Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/be0013cc-1e09-43ab-8e65-5214f5fd6bab/ae45a609-20d9-39a3-8851-eafc2106b008.roa
File:                     ae45a609-20d9-39a3-8851-eafc2106b008.roa (raw, json)
Hash identifier:          InWRsLYjLqe3viSdbDBh8eyK4FtBdhjQ2Sijm1TrZg4=
Subject key identifier:   84:DD:0A:23:1E:AB:F2:73:AF:D4:BE:12:1B:0C:D4:54:C4:99:0A:CC
Certificate issuer:       /CN=be0013cc-1e09-43ab-8e65-5214f5fd6bab
Certificate serial:       010D0C9F4328584F10CE1E0016A06F3D49C10080
Authority key identifier: 21:33:F7:5A:27:C5:5E:D8:C7:04:3D:7F:10:A3:A3:2C:88:72:17:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/be0013cc-1e09-43ab-8e65-5214f5fd6bab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/be0013cc-1e09-43ab-8e65-5214f5fd6bab/ae45a609-20d9-39a3-8851-eafc2106b008.roa
Signing time:             Fri 04 Sep 2026 18:03:41 +0000
ROA not before:           Fri 04 Sep 2026 18:03:41 +0000
ROA not after:            Thu 03 Dec 2026 19:03:41 +0000
asID:                     198949
IP address blocks:        207.89.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/be0013cc-1e09-43ab-8e65-5214f5fd6bab/be0013cc-1e09-43ab-8e65-5214f5fd6bab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/be0013cc-1e09-43ab-8e65-5214f5fd6bab/be0013cc-1e09-43ab-8e65-5214f5fd6bab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/be0013cc-1e09-43ab-8e65-5214f5fd6bab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:ce:1e:00:16:a0:6f:3d:49:c1:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be0013cc-1e09-43ab-8e65-5214f5fd6bab
        Validity
            Not Before: Sep  4 18:03:41 2026 GMT
            Not After : Dec  3 19:03:41 2026 GMT
        Subject: CN=ce74a69b-eeeb-4b35-929f-96a3558ec88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:06:15:f4:c0:a5:b2:2c:45:3c:d7:46:26:
                    6f:60:6c:aa:78:99:fc:f7:cc:1e:dd:ae:b5:d0:0b:
                    f1:f9:aa:3d:2d:61:ac:43:d8:64:f2:99:24:fc:ac:
                    09:0f:33:f2:e3:d4:1b:b4:ca:ae:8c:da:a6:f8:13:
                    c6:fe:92:3e:83:3a:64:a8:1a:b6:53:66:7a:e6:38:
                    46:be:7a:95:8b:e9:a5:c8:58:bc:08:2e:f9:2c:ce:
                    a6:31:37:c0:8e:e3:05:95:2f:58:61:5e:37:9f:88:
                    6b:df:4b:0e:c0:df:ef:05:b0:12:c8:a4:46:d3:6f:
                    5a:4a:4b:6b:23:b3:9a:40:84:b0:80:8c:59:d0:65:
                    17:a6:a9:fc:36:ec:0a:5c:10:a4:e9:84:1f:46:d9:
                    ef:bf:b7:b3:15:38:dc:e5:d8:a5:50:7f:4b:01:53:
                    32:1c:fb:4b:20:fe:89:f8:2c:35:4b:fc:1e:e3:ec:
                    80:2b:a6:eb:ad:a8:ce:86:93:e1:00:f9:cf:f0:18:
                    92:a3:99:98:9d:6c:28:00:0a:05:99:53:12:de:d7:
                    8b:d9:42:4f:0f:7c:da:46:b7:e2:01:60:66:52:28:
                    dc:f4:fa:e2:d1:5e:36:ed:b3:88:44:07:cb:71:b3:
                    d8:2d:eb:bd:98:b6:6a:6f:e8:27:14:b6:65:f9:8e:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DD:0A:23:1E:AB:F2:73:AF:D4:BE:12:1B:0C:D4:54:C4:99:0A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/be0013cc-1e09-43ab-8e65-5214f5fd6bab/ae45a609-20d9-39a3-8851-eafc2106b008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/be0013cc-1e09-43ab-8e65-5214f5fd6bab/be0013cc-1e09-43ab-8e65-5214f5fd6bab.crl

            X509v3 Authority Key Identifier:
                keyid:21:33:F7:5A:27:C5:5E:D8:C7:04:3D:7F:10:A3:A3:2C:88:72:17:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/be0013cc-1e09-43ab-8e65-5214f5fd6bab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.89.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a4:2e:0a:88:3c:fe:2b:82:65:0c:6a:5c:0f:01:a2:d0:ff:
         4d:41:a3:5c:f7:5e:ba:4e:38:db:80:e9:2c:3a:0f:69:42:51:
         6c:06:e6:8f:c0:f6:4e:0f:21:bb:d4:d1:d7:5b:4b:03:11:cd:
         fa:54:29:c6:87:33:de:c4:41:5c:bc:2d:50:21:1d:c1:10:49:
         6f:39:a3:cd:6b:4e:65:28:2a:4c:d5:81:ec:9e:89:4d:1d:13:
         c9:47:69:ce:d3:cb:2a:ca:88:2a:9b:3e:7a:78:2e:80:29:19:
         91:0b:cb:92:09:a8:9c:be:ff:4f:22:8c:ac:59:f3:1d:01:37:
         4e:f6:5e:cc:2c:78:fb:f4:62:51:9b:dc:fd:e0:16:e1:4b:1f:
         47:84:1f:fa:de:64:8b:73:80:31:c9:f4:b8:47:97:49:07:da:
         57:4f:15:68:d7:df:13:f7:0f:46:f1:53:38:4c:fb:ae:14:6d:
         5c:02:32:e1:68:2d:30:cb:6d:e2:11:d3:46:57:30:a1:b1:24:
         9d:63:b8:b2:58:b3:68:1a:ce:94:ff:30:8c:1c:2a:95:d8:0e:
         ec:b6:24:90:a4:d0:2d:1b:11:5e:0e:8f:b1:4c:c8:0d:86:29:
         8d:f5:27:ae:c3:51:36:2e:39:07:b5:b6:ac:01:c6:ef:e8:55:
         7e:65:1f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:17:26 2026 by rpki-client