Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/929d6704-0887-38bf-80da-9c831cd58557.roa
File:                     929d6704-0887-38bf-80da-9c831cd58557.roa (raw, json)
Hash identifier:          MaJQDIJ24zjkMoe6K55KCTCtH9frn1nHw6wVzSZoYtY=
Subject key identifier:   66:B4:E2:30:AE:1A:90:9B:8D:28:1A:EF:F4:00:88:52:82:8D:E7:27
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584F58CD583291789A75FC5CF880
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/929d6704-0887-38bf-80da-9c831cd58557.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     55246
IP address blocks:        209.237.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:58:32:91:78:9a:75:fc:5c:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=061859d7-c2b1-453b-b1c4-c4c94084909e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:54:7f:ac:db:e8:f6:31:3d:1b:77:db:15:
                    73:36:22:49:3d:4c:4f:ab:bb:52:28:56:3e:75:8b:
                    d5:25:8f:11:48:d1:d8:19:c5:0d:1c:42:3e:ea:d7:
                    b7:38:27:eb:60:8c:ac:1e:25:c8:9e:f2:be:2b:5c:
                    8d:3c:5d:0c:8e:90:be:41:a3:dd:a1:3a:41:2e:8c:
                    32:bc:67:a0:c9:e5:d2:dd:6f:70:f9:39:09:41:b8:
                    e7:74:4d:ed:b1:80:f1:9a:90:43:bb:36:d2:0f:cf:
                    ad:37:d3:ca:25:43:82:90:04:b3:23:38:7b:80:78:
                    e8:9c:06:cc:87:ba:19:fa:72:86:41:e6:a2:33:c2:
                    aa:b8:cf:68:6c:f3:f2:e1:05:51:9e:7b:96:94:de:
                    8d:ef:11:9a:f9:10:80:8c:27:f3:ed:d1:74:1f:ce:
                    40:2a:4b:a0:ac:ee:d7:82:cc:7e:0a:8f:73:80:e1:
                    d5:49:fd:68:2c:3e:a6:e5:67:be:df:44:8e:98:db:
                    d0:ac:e3:5d:16:ad:e0:21:ad:1a:50:28:6a:fd:1a:
                    11:69:46:6a:a1:50:47:51:3f:ae:73:4c:8b:a8:61:
                    00:00:69:84:d9:47:0e:cb:26:20:8f:6e:66:55:04:
                    ac:4b:b4:88:9f:b7:65:66:67:8f:df:04:fe:3e:51:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B4:E2:30:AE:1A:90:9B:8D:28:1A:EF:F4:00:88:52:82:8D:E7:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/929d6704-0887-38bf-80da-9c831cd58557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a9:b6:d0:5a:23:a3:e2:4c:d8:58:b7:2f:b5:b8:7c:4b:35:
         5c:15:28:90:38:3e:12:e0:dd:60:03:df:c2:d2:9e:06:3a:fd:
         77:13:09:e8:7d:1b:bc:5d:68:ce:54:e5:d2:32:20:b7:03:9a:
         11:c6:80:3f:86:94:31:be:24:3d:17:93:74:34:9e:69:79:67:
         75:6d:90:73:fb:72:9c:39:cf:c8:fe:cd:9d:8f:c1:07:1d:0e:
         6c:62:76:4e:fc:c3:be:e8:13:14:cb:84:dc:f3:1d:6e:39:e4:
         72:9c:94:0a:64:e8:71:12:74:5a:61:2f:07:db:72:b3:58:19:
         30:3b:a6:be:81:f5:71:45:0c:83:be:3e:ad:84:8c:56:9c:66:
         11:8b:90:3c:31:b0:2d:b4:7c:d5:7b:10:1d:da:3a:80:6f:fd:
         d5:de:b2:6a:91:27:39:2b:c1:fe:8a:4e:04:17:b9:d5:f7:3b:
         db:73:77:17:c1:37:bf:ff:2e:1a:4e:e6:3a:e5:50:12:16:42:
         0e:50:38:01:0e:4e:78:2c:ab:e2:9d:14:54:2b:02:9d:5d:a0:
         a7:7f:a3:32:41:03:89:bc:4a:0b:5f:87:ca:2e:12:45:41:c7:
         68:ac:39:8a:8f:e9:19:e4:b8:b7:f8:02:99:bf:e3:1b:ac:88:
         f3:13:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 09:32:18 2026 by rpki-client