Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ae0a55c7-9f99-37de-bebc-cb4c40bdc630.roa
File:                     ae0a55c7-9f99-37de-bebc-cb4c40bdc630.roa (raw, json)
Hash identifier:          Yx6SokHD7S6olGM7ZQqyGrs6EdOjnLQPQXCPVRtF9vs=
Subject key identifier:   45:B9:FF:20:AC:BF:43:D9:99:39:4E:B5:D3:86:98:0A:F2:7D:7B:5A
Certificate issuer:       /CN=9ae61efc-a402-4975-bfe7-f7ddda75a628
Certificate serial:       010D0C9F4328584F20F7BCFFF99ABD6293784600
Authority key identifier: 57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ae0a55c7-9f99-37de-bebc-cb4c40bdc630.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     6206
IP address blocks:        209.135.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:bc:ff:f9:9a:bd:62:93:78:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae61efc-a402-4975-bfe7-f7ddda75a628
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=635f052d-7a80-4160-b3fc-31ec49c03ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:00:d7:3f:99:a7:95:85:98:a8:6a:36:ac:57:
                    42:64:7c:59:de:bf:24:a0:b5:0a:4e:40:17:d9:76:
                    c7:4f:62:e3:d0:26:70:24:6d:30:c9:3d:0b:fc:a8:
                    ed:da:d9:70:40:2c:6b:70:a0:86:9d:c0:6d:df:31:
                    4d:99:27:f5:6e:75:35:1a:e9:cd:3c:04:e1:29:57:
                    51:51:9c:83:54:6f:ed:25:61:8f:4b:f4:46:46:a3:
                    38:a3:11:d1:88:16:7c:56:33:ac:81:2c:b0:fd:30:
                    39:72:ff:9a:12:c1:84:cd:33:bf:70:ae:38:f0:17:
                    90:2b:17:d3:31:f5:65:48:8d:ee:71:e4:25:56:38:
                    cc:1a:ad:44:99:3e:a1:36:ea:9c:99:da:3e:88:7a:
                    b2:90:6c:7d:1b:24:d0:f6:b4:d5:75:56:bd:61:7a:
                    b9:58:f0:33:e7:27:95:9a:d5:3f:9b:aa:e3:f9:25:
                    e7:46:4e:08:a2:07:67:8f:ba:e8:59:53:e0:05:7c:
                    86:55:5e:f7:01:64:cd:bc:2c:cf:f6:d4:03:1f:02:
                    51:24:52:2e:ea:54:d3:4e:41:0f:1c:60:60:0e:0d:
                    49:2f:11:04:da:3b:f4:f3:5f:0e:89:a0:cf:bc:e3:
                    a3:37:2a:a2:46:71:f7:b5:8a:81:0f:32:f2:cd:c0:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B9:FF:20:AC:BF:43:D9:99:39:4E:B5:D3:86:98:0A:F2:7D:7B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ae0a55c7-9f99-37de-bebc-cb4c40bdc630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.crl

            X509v3 Authority Key Identifier:
                keyid:57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:bc:c4:90:e6:30:b3:16:66:cf:62:ac:dd:bb:c2:34:55:c8:
         f4:7a:19:e6:75:07:29:64:a6:9a:1e:fa:6f:8c:ee:62:ec:4a:
         4d:c6:58:e2:72:5b:ee:12:44:f2:3a:d8:c4:a9:60:41:15:a6:
         98:7d:91:e4:d7:98:3e:5d:e2:b7:a5:a8:40:dc:cd:46:94:71:
         75:b2:8b:b0:9c:a2:c7:73:af:4d:7d:2c:62:e1:ed:57:91:7f:
         57:d3:81:13:b1:4d:3f:5e:32:19:8e:49:da:de:45:13:da:0e:
         17:95:6f:84:97:4f:f0:90:50:55:05:75:24:02:90:2e:59:c9:
         57:0a:78:73:55:b2:60:5e:68:1d:6c:4b:23:18:8b:be:20:3e:
         33:38:d1:b6:0b:05:a3:6a:64:28:f8:07:76:c2:fb:4e:42:3d:
         c9:eb:3d:65:96:b2:1c:2e:65:7c:1c:3e:39:9c:00:d4:c1:89:
         59:72:e9:65:92:42:c4:4a:64:dc:f8:17:bb:97:c1:ce:ac:be:
         4d:da:05:4c:8d:be:dc:f9:2f:27:0c:27:bb:e5:13:d3:77:50:
         b5:8c:b9:9c:70:0f:77:89:dd:8e:74:c7:6f:31:42:50:94:94:
         16:c3:27:ca:70:f7:24:d9:0e:fa:ce:0f:cd:f6:a7:61:65:3b:
         a1:9c:37:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:45 2026 by rpki-client