Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1fbe082c-486d-346a-9f8c-efe3e14e7d59.roa
File:                     1fbe082c-486d-346a-9f8c-efe3e14e7d59.roa (raw, json)
Hash identifier:          wBDe5FPU1DtC8SDBFU6WMu3CWf4RIsZINMq6bjJ+mGU=
Subject key identifier:   28:CB:EE:AB:16:62:40:17:E9:F3:D3:1D:FD:62:9E:12:C1:4B:0F:57
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F4328584F2957CAA225E5582EA185F640
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1fbe082c-486d-346a-9f8c-efe3e14e7d59.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     62240
IP address blocks:        173.245.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ca:a2:25:e5:58:2e:a1:85:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=632768c2-ce04-4383-a24b-d3b88d84f858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e0:6b:d0:12:93:21:0d:36:45:50:4f:50:92:
                    74:bb:65:7a:7e:67:2a:d0:18:fd:bf:c7:bd:20:8c:
                    8f:b1:97:a8:bf:c6:6b:d1:b3:cd:16:fd:82:49:dd:
                    41:71:2e:a5:fd:d5:f3:de:89:e2:27:c8:6e:db:bb:
                    09:e3:52:bf:1d:38:36:15:f3:d4:9b:29:22:4c:fd:
                    0b:36:fc:6c:ce:39:df:ec:9d:7f:3c:4f:8f:7c:10:
                    16:5b:4d:88:5a:a9:8b:c7:db:64:23:40:73:8d:3d:
                    1b:e0:80:d2:0c:63:45:81:6b:1b:6f:dc:6b:3f:d6:
                    b1:77:a1:28:34:88:7a:f2:9e:61:db:02:50:9c:d8:
                    9b:d5:f9:ba:d1:c3:4e:84:e1:a9:e4:e0:ad:16:5d:
                    b9:fb:f9:a0:c5:fc:9c:e9:fd:9c:fe:70:9f:6f:67:
                    0b:e3:f3:65:5a:86:e0:33:2d:39:00:3f:6b:b0:ba:
                    3b:78:ce:6e:4f:4f:ac:44:96:6e:74:2c:55:88:93:
                    63:de:b9:38:28:b4:22:cf:ae:a5:96:58:dd:bc:00:
                    c1:6f:5a:31:16:b9:05:76:dd:f6:08:72:9c:e5:d9:
                    dd:76:89:e0:1e:87:70:be:d2:c1:6f:e9:6b:23:b9:
                    44:49:01:1f:59:ed:fa:36:86:2e:5a:24:6a:fc:f3:
                    34:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CB:EE:AB:16:62:40:17:E9:F3:D3:1D:FD:62:9E:12:C1:4B:0F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1fbe082c-486d-346a-9f8c-efe3e14e7d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b1:58:55:28:ac:97:6a:80:e4:32:7a:53:68:db:ce:ed:a5:
         48:76:ad:6c:02:64:83:5d:c4:64:d5:cf:20:b1:04:4d:e3:94:
         9f:1c:15:d9:4b:80:25:0f:80:c3:da:2d:96:40:1f:f3:1b:53:
         a6:1a:03:20:62:c6:6a:79:ea:25:d5:e8:19:7a:a3:c8:b7:37:
         3d:90:f0:dc:4a:26:2a:0a:d2:06:25:20:8e:14:e4:f0:95:7e:
         fb:2a:58:72:70:40:41:39:b1:98:9d:6a:e4:59:c9:fe:13:62:
         59:f5:36:09:21:48:c4:b8:49:f7:38:3e:b5:e1:d2:f3:3f:06:
         72:d4:62:fc:20:ec:1c:3f:ae:67:b7:cd:53:cf:22:2b:df:c7:
         98:e0:30:a4:0d:bf:6b:54:23:a2:b3:b5:f7:96:31:f3:49:b1:
         ef:fc:3c:3d:ca:a6:95:a3:62:59:20:df:20:ff:91:fc:d7:a5:
         22:d0:d4:d2:66:d4:c3:de:07:df:58:27:80:43:1f:12:db:bf:
         c8:05:53:4e:e5:32:60:44:1c:a6:f1:dc:98:19:ee:26:55:31:
         52:04:a3:82:36:b7:ec:74:bf:ae:d0:28:91:0c:ad:9c:89:87:
         d6:33:30:e4:0f:7c:76:ee:27:4b:0f:9c:31:28:ad:e4:9c:70:
         6c:ba:48:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:12:19 2026 by rpki-client