Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e9768285-5277-31ee-87cd-d21d8e34fcf3.roa
File:                     e9768285-5277-31ee-87cd-d21d8e34fcf3.roa (raw, json)
Hash identifier:          AyNdG30ENflOhMNbj/+R5a709RcbIzNK5rMqTFGEiQk=
Subject key identifier:   0A:B0:D0:8C:EA:9F:EC:80:48:40:67:88:F7:1D:6F:E6:A3:FC:3F:C0
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2EA6831B494F5B5E71780
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e9768285-5277-31ee-87cd-d21d8e34fcf3.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     62044
IP address blocks:        209.55.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:ea:68:31:b4:94:f5:b5:e7:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=21618223-3a5d-4861-aff2-177c0a4f3a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:e6:8e:27:a5:ff:78:4e:e6:ee:03:fe:8f:
                    fa:c3:7a:34:64:87:b7:9d:7f:4d:8f:33:1b:b3:0b:
                    e8:1c:7d:55:1a:5e:e6:69:17:9f:e2:c4:da:fb:47:
                    0f:47:94:06:1e:2c:da:5a:90:14:2e:03:5c:72:f8:
                    b5:b9:4c:a8:9b:d2:7f:91:28:9a:ba:57:46:db:9f:
                    7c:5a:d5:b3:a6:c9:b5:fa:ce:a0:a9:b2:d2:e2:ce:
                    8f:15:27:ad:e5:15:9e:de:a8:67:7c:13:b6:7b:c9:
                    a9:04:37:f5:9b:a4:9a:11:67:8a:6f:b9:6e:c6:3b:
                    40:40:e5:9c:69:86:f8:05:c8:09:43:6b:f0:7a:fc:
                    29:36:12:ad:3f:f3:fe:31:95:11:f5:26:22:03:fe:
                    2a:81:43:c1:5c:38:a8:88:df:93:95:b5:cf:4e:28:
                    43:e3:d9:11:2f:1c:5e:ff:0b:dc:04:47:bc:1f:ca:
                    dd:ec:1f:0e:5b:d1:30:da:5b:17:28:f1:fa:76:a8:
                    2f:05:d8:49:bb:56:6f:ac:0c:59:32:bb:7b:13:de:
                    1e:3c:0e:3f:24:34:1e:90:3b:3d:3b:66:6c:f6:03:
                    ec:6c:12:bf:52:4f:58:d1:42:47:7e:0a:5f:d4:3c:
                    70:bb:df:d7:55:57:a2:8e:49:8d:96:a7:36:a7:68:
                    32:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B0:D0:8C:EA:9F:EC:80:48:40:67:88:F7:1D:6F:E6:A3:FC:3F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e9768285-5277-31ee-87cd-d21d8e34fcf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:1e:e5:f4:86:7a:d8:91:77:e0:94:65:72:86:99:a4:98:
         73:c9:fa:66:47:5f:8b:59:48:69:87:a9:17:c4:e5:54:34:7d:
         a6:bc:4d:0e:28:78:be:04:43:59:0e:4b:bb:5d:69:71:02:2b:
         6a:ff:b4:9e:9f:23:63:31:77:64:c1:68:91:08:19:8f:4d:98:
         d3:73:ac:cc:b4:64:80:64:14:80:1e:2d:14:64:1b:8e:ba:04:
         11:ec:30:7a:33:4b:96:7f:72:a7:37:fd:78:99:e1:38:5e:57:
         65:a7:bf:8d:eb:16:0b:9b:9c:19:43:17:5f:d0:09:72:49:e2:
         cb:3d:e5:50:0b:5b:db:79:34:90:ee:92:ac:73:f0:c8:f0:88:
         5d:7a:6d:a1:21:31:46:7d:15:10:3f:93:a0:49:a1:de:8f:75:
         d0:26:15:d6:87:80:52:88:76:0c:fe:ef:8f:ad:52:d3:23:cb:
         de:d6:f0:77:7f:bd:8b:86:66:0a:e5:21:0d:4f:60:f6:89:5b:
         c6:96:a7:e5:c1:b6:ac:2b:26:7a:1d:82:7a:58:65:c9:a0:23:
         40:b7:2e:5a:7d:d1:f5:86:49:e6:97:1e:4d:49:58:30:d5:f8:
         7a:87:0c:01:a5:6d:cc:08:98:90:f9:74:40:99:b0:fa:21:56:
         59:10:13:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:24:27 2026 by rpki-client