Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d/0d9be78a-f9cf-37a2-816b-ea255b1483e1.roa
File:                     0d9be78a-f9cf-37a2-816b-ea255b1483e1.roa (raw, json)
Hash identifier:          YQ68cGOa/RcebU1nzeaBZsV2iKyXU+Qwq8zLcFxRciY=
Subject key identifier:   D0:CD:D9:BB:E5:6D:BC:02:FE:42:50:8A:44:CA:58:7F:82:CC:18:E6
Certificate issuer:       /CN=c676d317-6e70-4795-948d-39355456008d
Certificate serial:       010D0C9F4328584FAB62EE719824B7B30AB1C480
Authority key identifier: 47:1A:17:7F:E6:85:BD:C3:BE:F0:CC:37:AA:01:34:A7:E6:BE:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d/0d9be78a-f9cf-37a2-816b-ea255b1483e1.roa
Signing time:             Fri 30 Oct 2026 02:58:01 +0000
ROA not before:           Fri 30 Oct 2026 02:58:01 +0000
ROA not after:            Thu 28 Jan 2027 03:58:01 +0000
asID:                     400968
IP address blocks:        156.9.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d/c676d317-6e70-4795-948d-39355456008d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d/c676d317-6e70-4795-948d-39355456008d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:62:ee:71:98:24:b7:b3:0a:b1:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c676d317-6e70-4795-948d-39355456008d
        Validity
            Not Before: Oct 30 02:58:01 2026 GMT
            Not After : Jan 28 03:58:01 2027 GMT
        Subject: CN=7e34c642-5154-4a5f-aae8-3cda08a8c417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:79:da:be:c7:80:64:ad:16:72:91:61:35:
                    24:e3:12:44:28:80:74:18:48:2e:4a:55:83:ef:cb:
                    7a:4f:81:ce:68:ac:85:fe:a7:32:56:0e:bd:38:a7:
                    d1:c0:13:52:51:0b:19:21:5e:41:e5:b6:b0:3a:05:
                    b1:9f:83:09:80:cc:0f:6a:96:ea:6a:32:da:d4:12:
                    81:23:93:9c:1d:09:0b:2f:bc:15:08:7c:68:55:53:
                    d2:d9:1e:ca:7a:94:c0:68:dc:42:9a:7a:64:04:9c:
                    2d:b5:0b:b5:7f:48:23:54:c6:20:5a:b9:4e:0e:4c:
                    65:74:45:89:e6:ad:0c:21:e6:e3:2c:42:7a:d3:d3:
                    92:d7:06:48:6b:5b:28:7c:eb:3a:08:6d:72:36:ea:
                    0b:d2:47:50:ac:4c:90:52:8f:b4:62:ae:be:62:06:
                    b3:e9:d9:c0:d1:97:77:08:87:0a:00:3b:ab:17:45:
                    33:58:e1:97:9c:67:fb:44:2e:85:e7:07:ec:c9:07:
                    41:c9:20:bf:35:bd:45:bd:1f:47:d4:ae:63:23:13:
                    bb:f8:3c:85:71:09:87:8b:58:23:99:c3:f7:c6:e1:
                    f9:bb:da:f5:40:7b:ea:5c:df:5a:b2:ba:3d:4f:79:
                    8f:13:57:69:e3:b6:ed:18:2f:a2:d6:c9:67:d5:07:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CD:D9:BB:E5:6D:BC:02:FE:42:50:8A:44:CA:58:7F:82:CC:18:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d/0d9be78a-f9cf-37a2-816b-ea255b1483e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d/c676d317-6e70-4795-948d-39355456008d.crl

            X509v3 Authority Key Identifier:
                keyid:47:1A:17:7F:E6:85:BD:C3:BE:F0:CC:37:AA:01:34:A7:E6:BE:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.9.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:08:ac:49:87:ca:a0:96:43:60:3d:2f:34:4c:01:07:4c:
         79:04:7f:4f:3d:fc:d9:20:33:72:af:94:f1:60:58:c6:17:9a:
         7c:74:e0:31:53:c6:86:72:34:bc:8f:dc:99:00:f9:03:5b:d4:
         0c:62:90:0c:38:52:e1:6c:da:02:df:6c:2e:e8:87:de:bc:f5:
         89:06:12:62:cf:73:8c:04:fb:6f:49:b0:5f:44:c8:1a:84:45:
         e4:a6:bd:b7:c4:8c:fc:d3:5e:97:ad:6a:c5:11:d2:1d:a7:c9:
         00:23:d9:26:87:73:b0:b1:ef:7a:f9:41:50:54:bc:9c:40:8e:
         8b:c8:ba:91:48:4e:c2:c2:c8:ff:9f:03:c9:e5:66:6d:6f:0c:
         5d:e2:39:7e:b2:de:42:33:df:df:ce:ee:57:cc:63:eb:26:61:
         35:c6:a3:c0:7e:44:b7:f4:f1:8a:07:8b:b7:a6:9b:9c:74:ba:
         e8:c1:4b:cc:a3:62:d5:3e:e5:06:a4:53:8d:df:78:04:9a:c4:
         73:94:66:3c:b3:f6:b9:d6:18:8a:e1:44:5b:f2:47:91:ea:67:
         93:85:90:6c:0a:66:a6:34:e7:d3:99:e2:56:56:ea:c0:c1:e4:
         8a:e1:de:af:55:42:af:76:51:1a:72:7a:d3:6a:c7:06:58:dc:
         51:16:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:16:16 2026 by rpki-client