Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/cd8c45de-7335-36d8-861c-1a78550f1bda.roa
File:                     cd8c45de-7335-36d8-861c-1a78550f1bda.roa (raw, json)
Hash identifier:          Lx+JvT6202ssgRMaNpTw2Yrfp1l+Lr2nJ0LyjygA1mw=
Subject key identifier:   9F:8E:02:80:91:3F:4A:36:87:7D:C9:B6:D6:79:E1:E3:67:14:CA:A3
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584EA787583FE02631D0ED8CDE40
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/cd8c45de-7335-36d8-861c-1a78550f1bda.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     50304
IP address blocks:        172.84.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:58:3f:e0:26:31:d0:ed:8c:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=299f8485-d50a-4422-911c-85a038a46dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8f:6d:f5:86:96:a2:11:c4:18:29:a9:f5:b5:
                    a7:cb:ca:22:1c:06:ff:3c:1b:57:08:f4:79:59:89:
                    79:a1:9f:fe:75:76:45:f7:1d:3a:34:ec:b9:67:5b:
                    68:7d:07:0c:b0:27:46:16:80:72:9e:63:af:2e:d8:
                    ac:fc:7a:7c:e9:9f:85:23:e7:5d:9b:23:44:0b:0b:
                    7b:06:9c:e7:22:bd:11:fa:1c:8d:21:2e:31:49:d1:
                    60:02:eb:47:e3:c7:68:c9:6f:ed:1e:1c:a7:7e:9b:
                    05:4f:86:9a:18:37:f6:8c:5e:c0:fa:08:9e:87:ff:
                    e7:db:c0:d3:69:c6:11:08:c4:fd:81:77:e1:d8:48:
                    bb:8c:2b:b4:d5:11:a7:d2:9d:6b:ab:55:1a:48:cb:
                    e2:87:15:64:c5:93:d0:fc:10:5c:ef:3c:55:c4:89:
                    74:53:65:65:a5:7f:f0:57:8b:ea:e8:10:15:b0:60:
                    eb:9d:a7:c9:02:8a:a2:3e:ae:c9:67:db:e5:6b:23:
                    19:7a:65:99:e5:5b:37:e3:31:17:f5:34:68:10:45:
                    c5:2d:fd:ea:b1:d7:c5:b3:2a:1e:8b:78:09:f4:d4:
                    b4:ea:39:78:2b:25:75:4d:e9:26:9d:89:30:a4:08:
                    6d:a5:c4:77:41:e6:5d:6d:97:3e:fa:7b:75:9e:08:
                    cb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8E:02:80:91:3F:4A:36:87:7D:C9:B6:D6:79:E1:E3:67:14:CA:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/cd8c45de-7335-36d8-861c-1a78550f1bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:30:07:fe:48:c7:6f:53:5c:d5:23:d4:62:09:cd:b1:6e:df:
         6c:cb:15:f1:7a:58:e5:e0:84:3d:c4:76:5e:c8:00:41:76:5e:
         5e:13:19:a7:cf:f1:8a:70:90:5c:cf:1f:43:51:4a:0f:8b:7a:
         e7:74:9e:32:0a:64:e5:66:ce:cb:1c:8d:dd:87:dc:49:bd:19:
         e6:2d:8e:96:8f:c9:3c:bb:c6:c2:6c:69:76:62:28:39:29:2d:
         2a:d8:0b:fb:b6:da:cc:51:91:3a:40:9e:37:e7:93:56:91:75:
         7e:64:c3:37:13:53:88:88:92:70:bf:95:f1:1d:80:9c:31:7d:
         dc:f8:2b:47:da:c2:23:3c:2e:a5:9b:e8:98:80:b4:16:c1:21:
         22:f1:2d:c8:51:71:a5:16:83:4f:a7:f5:dc:6a:5a:ae:76:04:
         e0:65:c5:c3:b0:d3:1d:21:3d:ec:a7:84:d3:e5:8a:3c:11:08:
         4c:c2:20:32:14:f9:1b:db:c4:76:b1:6b:39:76:a3:e4:9b:34:
         84:8e:78:49:4b:90:eb:af:49:30:20:c3:30:6c:05:93:1c:04:
         3d:da:03:a1:37:fd:fe:66:e5:4b:61:ff:05:50:39:e4:71:3e:
         67:73:23:48:ca:4a:1b:db:64:28:14:98:e2:b9:6b:70:5f:f0:
         30:71:60:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:46:24 2026 by rpki-client