Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/d832bc95-2901-35c5-8348-b7020d7cb0dd.roa
File:                     d832bc95-2901-35c5-8348-b7020d7cb0dd.roa (raw, json)
Hash identifier:          y8TGyrIsTa0xGOgup5lhJ/JlKAp+r1r4TzFfreR1yHo=
Subject key identifier:   20:08:F2:BD:08:29:0B:BE:95:50:77:24:3B:0A:EB:EE:E2:87:B2:FA
Certificate issuer:       /CN=dc139904-68bb-47e1-94f8-551bbfaaeeb4
Certificate serial:       010D0C9F4328584EEA054EAFA71BE9CC8DBAEF40
Authority key identifier: 9D:7A:4E:84:C3:34:1C:23:6C:D4:47:24:D9:83:D0:D9:CA:6E:93:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/d832bc95-2901-35c5-8348-b7020d7cb0dd.roa
Signing time:             Fri 21 Aug 2026 20:38:22 +0000
ROA not before:           Fri 21 Aug 2026 20:38:22 +0000
ROA not after:            Thu 19 Nov 2026 21:38:22 +0000
asID:                     14618
IP address blocks:        209.51.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:05:4e:af:a7:1b:e9:cc:8d:ba:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc139904-68bb-47e1-94f8-551bbfaaeeb4
        Validity
            Not Before: Aug 21 20:38:22 2026 GMT
            Not After : Nov 19 21:38:22 2026 GMT
        Subject: CN=839df860-215f-4b54-b86b-e59b710bacda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:e2:01:6f:c9:7c:50:46:10:e8:58:b3:6b:
                    eb:a0:9b:12:0f:f7:bf:69:cf:32:42:f5:65:5b:07:
                    92:27:ae:db:a5:e5:ba:7f:ec:ce:00:94:50:ee:95:
                    33:b4:be:80:ab:73:38:00:4d:12:41:fb:f8:78:95:
                    1f:97:ec:a0:d1:f3:53:6f:c5:15:95:ce:c8:e1:43:
                    7c:b9:75:14:d1:e0:43:7a:7b:21:75:b5:08:e4:99:
                    90:27:44:5d:aa:10:72:d8:dc:29:99:93:b1:a2:9c:
                    70:f1:28:b5:e3:a4:fa:fd:b1:11:ac:ab:50:29:76:
                    30:f7:3a:11:59:7b:bc:3a:06:ac:e6:f6:92:36:32:
                    b6:ec:3b:2d:66:1f:28:2b:a8:09:ab:e3:fd:36:16:
                    8e:15:3f:33:a0:a3:c4:8e:40:13:7d:ea:9d:5f:fa:
                    dd:b5:8d:5a:6b:0b:70:d7:4b:e2:f9:31:01:df:1a:
                    37:3e:28:1f:79:bf:be:49:2a:b2:68:20:c9:c2:6b:
                    67:de:b7:5d:e5:53:f0:96:c4:4b:32:87:2d:6f:fe:
                    65:f3:17:fe:50:24:98:6c:c5:61:0f:01:b6:ae:91:
                    d7:91:ac:b1:99:18:b3:39:99:77:bf:a8:c6:a2:eb:
                    61:41:fd:10:0e:42:12:71:8b:43:2f:1a:c5:1e:16:
                    54:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:08:F2:BD:08:29:0B:BE:95:50:77:24:3B:0A:EB:EE:E2:87:B2:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/d832bc95-2901-35c5-8348-b7020d7cb0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.crl

            X509v3 Authority Key Identifier:
                keyid:9D:7A:4E:84:C3:34:1C:23:6C:D4:47:24:D9:83:D0:D9:CA:6E:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:10:c1:eb:9a:74:21:d0:74:6a:fc:40:1e:1a:55:5c:ea:91:
         b2:81:c3:17:50:3c:d5:21:e8:8b:1e:f2:b0:d4:51:db:f5:28:
         64:7d:65:fb:66:13:79:75:9d:d3:10:90:2f:90:ac:a5:72:72:
         cd:aa:d3:c5:ff:1c:8b:28:a0:81:c2:44:c5:cd:e4:cd:1a:83:
         7a:15:21:0d:13:99:70:41:6c:cc:82:65:d6:9f:94:3c:dd:da:
         1f:f4:0c:34:55:8a:ac:01:81:e8:5f:c8:11:93:00:9d:74:cb:
         5e:13:2e:11:38:5c:da:78:14:22:1e:b1:ee:7b:93:b5:b5:3b:
         ff:2f:77:0d:e1:7e:15:1d:13:ef:65:55:33:77:d7:7a:33:58:
         a3:4a:ac:e3:67:7e:67:e0:c4:00:f4:16:f5:c4:8d:14:84:2c:
         60:bf:57:67:3e:44:7c:2b:86:73:55:9d:1f:b4:15:c8:4a:11:
         c8:b5:fc:bd:d5:d7:8d:07:5c:6f:5d:ef:46:8d:24:b0:c4:f0:
         86:57:0e:4b:a8:5d:8a:ab:e3:cb:0e:ef:90:e3:cb:17:d9:10:
         57:79:93:88:ab:58:f0:60:dd:4f:09:b5:27:e3:83:a1:92:54:
         31:dd:fa:dc:1c:2c:35:ff:a7:e1:19:04:30:f3:50:dc:0c:f4:
         45:99:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:32 2026 by rpki-client