Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0dcbd20-1328-3f6e-806f-b6e6674f82a0.roa
File:                     e0dcbd20-1328-3f6e-806f-b6e6674f82a0.roa (raw, json)
Hash identifier:          bUccLAwXl5/CtF6Rr303xa34t5MjIvKloABv+WH6MfI=
Subject key identifier:   42:9A:EC:8B:46:B4:1C:6C:A7:10:B8:75:EF:B7:33:3B:49:5B:94:5C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EE921F28C5AD79F93FB2079C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0dcbd20-1328-3f6e-806f-b6e6674f82a0.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     32787
IP address blocks:        209.200.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:f2:8c:5a:d7:9f:93:fb:20:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=d552e28d-f0cd-4dcf-97b0-7b71e1db6167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:c8:50:8e:21:9a:95:3b:3f:58:be:48:5b:
                    58:05:85:67:93:27:1f:e9:bf:75:73:d4:4d:86:d6:
                    1c:77:96:18:73:bc:41:c5:38:7c:99:a8:88:14:7b:
                    19:62:22:77:ee:ff:c6:ec:40:20:21:41:b8:8c:a8:
                    81:64:11:76:57:31:68:0f:4e:0c:0d:20:d6:f4:88:
                    26:29:f3:5c:2d:71:6b:7e:af:cb:2b:c8:83:a8:11:
                    a8:87:5e:c2:62:ab:02:f3:cc:61:09:42:f7:62:8e:
                    a8:7a:b7:da:96:60:72:2d:3d:cc:ef:01:6b:15:bd:
                    7f:b2:03:49:36:c9:ce:6e:62:e0:17:1e:4c:7b:fa:
                    88:75:30:9d:4d:6e:41:9a:71:a7:27:d8:90:07:e8:
                    d7:c6:4f:f2:82:d9:4e:5e:e4:80:aa:96:9e:eb:87:
                    8f:f4:78:51:22:fe:e4:d2:c3:0c:62:4a:71:1d:38:
                    e5:62:56:6e:f0:88:7a:26:df:4d:66:10:ab:2a:55:
                    e3:fb:a8:f4:d6:59:ef:c7:62:2d:a6:34:9c:eb:84:
                    43:3b:9f:b2:12:a3:15:19:70:1c:91:1d:f6:a7:fd:
                    05:83:47:7b:ca:6d:c3:6d:a9:d8:79:91:5f:4c:01:
                    b0:aa:c9:1c:4b:94:b9:00:48:26:ae:18:59:ab:39:
                    42:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9A:EC:8B:46:B4:1C:6C:A7:10:B8:75:EF:B7:33:3B:49:5B:94:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0dcbd20-1328-3f6e-806f-b6e6674f82a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:98:dc:55:6d:86:5c:ef:af:db:4d:c8:6d:9f:68:62:27:f1:
         4d:c5:8d:7c:6d:28:d0:b3:a5:60:26:15:64:b2:28:fa:4e:ae:
         4e:0d:88:00:8f:f9:d9:ca:42:a8:93:81:a9:92:d4:44:0d:7d:
         2b:f5:06:87:11:15:4a:14:f4:81:de:d3:21:a0:e5:8c:e5:f1:
         36:cb:fc:0c:3a:b6:bb:29:26:be:87:f8:8f:20:f5:c2:b5:27:
         d9:e3:01:a1:4b:ab:cd:4b:c4:38:4a:fa:3a:8b:ef:f7:72:cf:
         b4:21:e6:50:5d:13:a3:7f:b7:fe:bf:cd:e4:ad:20:f6:da:d2:
         a9:7b:16:40:1a:28:ea:2f:f0:b0:bf:2d:f7:85:0c:90:bf:a7:
         3a:e6:f6:87:88:6e:27:53:38:a9:37:fb:a6:5e:cf:f0:2a:6a:
         e3:4b:f0:d9:78:a2:4c:ba:30:4d:3b:73:92:56:a2:62:6c:d7:
         31:e6:fd:d4:18:82:36:ba:07:47:5a:fc:a2:4a:fd:a3:70:7c:
         76:84:80:3b:c0:19:37:f8:90:67:b7:0c:cb:e4:c9:d1:79:68:
         1a:eb:8c:4d:64:eb:39:9e:3b:91:d1:ed:6d:41:99:a5:c2:4f:
         ce:06:33:3c:91:98:ba:c7:86:c6:4b:41:c3:3a:32:85:bc:a7:
         8a:c3:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:10:19 2026 by rpki-client