Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/b94458ca-1cd6-3f6e-9743-59eaed0aaad1.roa
File:                     b94458ca-1cd6-3f6e-9743-59eaed0aaad1.roa (raw, json)
Hash identifier:          t0F3ASuS46JLMSwx8vCR4jpGb3CkS8gyqBRJfo7TQQs=
Subject key identifier:   25:F9:D1:2C:15:FE:68:4A:D5:6A:87:4A:3B:E5:39:71:65:4D:BE:2A
Certificate issuer:       /CN=6a4a98a7-67a3-40bb-b253-b11d6ed77f7a
Certificate serial:       010D0C9F4328584F99417937E71CEF0479105E00
Authority key identifier: 47:4E:F2:AE:AB:DC:F5:0E:EF:CA:87:51:88:BF:5F:36:6F:A5:80:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/b94458ca-1cd6-3f6e-9743-59eaed0aaad1.roa
Signing time:             Fri 23 Oct 2026 15:06:03 +0000
ROA not before:           Fri 23 Oct 2026 15:06:03 +0000
ROA not after:            Thu 21 Jan 2027 16:06:03 +0000
asID:                     402971
IP address blocks:        156.9.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:41:79:37:e7:1c:ef:04:79:10:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a4a98a7-67a3-40bb-b253-b11d6ed77f7a
        Validity
            Not Before: Oct 23 15:06:03 2026 GMT
            Not After : Jan 21 16:06:03 2027 GMT
        Subject: CN=ebfa40f4-5bfa-4028-bad9-f5dc9cd4b7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:36:72:ab:c2:b0:22:42:a0:39:09:79:ac:
                    80:a9:fa:41:46:9b:7d:3a:07:d3:ae:90:8b:08:b5:
                    9a:f0:33:84:c1:bd:a6:a7:a2:06:fc:41:ee:26:9a:
                    63:9e:b3:80:81:2c:b2:23:3c:56:90:b4:68:09:a3:
                    90:0a:06:11:d0:b0:29:cd:da:e3:44:5e:e7:ab:04:
                    20:12:08:9d:01:66:bd:fc:26:6a:dd:3d:7f:74:2e:
                    2a:13:b6:8e:ac:a7:69:2f:07:fb:bf:9f:97:c2:99:
                    04:e5:d5:5e:36:da:93:67:a2:a6:ee:34:5e:c9:b8:
                    19:3b:11:6a:c0:45:43:7a:82:ae:29:a4:7a:e9:28:
                    8a:3e:11:b2:5d:c3:70:eb:f6:ec:21:9f:bd:78:17:
                    c4:f8:8f:37:ea:ad:24:d0:f1:b1:8f:eb:e5:6e:b4:
                    c5:90:d1:97:e3:97:43:04:0c:29:5a:c7:d0:5a:50:
                    aa:f5:c2:7c:61:59:f8:c0:72:f6:69:2a:03:6b:34:
                    f7:e8:e3:59:ba:98:1a:c3:39:6e:1f:b0:30:34:ab:
                    96:c1:e8:df:3c:19:c0:7e:27:0b:89:34:82:06:57:
                    65:3c:b5:60:1d:95:cb:aa:2d:d0:ac:f5:0c:f4:7c:
                    ee:23:86:13:2e:d5:33:52:fd:c9:18:7e:54:c7:77:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F9:D1:2C:15:FE:68:4A:D5:6A:87:4A:3B:E5:39:71:65:4D:BE:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/b94458ca-1cd6-3f6e-9743-59eaed0aaad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.crl

            X509v3 Authority Key Identifier:
                keyid:47:4E:F2:AE:AB:DC:F5:0E:EF:CA:87:51:88:BF:5F:36:6F:A5:80:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.9.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:11:bd:24:ae:f2:a0:f4:27:73:5d:e6:87:e5:6f:2e:eb:02:
         2a:d8:5c:34:58:04:9f:75:e3:75:0c:10:18:8a:fa:32:5c:7c:
         cd:1c:0c:c2:63:a4:f3:d1:bc:58:00:ec:27:11:59:80:58:b6:
         64:d8:26:d4:a0:4d:90:3f:f3:33:86:14:3f:97:4b:41:71:37:
         98:83:30:aa:92:7e:50:9e:0e:37:cc:d9:ea:3e:25:be:de:c4:
         26:52:c5:22:69:dc:b7:8d:b7:4a:33:f7:6e:93:d1:59:d9:57:
         ed:94:0e:12:ca:c4:0d:a8:a8:ae:2e:65:31:c0:0b:32:00:2b:
         0b:9c:cd:2b:64:ee:1c:c3:59:5c:30:f7:4d:03:e7:43:d5:bc:
         8b:2b:74:66:6f:a9:5e:11:4d:77:c2:82:a4:55:77:2e:3b:8a:
         c0:e9:f6:96:e5:a5:98:78:06:2f:d1:1c:4b:ba:32:a5:b7:cf:
         de:98:a6:b4:39:14:21:1c:bd:19:0e:8f:5e:ff:1f:9a:86:0d:
         7d:d7:d5:79:a5:17:4e:18:56:ae:57:75:ed:02:43:41:a4:ad:
         75:cd:fb:f8:ae:97:95:ac:2a:63:e0:d4:f9:b0:8d:59:8e:f9:
         63:5f:8a:32:85:fb:5c:8d:1f:25:80:37:ed:90:f4:12:4e:a5:
         36:8f:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:31:59 2026 by rpki-client