Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/a40c3256-16c9-312b-800f-325359067ffc.roa
File:                     a40c3256-16c9-312b-800f-325359067ffc.roa (raw, json)
Hash identifier:          wA5mmfMFz43ldh4dLjehSb6boJHOfSekyZo1VZKExpk=
Subject key identifier:   A9:A1:3A:AB:23:B0:18:E6:6B:1F:71:3C:47:26:33:77:EB:4D:94:5E
Certificate issuer:       /CN=fc35b16c-01db-45a7-859c-93dd80a44805
Certificate serial:       010D0C9F4328584F497301EBCF364AB77B153880
Authority key identifier: 0D:A5:89:D3:B2:5F:09:29:8B:4A:47:DD:A2:B0:1D:82:4D:5D:D5:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/a40c3256-16c9-312b-800f-325359067ffc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        192.170.16.0/21 maxlen: 24
                          192.170.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/fc35b16c-01db-45a7-859c-93dd80a44805.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/fc35b16c-01db-45a7-859c-93dd80a44805.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:01:eb:cf:36:4a:b7:7b:15:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc35b16c-01db-45a7-859c-93dd80a44805
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a0a72f4a-4472-41d6-bcf1-e14c1dd98840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4d:01:5e:4e:4f:9f:24:8e:19:dc:b0:f8:17:
                    d5:c1:e1:34:e5:1b:93:4d:31:92:91:bf:31:47:2f:
                    a6:b5:15:c7:4d:aa:15:c3:d3:aa:86:70:21:bd:6e:
                    eb:dd:7f:18:9c:04:f2:3d:f6:32:0f:6a:ae:98:8f:
                    b6:0b:a5:c2:26:a3:14:22:16:b9:99:b7:4e:fa:36:
                    5f:29:a4:50:7a:53:e0:62:7a:1e:cb:92:b5:90:df:
                    91:c1:95:10:a3:53:8a:5d:4d:c1:94:d9:03:fc:52:
                    79:92:8d:72:34:52:f7:5a:fc:23:d7:09:7b:8b:ac:
                    c4:fc:81:3a:3d:22:44:06:a6:d0:36:f6:72:23:c8:
                    f8:34:c4:6a:3f:11:cd:d0:5d:cc:d0:b0:6b:86:da:
                    84:b7:99:e5:93:7c:3d:35:bc:a2:9f:13:a6:6c:60:
                    95:1d:1f:71:d1:80:b8:3e:1a:f5:57:bd:6e:ea:36:
                    b7:ff:94:8d:0e:78:39:91:53:be:f3:8a:68:f6:92:
                    0d:d7:d2:4c:5a:84:89:5d:0a:26:95:e0:79:aa:5a:
                    ee:d1:7e:72:a2:5e:8c:c2:63:e0:2f:3e:11:b2:a2:
                    07:25:14:a1:70:72:f3:61:8a:f8:d7:ac:d1:88:86:
                    ad:17:e7:ed:b4:34:c0:56:d5:0f:92:71:0d:a1:e9:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A1:3A:AB:23:B0:18:E6:6B:1F:71:3C:47:26:33:77:EB:4D:94:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/a40c3256-16c9-312b-800f-325359067ffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/fc35b16c-01db-45a7-859c-93dd80a44805.crl

            X509v3 Authority Key Identifier:
                keyid:0D:A5:89:D3:B2:5F:09:29:8B:4A:47:DD:A2:B0:1D:82:4D:5D:D5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.170.16.0-192.170.27.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:21:82:48:5b:5a:cd:b1:b8:c0:73:5f:a6:12:23:e7:7c:8d:
         82:8b:d6:3e:fa:86:07:70:6f:4c:67:37:2a:a1:60:d1:eb:d5:
         52:b5:7f:1a:f1:bb:eb:6a:23:de:9a:74:c8:cd:4d:6c:db:46:
         5c:58:1e:ce:8c:7f:bd:84:4a:6d:39:4f:9f:9a:c1:ce:8e:8a:
         17:c9:17:46:23:c1:ea:d0:49:fc:2b:2a:6e:c3:b4:1f:1e:2d:
         e3:6b:6e:d4:40:8d:98:07:c3:83:af:68:f1:53:ea:cc:86:84:
         b2:73:51:a5:5b:f7:17:e5:52:fb:06:53:b4:39:bd:a8:da:74:
         14:fe:d2:46:e1:ce:d3:89:5c:90:fd:d8:95:24:e4:8c:b0:a9:
         f3:e6:11:7a:6e:5b:75:72:d9:df:d2:3b:72:37:b2:75:0e:1e:
         95:8f:4a:20:ae:ec:e1:ef:5c:b7:8c:ed:5f:00:a6:98:15:39:
         45:8e:7d:e1:52:2c:85:df:58:e4:c3:04:a9:bc:29:f4:44:c0:
         37:06:75:6f:49:0c:cc:d4:42:d8:a0:8b:90:76:59:ff:81:86:
         4f:2b:13:4a:78:94:bf:fa:18:93:07:0d:37:c1:61:d7:4a:13:
         f7:43:07:1c:82:f8:7c:8e:2c:d2:1e:20:3c:a5:6a:90:75:a5:
         32:4a:a4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:17:24 2026 by rpki-client