certificate issuer:       /CN=73301555-60f7-4965-845c-618a2fcceec3
Certificate serial:       010D0C9F4328584F3A17C601F937A6F0C7DCF680
Authority key identifier: AB:E0:89:0C:2C:E7:6B:15:94:CC:18:E8:1B:DA:5A:DD:0C:B8:13:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3/257175cc-2e5a-3171-a335-7e6e683e6da1.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     1617
IP address blocks:        199.166.3.0/24 maxlen: 24
                          2620:0:aa00::/48 maxlen: 48
                          2620:0:aa00:1000::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3/73301555-60f7-4965-845c-618a2fcceec3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3/73301555-60f7-4965-845c-618a2fcceec3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:c6:01:f9:37:a6:f0:c7:dc:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73301555-60f7-4965-845c-618a2fcceec3
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=0e9ebc0e-7f72-457a-b75c-d47ab5efe470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e1:cd:17:6a:38:3e:00:22:66:cd:29:b4:7c:
                    e5:2c:3c:c0:ef:65:ea:39:0f:bc:f2:4b:e5:17:c6:
                    a7:06:f1:ec:96:ee:e9:4c:72:61:45:1d:7b:48:b7:
                    7c:13:d9:92:20:4a:32:9c:43:c3:ee:78:c1:d2:ca:
                    25:8a:13:14:6c:36:4c:f7:35:a3:7d:6a:8c:f6:07:
                    7e:ce:84:2a:dd:a4:2e:c6:56:21:b7:89:0a:6d:e7:
                    82:4b:fa:39:66:05:ab:fa:30:d5:b5:64:95:2e:17:
                    be:e1:14:80:a4:af:19:15:c4:e2:e4:5f:2d:07:25:
                    3e:07:be:e9:c3:63:b1:a7:75:be:2e:3b:c2:ae:d5:
                    ce:b8:ff:13:81:64:80:e9:de:75:23:ce:47:e4:20:
                    c1:dd:6d:96:86:b9:f2:1d:23:38:2f:32:37:1d:c0:
                    dc:83:13:e3:30:fe:e1:0c:51:63:5b:66:85:ec:ea:
                    fa:4b:b8:73:67:bd:13:50:3e:11:56:78:f5:1a:b8:
                    88:a3:b4:f0:24:b6:34:c3:78:04:35:7a:df:ef:fa:
                    ab:ed:9c:32:53:5f:ed:7c:c7:9f:cf:0f:70:f5:e6:
                    53:bb:31:6a:d1:1b:06:a0:cb:ad:36:e6:7f:8b:07:
                    61:6b:25:00:53:b8:7d:f0:d7:da:cb:a5:12:f2:e0:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3E:D7:CF:DC:D6:FB:3E:3F:95:B7:1C:0A:DB:07:B5:EA:EA:C2:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3/257175cc-2e5a-3171-a335-7e6e683e6da1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3/73301555-60f7-4965-845c-618a2fcceec3.crl

            X509v3 Authority Key Identifier:
                keyid:AB:E0:89:0C:2C:E7:6B:15:94:CC:18:E8:1B:DA:5A:DD:0C:B8:13:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/73301555-60f7-4965-845c-618a2fcceec3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.3.0/24
                IPv6:
                  2620:0:aa00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:74:c1:21:ad:40:56:b1:f1:1d:7a:59:85:84:99:64:2e:d0:
         24:c1:fc:af:d1:41:6a:56:23:ae:66:68:75:b0:28:34:03:b3:
         12:27:d6:23:1d:bc:fe:ff:86:82:ae:ec:52:21:44:f1:7c:3e:
         17:61:c0:39:56:9d:73:44:a4:23:4e:c1:ea:5e:e0:6e:d3:a5:
         32:a9:46:37:1d:20:aa:9e:d0:2f:29:ab:74:20:be:88:4d:38:
         70:02:4f:10:8e:5f:c4:55:af:77:e4:88:03:d6:1d:62:bc:e5:
         1f:2f:c3:aa:d9:31:e3:e6:40:ec:80:33:5f:f1:3c:af:0b:22:
         0e:54:94:30:b1:f0:6c:ed:42:d0:77:2e:b2:d2:21:7e:60:e3:
         b7:47:1a:00:88:0b:4e:63:18:39:b7:06:ac:3a:0d:a9:76:ef:
         16:52:34:56:88:34:2a:c9:2e:b6:99:6d:a5:37:2f:d0:ca:a4:
         f7:a9:38:26:71:99:6c:94:c3:8c:e8:63:30:46:9b:9b:f4:dc:
         46:7e:01:96:ce:db:97:20:3c:9c:94:7c:35:6b:b6:a1:5f:73:
         77:13:0f:3d:dc:d8:4a:5d:71:0c:b1:0c:e7:9f:cf:8c:0d:03:
         8f:be:d7:4d:44:42:12:4c:4c:1b:c5:a9:4f:e8:6e:3b:9d:d7:
         13:c3:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:47:47 2026 by rpki-client