Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/5fdcb8c0-75fd-3e79-b760-11d7d4b8add7.roa
File:                     5fdcb8c0-75fd-3e79-b760-11d7d4b8add7.roa (raw, json)
Hash identifier:          42lJpdi0K+sRM7kxq2fgRRPhu6dTgWUuSceVBvhMDek=
Subject key identifier:   C0:E6:10:FE:EF:E4:D2:B7:71:BD:EF:A2:7B:9E:D5:03:F6:DD:A1:51
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F4328584EC20C7C5214B5DC12AF78F100
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/5fdcb8c0-75fd-3e79-b760-11d7d4b8add7.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     46841
IP address blocks:        209.222.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:7c:52:14:b5:dc:12:af:78:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=4da0c339-1c65-4e7b-9348-5b9ad77a9545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:f2:41:a0:0a:46:46:e8:4f:cc:a5:a9:56:
                    71:7c:19:1c:9b:15:35:ac:87:62:2e:8f:39:68:54:
                    15:69:08:ff:df:59:8c:0d:44:5c:1e:c5:17:ad:a8:
                    d2:de:7e:79:99:16:da:7f:0f:c5:bb:e1:b4:4a:0d:
                    bf:e3:cc:0c:2f:62:91:62:13:fc:41:67:98:82:97:
                    78:6d:4f:2f:73:b9:54:c9:c9:06:96:d4:cf:16:bd:
                    6e:3f:51:78:b9:b2:fc:13:4f:f6:ea:43:d5:50:aa:
                    b1:e3:ac:b5:14:ef:85:80:6a:3d:3b:20:e5:68:76:
                    bb:54:45:d4:8d:8a:3e:c9:1a:f1:38:e3:c9:53:4a:
                    d7:69:e2:57:92:b5:58:48:72:5f:4d:8f:9e:95:c0:
                    00:41:4c:2b:01:66:fe:a7:dd:ad:d4:61:b4:51:e8:
                    82:22:da:67:a4:e6:32:a5:c0:e0:74:9a:b1:52:9e:
                    5d:fb:34:76:4b:56:53:6a:7f:eb:48:ea:fc:37:8a:
                    de:4a:0f:3a:86:aa:ef:83:9c:5c:0c:6f:7c:3b:c8:
                    6b:94:d4:bd:c7:0f:cd:79:c4:9a:a9:7c:46:8e:04:
                    66:8a:0a:3b:3f:20:d9:3a:41:55:05:6a:60:6a:0b:
                    54:23:9c:20:dc:44:9a:6f:bb:cd:a2:0d:58:75:00:
                    9e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E6:10:FE:EF:E4:D2:B7:71:BD:EF:A2:7B:9E:D5:03:F6:DD:A1:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/5fdcb8c0-75fd-3e79-b760-11d7d4b8add7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bd:d9:14:eb:1d:11:15:f3:d2:db:8f:39:23:50:cd:82:8f:
         3d:61:be:1a:65:ee:b2:00:47:25:29:dd:8c:f2:50:f5:29:0e:
         43:98:69:bf:bf:a5:3b:5f:a4:44:5f:5f:23:9e:c7:a7:93:c1:
         95:14:f2:78:52:e0:6a:f8:b3:f9:89:05:51:9d:a5:41:27:33:
         01:78:04:f3:71:b7:46:8e:19:4c:c7:d2:f4:cc:a6:c6:80:ae:
         3f:cb:7f:fe:10:04:99:dc:04:b8:f6:41:b9:32:46:ed:c2:6a:
         86:d4:ad:57:10:94:dc:2f:14:96:c9:f4:2d:73:01:78:ac:da:
         b0:7b:3c:eb:86:0b:ae:68:60:43:e2:88:8d:87:e8:2e:a6:65:
         67:2d:af:aa:a6:7e:dc:7a:5f:b1:78:ff:22:4f:8b:31:b0:8b:
         1f:69:db:9c:d0:06:d1:06:65:c8:9b:f1:e1:03:32:c2:82:ac:
         a1:08:65:9d:16:59:b5:03:ce:6c:4e:f6:7e:88:bd:92:9d:41:
         03:1b:77:33:f1:ef:c7:b0:0f:5e:36:b6:52:be:2c:da:81:1b:
         c8:0a:7b:b7:0a:3c:cf:97:ba:34:cf:80:81:8e:4b:66:2a:1c:
         c3:7e:b7:c4:0a:0a:96:4a:dc:a1:cf:00:55:1c:06:f7:2c:71:
         11:cd:6d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 03:27:47 2026 by rpki-client