Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/34ec7320-90a7-3d5a-9e62-d1e52e06381b.roa
File:                     34ec7320-90a7-3d5a-9e62-d1e52e06381b.roa (raw, json)
Hash identifier:          jQWnbhHWcu1yfMY/gA5j3zCfLCTZQbLoV0/mke+Rjhw=
Subject key identifier:   E8:BD:26:5E:8A:80:DE:3A:C4:53:0C:93:E1:C8:E5:A2:DD:C3:CB:EF
Certificate issuer:       /CN=6a4a98a7-67a3-40bb-b253-b11d6ed77f7a
Certificate serial:       010D0C9F4328584F9F383C31D0491CEAEB110680
Authority key identifier: 47:4E:F2:AE:AB:DC:F5:0E:EF:CA:87:51:88:BF:5F:36:6F:A5:80:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/34ec7320-90a7-3d5a-9e62-d1e52e06381b.roa
Signing time:             Sun 25 Oct 2026 18:22:17 +0000
ROA not before:           Sun 25 Oct 2026 18:22:17 +0000
ROA not after:            Sat 23 Jan 2027 19:22:17 +0000
asID:                     63129
IP address blocks:        156.9.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9f:38:3c:31:d0:49:1c:ea:eb:11:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a4a98a7-67a3-40bb-b253-b11d6ed77f7a
        Validity
            Not Before: Oct 25 18:22:17 2026 GMT
            Not After : Jan 23 19:22:17 2027 GMT
        Subject: CN=ad4c3e89-9beb-4eed-a98c-2c739e5d5d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:ed:c7:9c:71:57:2b:4b:63:75:87:9b:7c:
                    93:47:10:cf:36:14:38:67:a4:75:d5:f7:08:22:43:
                    ce:80:ca:a4:0d:6b:56:a2:76:bc:58:a9:ca:0f:49:
                    45:6c:37:ac:47:d1:ed:01:bd:2b:e6:d8:0b:68:89:
                    80:e3:63:9f:55:6a:7a:f3:c6:2e:51:59:e0:44:f6:
                    24:26:8a:1c:f4:14:95:24:5f:72:30:95:ec:dc:36:
                    6d:1b:fd:6a:24:b4:3c:92:2e:95:d1:c1:90:48:f5:
                    dc:ac:72:e9:5d:66:09:b2:12:90:ee:f6:f4:af:22:
                    ba:0a:94:4c:bb:27:b5:a8:13:ca:32:94:60:cc:0f:
                    fa:ea:e6:cc:3d:af:f6:58:92:77:18:5f:63:d0:2b:
                    4c:f8:2b:96:62:8b:1d:12:93:33:73:01:9b:e1:3d:
                    a8:96:53:3d:0b:c3:e7:7c:7b:5d:0e:12:a1:f4:08:
                    94:34:e6:a1:d0:47:6e:45:1c:1a:20:63:bd:fc:3f:
                    06:94:9b:0c:35:43:24:86:15:12:c9:ee:4c:3d:81:
                    2a:be:59:da:8d:7a:b0:95:ef:0a:1d:0d:05:b2:5c:
                    6a:db:41:27:52:50:27:4a:a0:48:25:9d:5d:93:14:
                    f8:04:bb:92:fe:24:91:59:13:4c:62:24:1b:83:6c:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BD:26:5E:8A:80:DE:3A:C4:53:0C:93:E1:C8:E5:A2:DD:C3:CB:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/34ec7320-90a7-3d5a-9e62-d1e52e06381b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.crl

            X509v3 Authority Key Identifier:
                keyid:47:4E:F2:AE:AB:DC:F5:0E:EF:CA:87:51:88:BF:5F:36:6F:A5:80:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.9.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b4:d0:f2:cd:39:b2:5b:4c:bc:91:50:5d:aa:fb:98:de:d8:
         9e:0f:e4:a0:6d:b8:dc:6e:8c:b0:6b:c1:61:c5:04:d8:f2:82:
         30:73:9b:e0:92:6b:48:0b:d6:2c:69:39:20:be:f0:39:de:55:
         61:01:55:20:0b:fe:5f:34:95:bd:ab:1e:38:eb:6d:87:72:ff:
         18:66:7d:34:5a:96:c7:7e:f5:16:fd:fa:3a:1f:ac:84:60:2c:
         1f:7a:1d:37:c8:c8:c1:82:e4:3a:52:86:55:21:42:b7:fe:5b:
         c0:38:c0:f1:0d:83:f2:d3:95:cc:b0:98:cd:26:67:f5:9c:0b:
         79:50:f3:60:56:7e:7d:be:af:99:34:49:14:5a:15:f1:b1:10:
         71:f9:2f:c1:0b:4f:22:37:30:02:a7:f1:7e:e7:25:18:eb:39:
         f4:b0:b1:77:5c:e7:b6:b3:49:af:d5:9f:b3:20:e5:9a:a4:85:
         fd:5e:9e:98:09:90:b7:b1:82:b3:92:49:15:a0:04:e6:65:1f:
         6d:9e:99:db:cd:fe:4e:e5:9f:7a:01:af:45:a0:9b:59:3b:47:
         f9:a6:3b:fb:ce:96:69:b8:e7:fc:9c:6b:ca:64:af:58:d1:86:
         84:7d:af:f2:85:c1:63:3a:c6:64:02:7a:4e:47:84:57:5b:66:
         b0:88:20:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 16:14:52 2026 by rpki-client