Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/31edaec6-3c1a-3bf7-b5ad-852dfb8ab266.roa
File:                     31edaec6-3c1a-3bf7-b5ad-852dfb8ab266.roa (raw, json)
Hash identifier:          ys2FTlJnm9+Q38+uC5Hnj5S9NN1qjSKDO4mK3NZUfuM=
Subject key identifier:   AA:ED:1C:54:20:A6:E5:D4:BD:89:3B:CE:DB:4C:B3:83:34:76:CD:09
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F4328584F51D2955951D61871D8811940
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/31edaec6-3c1a-3bf7-b5ad-852dfb8ab266.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     393262
IP address blocks:        209.25.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:95:59:51:d6:18:71:d8:81:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=77afe061-b43f-49b1-b14d-33500f053c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:7c:fa:19:2f:83:72:9d:77:a0:78:90:41:
                    11:b1:ac:2f:62:e4:5e:ec:e0:44:03:58:04:19:bb:
                    28:50:c3:f5:39:32:6c:e7:0c:54:86:4f:6e:0e:ca:
                    a8:4a:4e:79:48:82:89:5b:94:57:b2:c9:a6:93:1a:
                    3c:35:05:bc:52:f6:a8:75:c3:dd:ef:3f:27:ba:b4:
                    bf:8e:17:c0:ac:14:20:00:cc:f3:69:77:c6:72:7b:
                    c6:a2:ec:a0:7d:74:6b:a9:14:30:0d:a2:e4:c1:f7:
                    66:f0:92:ca:d7:fb:90:d7:0a:2b:7f:26:5f:08:81:
                    31:70:67:37:1c:69:66:30:f4:f2:36:06:85:56:2a:
                    98:13:04:e7:b0:52:93:d0:df:07:c2:c7:2e:54:2d:
                    95:08:9d:8c:65:fb:f8:db:f7:31:41:cf:4d:37:81:
                    bf:9f:24:ec:9c:a9:db:e1:82:09:bd:ae:69:f0:10:
                    b1:03:a4:06:3f:21:50:57:e6:ee:2b:46:dd:0b:cf:
                    ca:ac:05:24:90:5c:80:1b:90:cc:20:a9:86:7b:49:
                    d1:fc:3e:72:c0:e2:66:c0:97:23:d4:91:e4:1a:43:
                    74:a0:39:9c:9b:c4:7f:1b:03:1c:b1:cb:3c:d6:af:
                    d9:02:5d:b3:d3:b9:b5:68:f9:94:97:f0:e5:90:11:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:ED:1C:54:20:A6:E5:D4:BD:89:3B:CE:DB:4C:B3:83:34:76:CD:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/31edaec6-3c1a-3bf7-b5ad-852dfb8ab266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.25.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1d:15:62:9d:f9:d1:c5:14:37:92:8b:97:2c:23:54:11:d8:
         d2:25:2b:91:e3:5e:36:c3:89:57:30:d7:5c:24:23:1c:75:26:
         bb:1c:96:5b:e0:39:1d:91:c4:33:3b:51:ad:f6:6d:12:b5:6c:
         73:39:1e:02:21:8c:cf:2f:2a:18:f6:b7:e7:42:7e:9c:4a:be:
         dc:9e:f9:51:63:a5:b6:28:ac:8f:7d:e5:38:51:d0:ab:87:2a:
         8b:9d:63:72:f2:31:b5:26:a8:2c:e5:0f:8b:97:19:58:d9:83:
         bd:be:9a:05:a7:ad:16:fb:18:2d:a6:ff:77:7c:56:14:39:5c:
         df:d6:66:cd:b5:34:6a:57:b6:5f:89:02:1b:ad:47:ef:2a:73:
         45:bd:04:11:b8:58:bb:f7:91:d8:71:28:47:2b:94:46:83:f4:
         12:64:2b:8b:2a:5d:9d:29:72:f7:2d:56:f8:8a:f6:53:a7:eb:
         90:ba:eb:5e:14:72:4a:ea:c1:67:c5:f6:cc:02:c5:3d:dd:b5:
         41:e8:ff:db:47:49:be:31:de:d9:1d:bb:dd:3c:7f:22:4e:c3:
         6f:43:5b:8e:9e:8f:d1:e7:4e:01:5b:4a:91:d6:42:c2:14:5e:
         db:0a:31:e5:c4:29:dc:73:0a:e3:e4:2a:28:58:bb:79:5a:ec:
         24:5f:1c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 23:28:53 2026 by rpki-client